A Handover Security Mechanism Employing the Diffie-Hellman Key Exchange Approach for the IEEE802.16e Wireless Networks

Ciou, Yi-Fu; Leu, Fang-Yie; Huang, Yi-Li; Yim, Kangbin

doi:10.1155/2011/408103

Cited by 14 publications

(9 citation statements)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This method could be effective for initial network entry but needs to be applied in the other processes, such as HO, which has been considered in .…”

Section: Enhancements Of Wimax Authentication Processmentioning

confidence: 99%

See 1 more Smart Citation

Authentication process enhancements in WiMAX networks

Alezabi

Hashim

et al. 2016

Security Comm Networks

View full text Add to dashboard Cite

Authentication is one of the most important security processes in Worldwide Interoperability for Microwave Access (WiMAX) networks. This process allows the receiver (whether base station or subscriber station) of a packet to be confident of the identity of the sender and the integrity of the message. Most attacks will attempt to violate the authentication process. If such attacks become successful, an attacker will gain an illegitimate access to network resources, thus increasing the probability of future malicious attacks. A number of algorithms and methods have been proposed to improve the security level of authentication in WiMAX networks. However, the evaluations of these algorithms and methods have always been based on a particular aspect, such as reducing overhead, protecting unauthenticated management messages, preventing WiMAX from external attacks, and protection during the handover process. Motivated by these variations, we review the state of art of WiMAX authentication mechanisms, namely, PKMv1, PKMv2, and the recent authentication protocols. We discuss their mechanisms, strengths, weaknesses, and potential countermeasures against each other. Our discussion is based on four categories, namely, enhancements, differences, advantages, and limitations. Copyright © 2016 John Wiley & Sons, Ltd.

show abstract

“…This method could be effective for initial network entry but needs to be applied in the other processes, such as HO, which has been considered in .…”

Section: Enhancements Of Wimax Authentication Processmentioning

confidence: 99%

“…It provides forward and backward secrecy based on the least privilege principle. In , the authors have proposed an authentication mechanism called handover key management and authentication system (HaKMA). This mechanism is based on the DH‐public key distribution system authentication method.…”

Section: Enhancements Of Wimax Authentication Processmentioning

confidence: 99%

Authentication process enhancements in WiMAX networks

Alezabi

Hashim

et al. 2016

Security Comm Networks

View full text Add to dashboard Cite

show abstract

“…The authors in [42] proposed an agent-based model to find the issues of intrusion detection in cluster based mobile wireless ad hoc network environment and evaluated how agent based approach facilitates flexible and adaptable security services. Ciou et al [9] proposed an effective and efficient handover key management and authentication scheme during handover by speeding up the handover process through Diffie-Hellman key exchange scheme in order to increase the security level for mobile stations (MSs).…”

Section: Secure Mobile Networkingmentioning

confidence: 99%

A Methodology to Counter DoS Attacks in Mobile IP Communication

Parvin

Hussain

Ali

2012

Mobile Information Systems

View full text Add to dashboard Cite

Similar to wired communication, Mobile IP communication is susceptible to various kinds of attacks. Of these attacks, Denial of Service (DoS) attack is considered as a great threat to mobile IP communication. The number of approaches hitherto proposed to prevent DoS attack in the area of mobile IP communication is much less compared to those for the wired domain and mobile ad hoc networks. In this work, the effects of Denial of Service attack on mobile IP communication are analyzed in detail. We propose to use packet filtering techniques that work in different domains and base stations of mobile IP communication to detect suspicious packets and to improve the performance. If any packet contains a spoofed IP address which is created by DoS attackers, the proposed scheme can detect this and then filter the suspected packet. The proposed system can mitigate the effect of Denial of Service (DoS) attack by applying three methods: (i) by filtering in the domain periphery router (ii) by filtering in the base station and (iii) by queue monitoring at the vulnerable points of base-station node. We evaluate the performance of our proposed scheme using the network simulator NS-2. The results indicate that the proposed scheme is able to minimize the effects of Denial of Service attacks and improve the performance of mobile IP communication.

show abstract

“…Sender buffer sizes were set to fifty packets (WiMAX MAC Protocol Data Units (PDUs) [3]), as is normal to reduce buffer waiting time and reduce energy consumption at the SSs. For clarity of interpretation of the results, this paper does not model horizontal handovers, though it should be noted these are a real possibility that can disrupt video streams, and in [6] there is a proposal to speed-up connection set-up in WiMAX handovers. Related work on efficient key exchange during mobile roaming can be found in [15].…”

Section: Wimax Modelingmentioning

confidence: 99%

Comprehensive Protection of Data-Partitioned Video for Broadband Wireless IPTV Streaming

Al-Jobouri

Fleury

Ghanbari

2012

Mobile Information Systems

View full text Add to dashboard Cite

This paper examines the threat to video streaming from slow and fast fading, traffic congestion, and channel packet drops. The proposed response is a combination of: rateless channel coding, which is adaptively applied; data-partitioned source coding to exploit prioritized packetization; and duplicate slice provision, which is the focus of the evaluation in this paper. The paper also considers the distribution of intra-refresh macroblocks as a means of avoiding sudden data rate increases. When error bursts occur, this paper shows that duplicate slices are certainly necessary but this provision is more effective for medium quality video than it is for high quality video. The percentage of intra-refresh macroblocks can be low and still reduce the impact of temporal error propagation.

show abstract

A Handover Security Mechanism Employing the Diffie-Hellman Key Exchange Approach for the IEEE802.16e Wireless Networks

Cited by 14 publications

References 17 publications

Authentication process enhancements in WiMAX networks

Authentication process enhancements in WiMAX networks

A Methodology to Counter DoS Attacks in Mobile IP Communication

Comprehensive Protection of Data-Partitioned Video for Broadband Wireless IPTV Streaming

Contact Info

Product

Resources

About