cispa_all_3851.pdf (1.3 MB)

Automated Security Analysis of Exposure Notification Systems

Download (1.3 MB)
conference contribution
posted on 2023-11-29, 18:24 authored by Kevin MorioKevin Morio, Ilkan Esiyok, Dennis Jackson, Robert KünnemannRobert Künnemann
We present the first formal analysis and comparison of the security of the two most widely deployed exposure notification systems, ROBERT and the Google and Apple Exposure Notification (GAEN) framework. ROBERT is the most popular instalment of the centralised approach to exposure notification, in which the risk score is computed by a central server. GAEN, in contrast, follows the decentralised approach, where the user's phone calculates the risk. The relative merits of centralised and decentralised systems have proven to be a controversial question. The majority of the previous analyses have focused on the privacy implications of these systems, ours is the first formal analysis to evaluate the security of the deployed systems---the absence of false risk alerts. We model the French deployment of ROBERT and the most widely deployed GAEN variant, Germany's Corona-Warn-App. We isolate the precise conditions under which these systems prevent false alerts. We determine exactly how an adversary can subvert the system via network and Bluetooth sniffing, database leakage or the compromise of phones, back-end systems and health authorities. We also investigate the security of the original specification of the DP3T protocol, in order to identify gaps between the proposed scheme and its ultimate deployment. We find a total of 27 attack patterns, including many that distinguish the centralised from the decentralised approach, as well as attacks on the authorisation procedure that differentiate all three protocols. Our results suggest that ROBERT's centralised design is more vulnerable against both opportunistic and highly resourced attackers trying to perform mass-notification attacks.


Preferred Citation

Kevin Morio, Ilkan Esiyok, Dennis Jackson and Robert Künnemann. Automated Security Analysis of Exposure Notification Systems. In: Usenix Security Symposium (USENIX-Security). 2023.

Primary Research Area

  • Threat Detection and Defenses

Name of Conference

Usenix Security Symposium (USENIX-Security)

Legacy Posted Date


Open Access Type

  • Green


@inproceedings{cispa_all_3851, title = "Automated Security Analysis of Exposure Notification Systems", author = "Morio, Kevin and Esiyok, Ilkan and Jackson, Dennis and Künnemann, Robert", booktitle="{Usenix Security Symposium (USENIX-Security)}", year="2023", }

Usage metrics


    No categories selected



    Ref. manager