{"id":"https://openalex.org/W3097629519","doi":"https://doi.org/10.1109/eurosp48549.2020.00014","title":"X-Men: A Mutation-Based Approach for the Formal Analysis of Security Ceremonies","display_name":"X-Men: A Mutation-Based Approach for the Formal Analysis of Security Ceremonies","publication_year":2020,"publication_date":"2020-09-01","ids":{"openalex":"https://openalex.org/W3097629519","doi":"https://doi.org/10.1109/eurosp48549.2020.00014","mag":"3097629519"},"language":"en","primary_location":{"id":"doi:10.1109/eurosp48549.2020.00014","is_oa":false,"landing_page_url":"https://doi.org/10.1109/eurosp48549.2020.00014","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE European Symposium on Security and Privacy (EuroS&P)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5027086484","display_name":"Diego Sempreboni","orcid":null},"institutions":[{"id":"https://openalex.org/I183935753","display_name":"King's College London","ror":"https://ror.org/0220mzb33","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I183935753"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Diego Sempreboni","raw_affiliation_strings":["King's College London,Department of Informatics,London,UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"King's College London,Department of Informatics,London,UK","institution_ids":["https://openalex.org/I183935753"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101515402","display_name":"Luca Vigan\u00f2","orcid":"https://orcid.org/0000-0001-9916-271X"},"institutions":[{"id":"https://openalex.org/I183935753","display_name":"King's College London","ror":"https://ror.org/0220mzb33","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I183935753"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Luca Vigan\u00f2","raw_affiliation_strings":["King's College London,Department of Informatics,London,UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"King's College London,Department of Informatics,London,UK","institution_ids":["https://openalex.org/I183935753"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I183935753"],"apc_list":null,"apc_paid":null,"fwci":1.4051,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.8067756,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"87","last_page":"104"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9909999966621399,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ceremony","display_name":"Ceremony","score":0.928076446056366},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7531059980392456},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5727640986442566},{"id":"https://openalex.org/keywords/payment","display_name":"Payment","score":0.5394907593727112},{"id":"https://openalex.org/keywords/voting","display_name":"Voting","score":0.502800703048706},{"id":"https://openalex.org/keywords/cryptographic-protocol","display_name":"Cryptographic protocol","score":0.4924129247665405},{"id":"https://openalex.org/keywords/security-analysis","display_name":"Security analysis","score":0.47445783019065857},{"id":"https://openalex.org/keywords/mutation","display_name":"Mutation","score":0.4629896879196167},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.4152109622955322},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.33594098687171936},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.2022421658039093},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.1563868522644043},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.07760202884674072},{"id":"https://openalex.org/keywords/politics","display_name":"Politics","score":0.07475095987319946}],"concepts":[{"id":"https://openalex.org/C2775843773","wikidata":"https://www.wikidata.org/wiki/Q2627975","display_name":"Ceremony","level":2,"score":0.928076446056366},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7531059980392456},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5727640986442566},{"id":"https://openalex.org/C145097563","wikidata":"https://www.wikidata.org/wiki/Q1148747","display_name":"Payment","level":2,"score":0.5394907593727112},{"id":"https://openalex.org/C520049643","wikidata":"https://www.wikidata.org/wiki/Q189760","display_name":"Voting","level":3,"score":0.502800703048706},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.4924129247665405},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.47445783019065857},{"id":"https://openalex.org/C501734568","wikidata":"https://www.wikidata.org/wiki/Q42918","display_name":"Mutation","level":3,"score":0.4629896879196167},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.4152109622955322},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.33594098687171936},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2022421658039093},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.1563868522644043},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.07760202884674072},{"id":"https://openalex.org/C94625758","wikidata":"https://www.wikidata.org/wiki/Q7163","display_name":"Politics","level":2,"score":0.07475095987319946},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C27206212","wikidata":"https://www.wikidata.org/wiki/Q34178","display_name":"Theology","level":1,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/eurosp48549.2020.00014","is_oa":false,"landing_page_url":"https://doi.org/10.1109/eurosp48549.2020.00014","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE European Symposium on Security and Privacy (EuroS&P)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6100000143051147,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":43,"referenced_works":["https://openalex.org/W43617550","https://openalex.org/W44769187","https://openalex.org/W50729311","https://openalex.org/W146244851","https://openalex.org/W798152072","https://openalex.org/W1495408127","https://openalex.org/W1536580911","https://openalex.org/W1543661381","https://openalex.org/W1598111807","https://openalex.org/W1607827729","https://openalex.org/W1782799247","https://openalex.org/W1832469506","https://openalex.org/W1871241722","https://openalex.org/W1930546125","https://openalex.org/W1973054120","https://openalex.org/W2002789557","https://openalex.org/W2066158003","https://openalex.org/W2081830543","https://openalex.org/W2085675184","https://openalex.org/W2104655005","https://openalex.org/W2111336263","https://openalex.org/W2114189125","https://openalex.org/W2119232573","https://openalex.org/W2121845793","https://openalex.org/W2133126578","https://openalex.org/W2135841285","https://openalex.org/W2296575472","https://openalex.org/W2395822484","https://openalex.org/W2401210256","https://openalex.org/W2507474852","https://openalex.org/W2534475152","https://openalex.org/W2587679938","https://openalex.org/W2891988338","https://openalex.org/W3003983481","https://openalex.org/W3030561455","https://openalex.org/W3162919972","https://openalex.org/W6605925781","https://openalex.org/W6622695584","https://openalex.org/W6632019758","https://openalex.org/W6712113454","https://openalex.org/W6712968997","https://openalex.org/W6728246355","https://openalex.org/W6733099171"],"related_works":["https://openalex.org/W2389808063","https://openalex.org/W3097629519","https://openalex.org/W2358638783","https://openalex.org/W2252724828","https://openalex.org/W2379701766","https://openalex.org/W164648224","https://openalex.org/W2551197715","https://openalex.org/W1533722674","https://openalex.org/W2140451704","https://openalex.org/W2766896269"],"abstract_inverted_index":{"There":[0],"is":[1,30,137],"an":[2],"increasing":[3],"number":[4,174],"of":[5,64,76,87,91,104,144,154,160,175],"cyber-systems":[6],"(e.g.,":[7],"payment,":[8],"transportation,":[9],"voting,":[10],"critical-infrastructure":[11],"systems)":[12],"whose":[13],"security":[14,21,25,50,65,155],"depends":[15],"intrinsically":[16],"on":[17],"human":[18,41,78],"users.":[19],"A":[20],"ceremony":[22,93,107,121],"expands":[23],"a":[24,57,77,138,158,173],"protocol":[26],"with":[27],"everything":[28],"that":[29,40,72,140],"considered":[31],"out-of-band":[32],"to":[33,94,167],"it,":[34],"including,":[35],"in":[36,48,84,118],"particular,":[37],"the":[38,49,61,85,88,92,96,102,105,116,120,133,145,150],"mistakes":[39],"users":[42],"might":[43],"make":[44],"when":[45],"participating":[46],"actively":[47],"ceremony.":[51],"In":[52],"this":[53],"paper,":[54],"we":[55,130,162],"introduce":[56],"novel":[58],"approach":[59,68,166],"for":[60,101,149],"formal":[62],"analysis":[63,103],"ceremonies.":[66],"Our":[67],"defines":[69],"mutation":[70],"rules":[71],"model":[73],"possible":[74,111],"behaviors":[75],"user,":[79],"and":[80,109],"automatically":[81],"generates":[82],"mutations":[83],"behavior":[86],"other":[89],"agents":[90],"match":[95],"human-induced":[97],"mutations.":[98],"This":[99],"allows":[100],"original":[106],"specification":[108],"its":[110],"mutations,":[112],"which":[113,119,136],"may":[114],"include":[115],"way":[117],"has":[122],"actually":[123],"been":[124],"implemented.":[125],"To":[126],"automate":[127],"our":[128,165],"approach,":[129],"have":[131,163],"developed":[132],"tool":[134],"X-Men,":[135],"prototype":[139],"extends":[141],"Tamarin,":[142],"one":[143],"most":[146],"common":[147],"tools":[148],"automatic":[151],"unbounded":[152],"verification":[153],"protocols.":[156],"As":[157],"proof":[159],"concept,":[161],"applied":[164],"two":[168],"real-life":[169],"case":[170],"studies,":[171],"uncovering":[172],"concrete":[176],"vulnerabilities.":[177]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":5}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}