A framework for secure networking
Network protocols such as TLS can be customized through a vast array of options with unpredictable interactions and dangerous security implications.
To fight this scenario, we are developing accountable protocol customization, a framework that combines synthesis, testing, and verification techniques to extract backward-compatible, lean protocol subsets while meeting realistic functional and security requirements. Our ultimate goal is to target widely used standards for network infrastructure, secure messaging, federated authentication, and the Internet of Things.
Accountable protocol customization is a joint collaboration led by researchers at Carnegie Mellon University, University of Pennsylvania and Stanford University, and funded by the Office of Naval Research.