﻿<?xml version="1.0" encoding="UTF-8"?>
<b:Sources SelectedStyle="" xmlns:b="http://schemas.openxmlformats.org/officeDocument/2006/bibliography"  xmlns="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" >
<b:Source>
<b:Tag>hess.ea:pspsp:2025</b:Tag>
<b:SourceType>ArticleInAPeriodical</b:SourceType>
<b:Publisher>IOS Press</b:Publisher>
<b:Year>2025</b:Year>
<b:Month>November</b:Month>
<b:PeriodicalTitle>Journal of Computer Security</b:PeriodicalTitle>
<b:Volume>33</b:Volume>
<b:Issue>6</b:Issue>
<b:Url>https://doi.org/10.1177/0926227X251358741</b:Url>
<b:Author>
<b:Author><b:NameList>
<b:Person><b:Last>Hess</b:Last><b:First>Andreas</b:First><b:Middle>Viktor</b:Middle></b:Person>
<b:Person><b:Last>Mödersheim</b:Last><b:First>Sebastian</b:First><b:Middle>Alexander</b:Middle></b:Person>
<b:Person><b:Last>Brucker</b:Last><b:First>Achim</b:First><b:Middle>D</b:Middle></b:Person>
<b:Person><b:Last>Schlichtkrull</b:Last><b:First>Anders</b:First></b:Person>
</b:NameList></b:Author>
</b:Author>
<b:Title>PSPSP: A Tool for Automated Verification of Stateful Protocols in Isabelle/HOL</b:Title>
<b:Comments>In protocol verification we observe a wide spectrum from fully automated methods to interactive theorem proving with proof assistants like Isabelle/HOL. The latter provide overwhelmingly high assurance of the correctness, which automated methods often cannot: due to their complexity, bugs in such automated verification tools are likely and thus the risk of erroneously verifying a flawed protocol is non-negligible. There are a few works that try to combine advantages from both ends of the spectrum: a high degree of automation and assurance. We present here a first step towards achieving this for a more challenging class of protocols, namely those that work with a mutable long-term state. To our knowledge this is the first approach that achieves fully automated verification of stateful protocols in an LCF-style theorem prover. The approach also includes a simple user-friendly transaction-based protocol specification language embedded into Isabelle, and can also leverage a number of existing results such as soundness of a typed model.</b:Comments>
</b:Source>
</b:Sources>
