DoS and authentication in wireless public access networks

Faria, Daniel B.; Cheriton, David R.

doi:10.1145/570681.570687

Cited by 45 publications

(24 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The Supplicant after receiving message1 generates other random value SNonce, MAC address of the supplicant that is SPA and derives a fresh temporal key Public Transient Key (PTK) which is a function of both SNonce and ANonce and stores both ANonce and SNonce in the memory. Than supplicant generates other message, Message2 which consist of SPA, SNonce, Sequence Number and MIC value which is a function of all other fields and is generated using calculated PTK as the key [7,13]. MIC is calculated in order to preserve the integrity of the send message as other fields are sent as plain text.…”

Section: -Way Handshakementioning

confidence: 99%

“…MIC is calculated in order to preserve the integrity of the send message as other fields are sent as plain text. On receiving Message2, AP generates PTK using the same method and verifies received MIC with the calculated one in order to guarantee its integrity [13]. Then again it constructs Message3 as shown in Figure2 which serves as an acknowledgement of message2 which is verified at supplicant side in order to confirm that correct PTK has been generated at other end, Message4 is again the acknowledgement by the supplicant.…”

Section: -Way Handshakementioning

confidence: 99%

“…The mechanism defined by IEEE 802.11i is vulnerable to memory exhaustion attacks [11], [13], [14] and DoS flooding .So, to handle these types of attacks we need to develop some security mechanisms. The weakness of 4-way handshake phase of 802.11i standard is the first message that is Message1 because of not using any MIC field in order to guarantee the message integrity.…”

Section: Dos and Memory Exhaustion Attacks On 4-way Handshakementioning

confidence: 99%

See 2 more Smart Citations

Prevention of DoS and Memory Attacks: Enhanced 3-Way Handshake

Singhal¹,

Diwakar²,

Katre³

2013

IJCA

View full text Add to dashboard Cite

In today's world most organizations are moving from wireconnected LAN to wireless LAN. The phenomenal popularity of the 802.11 network standards stems from the fact that they provide for wireless connections with ease and convenience. Recently, security holes have been identified in the operation of 802.11 networks, and the 802.11i protocol has been announced to protect such networks. However, there are still security issues that prevent the 802.11 network from becoming the best choice protocol for wireless LANs. We reviewed 802.11i security with a focus on a denial of service attack. This attack exhausts the client's memory using a vulnerability of the key derivation procedure in 802.11i. It is vulnerable to various Denial of Service attacks (DoS) which includes de-authentication and disassociation attacks including memory exhaustion attacks. For Dos and memory exhaustion attacks which are possible in 4-way handshake ,this paper provides an enhanced 3-way Handshake algorithm which is free from these attacks in comparison to original protocol and is more secure.

show abstract

Section: -Way Handshakementioning

confidence: 99%

Section: -Way Handshakementioning

confidence: 99%

Section: Dos and Memory Exhaustion Attacks On 4-way Handshakementioning

confidence: 99%

See 1 more Smart Citation

Prevention of DoS and Memory Attacks: Enhanced 3-Way Handshake

Singhal¹,

Diwakar²,

Katre³

2013

IJCA

View full text Add to dashboard Cite

show abstract

“…The mechanism defined by IEEE 802.11i is vulnerable to memory exhaustion attacks [11], [13], [14] and DoS flooding.…”

Section: Dos and Memory Exhaustion Attacks On 4-way Handshakementioning

confidence: 99%

Prevention of DoS and Memory Exhaustion Attacks: Key Distribution with Confidentiality and Authentication

Singhal¹,

Diwakar²,

Katre³

2012

IJCA

View full text Add to dashboard Cite

Now a day's most of the organizations are moving from wireconnected LAN to wireless LAN. The popularity of the 802.11 network standards stems from the fact that they provide for wireless connections with simplicity and convenience. But, there are many security issues which have been identified in the operation of 802.11 networks, and the 802.11i protocol has been announced to protect these types of networks. 802.11i protocol security has with a focus on an active attack and a passive attack. These types of attacks exhaust the client's memory using a vulnerability of the key derivation procedure in 802.11i. It is vulnerable to various active and passive attacks which include de-authentication and disassociation attacks. For active and passive attacks( denial of services and memory exhaustion ) which are possible in 4-way handshake, this paper provides a secret key distribution with confidentiality and authentication and can also say that this procedure of secret key distribution is free from these active and passive attacks in comparison to original protocol and is more secure. General Terms: Security

show abstract

“…Those filters, constructed on the basis of a Kerberos authentication, are used by the access point to allow or deny the access of client stations to the network. This approach is vulnerable to IP Spoofing attacks, and to IP based DoS attacks 10 .…”

Section: Kerberos In Wireless Environmentsmentioning

confidence: 99%

A Kerberos-Based Authentication Architecture for WLANS

Kâafar

Azzouz

Kamoun

IFIP International Federation for Information Processing

View full text Add to dashboard Cite

Abstract:This work addresses the issues related to authentication in wireless LAN environments, with emphasis on the IEEE 802.11 standard. It proposes an authentication architecture for Wireless networks. This architecture called Wireless Kerberos (W-Kerberos), is based on the Kerberos authentication server and the IEEE 802.1X-EAP model, in order to satisfy both security and mobility needs. It then, provides a mean of protecting the network, assuring mutual authentication, thwarts cryptographic attack risks via a key refreshment mechanism and manages fast and secure Handovers between access points. In addition to authentication, Kerberos has also the advantage of secure communications via encryption.

show abstract

DoS and authentication in wireless public access networks

Cited by 45 publications

References 8 publications

Prevention of DoS and Memory Attacks: Enhanced 3-Way Handshake

Prevention of DoS and Memory Attacks: Enhanced 3-Way Handshake

Prevention of DoS and Memory Exhaustion Attacks: Key Distribution with Confidentiality and Authentication

A Kerberos-Based Authentication Architecture for WLANS

Contact Info

Product

Resources

About