Search papers, labs, and topics across Lattice.
This study evaluates the effectiveness of Large Language Models (LLMs) like GPT and DeepSeek in analyzing security protocols, comparing their performance against established formal verification tools such as ProVerif and OFMC. The results indicate that while chat models achieve a recall of 69 to 81% with low precision, reasoning models improve precision significantly but only detect slightly over half of the attacks. Ultimately, the findings suggest that LLMs do not match the accuracy of formal verification methods but could potentially function as preliminary screening tools for security analysis.
LLMs may not rival formal verification tools in security analysis, but they could serve as useful pre-screening filters for identifying vulnerabilities.
Security protocol verification relies on formal tools such as ProVerif and OFMC. This study evaluates whether Large Language Models (LLMs) can perform comparable analysis. We test GPT and DeepSeek in chat and reasoning modes over three runs on 130 obfuscated AnB/AnBx protocols covering 388 security goals, scored against ProVerif and OFMC. Chat models reach 69 to 81% recall at precision below 31%. Reasoning models reverse this trade-off, reaching 66.5% precision for GPT and 45.4% for DeepSeek, but detect just over half the attacks. DeepSeek's two modes share one underlying model, so the comparison isolates reasoning itself, which raises precision from 27.2% to 45.4%. The GPT contrast spans a model-version change and is only suggestive. All models perform worst on authentication goals: reasoning models detect well under half of injective and non-injective agreement attacks, whereas chat models over-flag them at low precision. Confidentiality is the exception, with F1 up to 95.7% in reasoning mode. Verdicts are unstable across runs, identical on 89.7% of goals for GPT but 74.0% for DeepSeek. Self-reported confidence is uniformly high yet shows no meaningful correlation with correctness. On this benchmark LLMs do not match formal verification, but may serve, at best, as pre-screening filters.
