Security Protocols: Principles and Calculi

This paper is a basic introduction to some of the main themes in the design and analysis of security protocols. It includes a brief explanation of the principles of protocol design and of a formalism for protocol analysis. It is intended as a written counterpart to a tutorial given at the 2006 International School on Foundations of Security Analysis and Design. Over the last 30 years, work on security protocols has led to a number of ideas and techniques for protocol design, to a number of protocol implementations, and also to many attacks. Gradually, it has also led to mature techniques for analyzing protocols, and to an understanding of how to develop more robust protocols that address a range of security concerns.