Meier, JanJanMeier2023-02-232023-02-232011Security protocols XVI : 16th international workshop, Cambridge, UK, April 16 - 18, 2008 ; revised selected papers. - Berlin, 2011. - (Lecture Notes in Computer Science ; 6615 LNCS (): 25-35 (2011)http://hdl.handle.net/11420/14873We identify attacker modelling as major obstacle when searching for ways to defeat security protocols. For protocols verified to be secure, attacks are discovered. Since this problem is not limited to the Dolev-Yao attacker but applies to all modelled attackers, we propose a new approach. We argue that formal verification methods should be used to show the impact of analyst provided actions have on protocols. This approach frees verification tools from having to know all the actions an attacker could perform. We show the benefits of having both the security proof and an explicit list of considered actions. Implementers can easily determine if the protocol is suited for their application. Additionally, developers understand the requirements an implementation has to fulfil. Lastly, our approach allows proofs to be adapted to new environments without changing the verification tool.enInformatikDo not model the attackerConference Paper10.1007/978-3-642-22137-8_5Conference Paper