JavaSPI: A Framework for Security Protocol Implementation

摘要

This paper presents JavaSPI, a "model-driven"developmentframeworkthat allowsthe user to reliably develop security protocol implementations in Java, starting from abstract models that can be verified formally. The main novelty of this approach stands in the use of Java as both a modeling language and the implementation language. The JavaSPI framework is validated by implementing a scenario of the SSL protocol. The JavaSPI implementation can successfully interoperate with OpenSSL, and has comparable execution time with the standard Java JSSE library.