SPDL specifications:Security Enhancement and Technique to Overcome Software Weakness for Android-Based Local Storage

This dataset is for publishing our SPDL specifications for proposed protocol described in "(Submitted to journal)Security Enhancement and Technique to Overcome Software Weakness for Android-Based Local Storage". One can check any detail information by reading above paper. [Tools for Security Protocol Verification] A poorly designed security protocol can attract malicious attacks because of its potential vulnerability. To prevent such attacks, security protocol verification before implementation is important. As a flaw in the security protocol design is among the security weaknesses, prevention is important. Thus, the security properties of the security protocol should be verified in advance using a formal technique. Various tools have been used for security protocol verification, such as Failures-Divergences Refinement (FDR)/Casper, Automated Validation of Internet Security Protocols and Applications (AVISPA), Proverif, and Scyther. In this study, the proposed preventive technique is verified using Scyther, based on a protocol description written in Security Protocol Description Language (SPDL); this provides verification, counterevidence, and analysis of the protocol in graphical user interface (GUI) form. [Modeling Proposed Protocol in SPDL for Scyther] Scyther receives the protocol description specified in SPDL and provides verification results. All entities, such as the client or server, are represented by roles. In this study, roles D and S are defined as the client and server, respectively. We publish our SPDL specifications for each global variable definition, initialization phase, and authentication phase on Mendeley Data and provide it publicly available to the research community.本数据集用于发布我们针对已投稿期刊论文《面向安卓本地存储的软件弱点克服与安全增强技术》（Security Enhancement and Technique to Overcome Software Weakness for Android-Based Local Storage）中所提出协议的安全协议描述语言（Security Protocol Description Language, SPDL）规范。读者可通过阅读上述论文获取该研究的全部细节信息。 【安全协议验证工具】 设计存在缺陷的安全协议可能因潜在漏洞而遭受恶意攻击。为防范此类攻击，在协议实现前开展安全协议验证至关重要。由于安全协议的设计缺陷属于安全弱点范畴，前置防范尤为关键。因此，需借助形式化技术预先验证安全协议的安全属性。当前已有多款工具可用于安全协议验证，例如失效发散精化（Failures-Divergences Refinement, FDR）/Casper、互联网安全协议与应用自动验证工具（Automated Validation of Internet Security Protocols and Applications, AVISPA）、Proverif以及Scyther。本研究基于采用SPDL编写的协议描述，借助Scyther对所提出的防护技术进行验证，该工具可通过图形用户界面（Graphical User Interface, GUI）形式提供协议验证、反例生成与分析结果。 【面向Scyther的SPDL协议建模】 Scyther可接收采用SPDL编写的协议描述并输出验证结果。所有协议实体（如客户端或服务端）均以角色形式进行表征。本研究中，我们将角色D与角色S分别定义为客户端与服务端。我们已将全局变量定义、初始化阶段与认证阶段对应的SPDL规范发布至Mendeley Data平台，并向全球科研社区公开提供该数据集的访问权限。