Intensional specifications of security protocols

It is often diicult to specify exactly what a security protocol is intended to achieve, and there are many example of attacks on protocol which have been proved to satisfy thèwrong', or too weak a speciica-tion. Contrary to the usual approach of attempting to capture what it is that protocol achieves in abstract terms, we propose a readily automatable style of speciication which simply asserts that a node can only complete its part in a protocol run if the pattern of messages anticipated by the designer has occurred. While this intensional style of speciication does not replace more abstract ones such as conndentiality, it does appear to preclude a wide range of the styles of attack that are hardest to exclude by other means.