CISPA
Browse
cispa_all_3851.pdf (1.3 MB)

Automated Security Analysis of Exposure Notification Systems

Download (1.3 MB)
conference contribution
posted on 2023-11-29, 18:24 authored by Kevin MorioKevin Morio, Ilkan Esiyok, Dennis Jackson, Robert KünnemannRobert Künnemann
We present the first formal analysis and comparison of the security of the two most widely deployed exposure notification systems, ROBERT and the Google and Apple Exposure Notification (GAEN) framework. ROBERT is the most popular instalment of the centralised approach to exposure notification, in which the risk score is computed by a central server. GAEN, in contrast, follows the decentralised approach, where the user's phone calculates the risk. The relative merits of centralised and decentralised systems have proven to be a controversial question. The majority of the previous analyses have focused on the privacy implications of these systems, ours is the first formal analysis to evaluate the security of the deployed systems---the absence of false risk alerts. We model the French deployment of ROBERT and the most widely deployed GAEN variant, Germany's Corona-Warn-App. We isolate the precise conditions under which these systems prevent false alerts. We determine exactly how an adversary can subvert the system via network and Bluetooth sniffing, database leakage or the compromise of phones, back-end systems and health authorities. We also investigate the security of the original specification of the DP3T protocol, in order to identify gaps between the proposed scheme and its ultimate deployment. We find a total of 27 attack patterns, including many that distinguish the centralised from the decentralised approach, as well as attacks on the authorisation procedure that differentiate all three protocols. Our results suggest that ROBERT's centralised design is more vulnerable against both opportunistic and highly resourced attackers trying to perform mass-notification attacks.

History

Preferred Citation

Kevin Morio, Ilkan Esiyok, Dennis Jackson and Robert Künnemann. Automated Security Analysis of Exposure Notification Systems. In: Usenix Security Symposium (USENIX-Security). 2023.

Primary Research Area

  • Threat Detection and Defenses

Name of Conference

Usenix Security Symposium (USENIX-Security)

Legacy Posted Date

2022-10-14

Open Access Type

  • Green

BibTeX

@inproceedings{cispa_all_3851, title = "Automated Security Analysis of Exposure Notification Systems", author = "Morio, Kevin and Esiyok, Ilkan and Jackson, Dennis and Künnemann, Robert", booktitle="{Usenix Security Symposium (USENIX-Security)}", year="2023", }

Usage metrics

    Categories

    No categories selected

    Licence

    Exports

    RefWorks
    BibTeX
    Ref. manager
    Endnote
    DataCite
    NLM
    DC