Towards Network Denial of Service Resistant Protocols

Leiwo, Jussipekka; Aura, Tuomas; Nikander, Pekka

doi:10.1007/978-0-387-35515-3_31

Cited by 53 publications

(23 citation statements)

References 23 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The idea is to gradually strengthen the authentication process as the protocol executes by introducing a weak authentication phase prior to signature verification. Leiwo et al [9] suggest that allocation of server resources can only take place after client authentication, and that a client's workload must be greater than that of the server.…”

Section: Related Workmentioning

confidence: 99%

A Proactive DOS Filter Mechanism for Delay Tolerant Networks

Ansa

Cruickshank

Sun

2011

Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering

View full text Add to dashboard Cite

Abstract. Denial of Service (DOS) attacks are a major threat faced by all types of networks. The effect of DOS in a delay tolerant network (DTN) is even more aggravated due to the scarcity of resources. Perpetrators of DOS attacks in DTN-like environments look beyond the objective of rendering a target node useless. The aim of an attacker is to cause a network-wide degradation of resources, service and performance. This can easily be achieved by exhausting node or link resources and partitioning the network. In this paper we seek to provide a proactive approach in making the DTN authentication process robust against DOS. Our aim is to make security protocols which provide mandatory DTN security services resilient to DOS attacks. The overall objective is to make it hard to launch a DOS attack and ensure the availability of DTN services. A DTN-cookie mechanism has been proposed to quickly identify and filter out illegitimate traffic.

show abstract

Section: Related Workmentioning

confidence: 99%

A Proactive DOS Filter Mechanism for Delay Tolerant Networks

Ansa

Cruickshank

Sun

2011

Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering

View full text Add to dashboard Cite

show abstract

“…The requirement for key establishment protocols to exhibit denial of service resistance is well recognized by the protocol engineering community and a number of design strategies have emerged that promote the judicious allocation of resources when processing initiator requests [5,6]. The proposed strategies can be broadly classified into three types.…”

Section: Dos-resistance Strategiesmentioning

confidence: 99%

“…Achieving this goal may require artificially increasing the computational expenditure of the initiator to ensure the survivability of the responder [5], or having the initiator perform computations on behalf of the responder, thereby reducing the relative cost of computation to the responder.…”

Section: Counterbalancing Computational Expenditurementioning

confidence: 99%

Denial-of-service resistance in key establishment

Smith

Tritilanunt

Boyd

et al. 2007

IJWMC

View full text Add to dashboard Cite

Abstract:Denial of service (DoS) attacks are an increasing problem for network connected systems. Key establishment protocols are applications that are particularly vulnerable to DoS attack as they are typically required to perform computationally expensive cryptographic operations in order to authenticate the protocol initiator, and to generate the cryptographic keying material that will subsequently be used to secure the communications between initiator and responder. The goal of denial of service resistance in key establishment protocols is to ensure that attackers cannot prevent a legitimate initiator and responder deriving cryptographic keys without expending resources beyond a responder determined threshold. In this work we review the strategies and techniques used to improve resistance to denial of service attacks. Three key establishment protocols implementing denial of service resistance techniques are critically reviewed and the impact of misapplication of the techniques on denial of service resistance is discussed. Recommendations on effectively applying resistance techniques to key establishment protocols are made.

show abstract

“…Client puzzles have also been used in the context of security protocols [26,35], most notably for protecting SSL against computational denial of service attacks [9]. Other uses of client puzzles involve junk email mitigation [11], fair exchange [8,16], protection of sensor networks against DoS attacks [48], and time-lock puzzles [43].…”

Section: Related Work On Puzzlesmentioning

confidence: 99%

The dual receiver cryptosystem and its applications

Diament

Lee

Keromytis

et al. 2004

Proceedings of the 11th ACM Conference on Computer and Communications Security

View full text Add to dashboard Cite

We put forth the notion of a dual receiver cryptosystem and implement it based on bilinear pairings over certain elliptic curve groups. The cryptosystem is simple and efficient yet powerful, as it solves two problems of practical importance whose solutions have proven to be elusive before:(1) A provably secure "combined" public-key cryptosystem (with a single secret key per user in space-limited environment) where the key is used for both decryption and signing and where encryption can be escrowed and recovered, while the signature capability never leaves its owner. This is an open problem proposed by the work of Haber and Pinkas.(2) A puzzle is a method for rate-limiting remote users by forcing them to solve a computational task (the puzzle). Puzzles have been based on cryptographic challenges in the past, but the successful design of embedding a useful cryptographic task inside a puzzle, originally posed by Dwork and Naor, remained an open problem till today. We model and present "useful security puzzles" applicable in two scenarios: a secure fileserver, and an online transaction server (such as a webserver).

show abstract

Towards Network Denial of Service Resistant Protocols

Cited by 53 publications

References 23 publications

A Proactive DOS Filter Mechanism for Delay Tolerant Networks

A Proactive DOS Filter Mechanism for Delay Tolerant Networks

Denial-of-service resistance in key establishment

The dual receiver cryptosystem and its applications

Contact Info

Product

Resources

About