Secure Opportunistic Multipath Key Exchange

Costea, Sergiu; Choudary, Omar; Gucea, Doru; Tackmann, Björn; Raiciu, Costin

doi:10.1145/3243734.3243791

Cited by 5 publications

(4 citation statements)

References 28 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Costea et al 27 discuss a threat model for 2‐path based on the attacker's actions (active and passive) and their information‐sharing nature (synchronized and unsynchronized) as depicted in Figure 5. This model has various possible scenarios by considering all possible combinations of attackers for the 2‐Path case:

{\overset{Â}{true}}_{scriptP} / {\overset{Â}{true}}_{scriptP}

{\overset{Â}{true}}_{scriptP} - {\overset{Â}{true}}_{scriptP}

{\overset{Â}{true}}_{scriptA} / {\overset{Â}{true}}_{scriptP}

{\overset{Â}{true}}_{scriptA} - {\overset{Â}{true}}_{scriptP}

{\overset{Â}{true}}_{scriptA} / {\overset{Â}{true}}_{scriptA}

, and

{\overset{Â}{true}}_{scriptA} - {\overset{Â}{true}}_{scriptA}

.…”

Section: Threat Modelmentioning

confidence: 99%

“…Since the MPTCP uses multiple paths, it opens many doors to an adversary get into its session. Articles 27,28 discuss about various attacks that are possible in MPTCP such as man‐in‐the‐middle (MM), denial‐of‐service (DoS), and SYN‐flooding attacks. To perform these attacks, an adversary needs some information about the MPTCP user such as IP address, flow‐sequence number, and session key.…”

Section: Introductionmentioning

confidence: 99%

“…The widely used security protocols for MPTCP security such as transport layer security (TLS) 29 and quick UDP Internet connections (QUIC) 30 employ the third‐party certificate authority (CA) to ensure the authenticity of public keys exchanged among the communicating parties. On the other hand, the opportunistic security protocols such as Tcpcrypt 31 and secure multipath key exchange (SMKEX) 27 are getting popular as an alternative to CA‐based methods. The Tcpcrypt is implemented as a TCP extension to provide opportunistic encryption.…”

Section: Introductionmentioning

confidence: 99%

“…Articles 32,33 report that the MM attack may take place during the key exchange in these security protocols. The MPTCP also suffer from various attacks such as DoS attack, SYN flooding attack, due to its multipathing nature 27,28 . To protect the MPTCP from these attacks, there is a need to secure the MPTCP options that carry the key information.…”

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

Multipath TCP security over different attacks

Chaturvedi

Chand

2020

Trans Emerging Tel Tech

View full text Add to dashboard Cite

Due to the increasing demand for bandwidth and availability of multi‐homed devices, the Multipath TCP (MPTCP) is an emerging protocol that uses multiple paths simultaneously to transfer the data, seamlessly utilizing their bandwidth. The security is an important issue in a system especially the communication network system. Since there are multiple paths in MPTCP, it has many doors open to an adversary especially at the time of connection initiation. These attacks include the man‐in‐the‐middle attack (MM), denial‐of‐service (DOS) attack, and SYN flooding attack. This article proposes a new opportunistic security protocol, named as secure connection multipath TCP (SCMTCP), that uses the elliptic curve cryptography to generate the secret key. It also uses a third‐party certificate authority to ensure the authenticity of public keys exchanged between the communicating parties. The SCMTCP generates a session key at the time of initial handshake (with MP_CAPABLE option) and protects the MPTCP from the man‐in‐the‐middle attack. It generates a unique authentication key for each new subflow within the host using the session key to authenticate them and protects the MPTCP from DoS and SYN flooding attacks. This article analyzes the security complexity of the SCMTCP using the random oracle model and shows that it is not possible for an attacker to get any security key and breaks the MPTCP security.

show abstract