ABSTRACT
One of the most challenging issues for the QoP models is performing a multilevel
evaluation for complex and distributed systems. The manual analysis of such sys-
tems is almost impossible to perform. The analysis of any type of the security pro-
tocol is difficult when the experts do not use automated tools. In literature, we can
indicate programs which helped the experts analyze the protocols. We can indicate
the AVISPA tool [15, 88] or ProVerif [18, 49] application, which verifies security
properties for cryptographic protocols. From the Quality of Protection analysis point
of view, AVISPA and ProVerif have two limitations. The first one refers to the types
of the function which can be modeled; one can model only cryptographic primitives
and cryptographic algorithms. The full QoP analysis must refer to all security factors
which affect overall system security. The second limitation is that these languages
do not provide the structure for evaluation of the security factors’ performance. In
the literature one can indicate the tool for QoP analysis which is modeled on the
UMLsec [39]. This tool can be used for automated analysis of simple models but
when we would like to analyze the scenarios when thousands of hosts take part in
the protocol, then the analysis is too complex and cannot be done properly.
