Understanding the Usability of Cryptographic Verification Tools

📅 2026-09-14
📈 Citations: 0
Influential: 0
📄 PDF
🤖 AI Summary
研究通过调查Tamarin和ProVerif等工具的用户体验,识别了加密协议验证工具在易用性上的障碍,并提出改进设计的具体建议以提高这些工具的可访问性和可用性。
📝 Abstract
Cryptographic protocol verification tools are widely used to analyze the security of complex protocols, yet how users interact with these tools remains comparatively understudied. We present an exploratory human-centered study of experienced users of Tamarin, ProVerif, and related protocol verifiers. Our survey included researchers, graduate students, and practitioners with hands-on experience using Tamarin, ProVerif, or related tools. The findings reveal usability barriers across the verification workflow, including difficulties debugging non-termination and performance issues, and the lack of systematic methods for validating formal models against real protocols. When proofs fail without concrete attacks, users commonly simplify models, add helper lemmas, and revisit modeling abstractions. Participants also called for actionable diagnostics, clearer explanations of results, visualization, and automation for recurring proof tasks. Our findings suggest that persistent usability challenges arise from the gap between protocol-level reasoning and the verifier's formal model, proof procedures, and diagnostic output. We derive concrete design priorities for improving the accessibility, interpretability, and usability of cryptographic protocol verification tools.
Problem

Research questions and friction points this paper is trying to address.

usability
cryptographic verification tools
user interaction
debugging
formal models
Innovation

Methods, ideas, or system contributions that make the work stand out.

Usability Barriers
Formal Models Validation
Actionable Diagnostics
Visualization
Automation
🔎 Similar Papers
No similar papers found.
T
Tarikul Islam
Samsung R&D Institute Bangladesh
Y
Yasin Islam
Bangladesh University of Engineering and Technology
K
Khandakar Ashrafi Akbar
Towson University
Imtiaz Karim
Imtiaz Karim
Assistant Professor, Computer Science, The University of Texas at Dallas
Network SecuritySystem Security5GProtocol Security