Packet Leashes: A Defense against Wormhole Attacks in Wireless Networks Yih-Chun Hu (Carnegie Mellon University) Adrian Perrig (Carnegie Mellon University)

Slides:

Advertisements

Similar presentations

Chris Karlof and David Wagner

Advertisements

Computer Science Dr. Peng NingCSC 774 Adv. Net. Security1 CSC 774 Advanced Network Security Topic 6. Security in Mobile Ad-Hoc Networks.

Efficient Public Key Infrastructure Implementation in Wireless Sensor Networks Wireless Communication and Sensor Computing, ICWCSC International.

How to Design Wireless Security Mechanisms Manel Guerrero Zapata Mobile Networks Laboratory Nokia Research Center.

A Survey of Secure Wireless Ad Hoc Routing

David B. Johnson Rice University Department of Computer Science DSR Status Update Monarch Project 55th.

Packet Leashes: Defense Against Wormhole Attacks Authors: Yih-Chun Hu (CMU), Adrian Perrig (CMU), David Johnson (Rice)

LOGO Multi-user Broadcast Authentication in Wireless Sensor Networks ICU Myunghan Yoo.

Transmission Time-based Mechanism to Detect Wormhole in Ad-hoc Networks Tran Van Phuong U-Security Group RTMM Lab, Kyung Hee Uni, Korea

Network Access Control for Mobile Ad Hoc Network Pan Wang North Carolina State University.

Securing OLSR Using Node Locations Daniele Raffo Cédric Adjih Thomas Clausen Paul Mühlethaler 11 th European Wireless Conference 2005 (EW 2005) April

Analysis of a SuperSEAD Aaron Staple Mukund Sundararajan.

Security Issues In Sensor Networks By Priya Palanivelu.

Security in Ad Hoc Networks Steluta Gheorghiu Universitat Politecnica de Catalunya Departament d’Arquitectura de Computadors.

SUMP: A Secure Unicast Messaging Protocol for Wireless Ad Hoc Sensor Networks Jeff Janies, Chin-Tser Huang, Nathan L. Johnson.

Yih-Chun Hu Carnegie Mellon University

Trust Level Based Self-Organized Routing Protocol for Secure Ad Hoc Networks Li Xiaoqi, GiGi 12/3/2002.

1 Rushing Attacks and Defense in Wireless Ad Hoc Network Routing Protocols Yih-Chun Hu, Adrian Perrig, and David B. Johnson Presenter: Sandeep Mapakshi.

Key Distribution in Sensor Networks (work in progress report) Adrian Perrig UC Berkeley.

Security & Efficiency in Ad- Hoc Routing Protocol with emphasis on Distance Vector and Link State. Ayo Fakolujo Wichita State University.

© 2007 Levente Buttyán and Jean-Pierre Hubaux Security and Cooperation in Wireless Networks Chapter 6: Securing neighbor discovery.

1 cs526 chow Wireless Sensor Network(WSN) vs. Mobile Ad Hoc Network (MANET) WSNMANET SimilarityWirelessMulti-hop networking SecuritySymmetric Key CryptographyPublick.

SPINS: Security Protocols for Sensor Networks Adrian Perrig, Robert Szewczyk, Victor Wen, David Culler, J.D. Tygar Research Topics in Security in the context.

Secure Group Communications in Wireless Sensor Networks December 8, 2003 CS 526 Advance Internet and Web Systems Patrick D. Cook.

SPINS: Security Protocols for Sensor Networks Adrian Perrig Robert Szewczyk Victor Wen David Culler Doug TygarUC Berkeley.

presented by Luba Yelovich-Sakharuk

A Lightweight Hop-by-Hop Authentication Protocol For Ad- Hoc Networks Speaker: Hsien-Pang Tsai Teacher: Kai-Wei Ke Date:2005/01/20.

Wireless Sensor Networks Security Lindsey McGrath and Christine Weiss.

ITIS 6010/8010: Wireless Network Security Weichao Wang.

1 BANAID: A Sensor Network Test-Bed for Wormhole Attack Hani Alzaid Suhail AbanmiSalil KanhereChun Tung Chou BANAID.

Security Considerations for Wireless Sensor Networks Prabal Dutta (614) Security Considerations for Wireless Sensor Networks.

Network-layer Security of Mobile Ad hoc Networks Jiangyi Hu Advisor: Dr. Mike Burmester.

Security of Routing Protocols in Ad Hoc Wireless Networks presented by Reza Curtmola – Advanced Topics in Wireless Networks.

Secure Aggregation for Wireless Networks Lingxuan Hu David Evans [lingxuan, Department of Computer.

MOBILE AD-HOC NETWORK(MANET) SECURITY VAMSI KRISHNA KANURI NAGA SWETHA DASARI RESHMA ARAVAPALLI.

How Does Topology Affect Security in Wireless Ad Hoc Networks? Ioannis Broustis CS 260 – Seminar on Network Topology.

1 / 18 Fariba alamshahi Secure Routing and Intrusion Detection in Ad Hoc Networks Supervisor: Mr.zaker Translator: fariba alamshahi.

Secure Cell Relay Routing Protocol for Sensor Networks Xiaojiang Du, Fengiing Lin Department of Computer Science North Dakota State University 24th IEEE.

An efficient secure distributed anonymous routing protocol for mobile and wireless ad hoc networks Authors: A. Boukerche, K. El-Khatib, L. Xu, L. Korba.

GZ06 : Mobile and Adaptive Systems A Secure On-Demand Routing Protocol for Ad Hoc Networks Allan HUNT Wandao PUNYAPORN Yong CHENG Tingting OUYANG.

Using Directional Antennas to Prevent Wormhole Attacks Lingxuan HuDavid Evans Department of Computer Science University of Virginia.

A survey of Routing Attacks in Mobile Ad Hoc Networks Bounpadith Kannhavong, Hidehisa Nakayama, Yoshiaki Nemoto, Nei Kato, and Abbas Jamalipour Presented.

Authors: Yih-Chun Hu, Adrian Perrig, David B. Johnson

1 Detecting and Evading Wormholes in Mobile Ad-hoc Wireless Networks Asad Amir Pirzada and Chris McDonald.

Secure Routing in Wireless Sensor Networks: Attacks and Countermeasures Chris Karlof and David Wagner (modified by Sarjana Singh)

Rushing Attacks and Defense in Wireless Ad Hoc Network Routing Protocols ► Acts as denial of service by disrupting the flow of data between a source and.

1 Rushing Attacks and Defense in Wireless Ad Hoc Network Routing Protocols Yih-Chun Hu, Adrian Perrig, and David B. Johnson Presented By: Nitin Subramanian.

Two-tier authentication for cluster and individual sets in mobile ad hoc networks Authors: Yuh-Ren Tsai and Shiuh-Jeng Wang Sources: Computer Networks,

Computer Science CSC 774 Adv. Net. Security1 Presenter: Tong Zhou 11/21/2015 Practical Broadcast Authentication in Sensor Networks.

Computer Science 1 TinySeRSync: Secure and Resilient Time Synchronization in Wireless Sensor Networks Speaker: Sangwon Hyun Acknowledgement: Slides were.

Security in Mobile Ad Hoc Networks: Challenges and Solutions (IEEE Wireless Communications 2004) Hao Yang, et al. October 10 th, 2006 Jinkyu Lee.

Shambhu Upadhyaya 1 Ad Hoc Networks – Network Access Control Shambhu Upadhyaya Wireless Network Security CSE 566 (Lecture 20)

KAIS T SIGF : A Family of Configurable, Secure Routing Protocols for WSNs Sep. 20, 2007 Presented by Kim, Chano Brian Blum, Tian He, Sang Son, Jack Stankovic.

Establishing authenticated channels and secure identifiers in ad-hoc networks Authors: B. Sieka and A. D. Kshemkalyani (University of Illinois at Chicago)

Efficient and Secure Source Authentication for Multicast 報告者 : 李宗穎 Proceedings of the Internet Society Network and Distributed System Security Symposium.

Security Issues in Distributed Sensor Networks Yi Sun Department of Computer Science and Electrical Engineering University of Maryland, Baltimore County.

SEAD: Secure Efficient Distance Vector Routing for Mobile Wireless Ad Hoc Network Raymond Chang March 30, 2005 EECS 600 Advanced Network Research, Spring.

The Sybil attack “One can have, some claim, as many electronic persons as one has time and energy to create.” – Judith S. Donath.

Computer Science Using Directional Antennas to Prevent Wormhole Attacks Stephen Thomas Acknowledgement: Portions of this presentation have been donated.

NDSS 2004Hu and Evans, UVa1 Using Directional Antennas to Prevent Wormhole Attacks Lingxuan Hu and David Evans [lingxuan, Department.

1 An Interleaved Hop-by-Hop Authentication Scheme for Filtering of Injected False Data in Sensor Networks Sencun Zhu, Sanjeev Setia, Sushil Jajodia, Peng.

1 Routing security against Threat models CSCI 5931 Wireless & Sensor Networks CSCI 5931 Wireless & Sensor Networks Darshan Chipade.

Security Review Q&A Session May 1. Outline  Class 1 Security Overview  Class 2 Security Introduction  Class 3 Advanced Security Constructions  Class.

S E A D Secure Efficient Distance Vector Routing for Mobile Wireless Ad Hoc Networks Yih-Chun Hu,David B.Johnson, Adrian Perrig.

Packet Leashes: Defense Against Wormhole Attacks

Mobile Ad hoc Network: Secure Issues In Multi-Hop Routing Protocols

Ariadne A Secure On-Demand Routing Protocol for Ad Hoc Networks

SPINS: Security Protocols for Sensor Networks

SPINS: Security Protocols for Sensor Networks

SPINS: Security Protocols for Sensor Networks

Presentation transcript:

Packet Leashes: A Defense against Wormhole Attacks in Wireless Networks Yih-Chun Hu (Carnegie Mellon University) Adrian Perrig (Carnegie Mellon University) David B. Johnson (Rice University) Presented by: Jón T. Grétarsson 5 April, 2005 CS577: Advanced Computer Networks

Outline Introduction Problem Statement Related Work Assumptions and Notation Detecting Wormhole Attacks Temporal Leashes and the TIK Protocol Evaluation Conclusions CS577: Advanced Computer Networks

Introduction CS577: Advanced Computer Networks

The Authors Yih-Chun Hu Adrian Perrig David B. Johnson CS577: Advanced Computer Networks

Problem Statement Wormholes! CS577: Advanced Computer Networks

Wormholes in MANET Packets are “tunneled” from one location to another If done reliably, no harm no foul If done selectively, much damage can be done! S D Wormhole Colluding Attackers CS577: Advanced Computer Networks

The Threat Permanent Denial-of-Service Disruption to Routing Protocols Unauthorized Access CS577: Advanced Computer Networks

Related Work CS577: Advanced Computer Networks

Related Work RF Watermarking Intrusion Detection i CS577: Advanced Computer Networks

Assumptions and Notation CS577: Advanced Computer Networks

Assumptions & Notation Resource Constrained Nodes Existing key distribution system HMAC - a message authentication code used for authentication Bidirectional links are not necessary CS577: Advanced Computer Networks

Detecting Wormhole Attacks CS577: Advanced Computer Networks

Leashes Somehow restrict the transmission distance of the packet Geographical Leashes Temporal Leashes CS577: Advanced Computer Networks

Geographical Leashes Node Location Loosely Synchronized Clocks Bounded Velocity of packet d sr is distance between two nodes ∆ is error in time CS577: Advanced Computer Networks

Temporal Leashes Requires tight synchronization of clocks MAC contention issues Digital signature scheme can guarantee timestamp CS577: Advanced Computer Networks

Temporal Leashes and the TIK Protocol CS577: Advanced Computer Networks

Authentication All information (timestamp, expiration, position) must be verified Traditional methods of verification are too expensive Merkle Hash Trees are the solution! CS577: Advanced Computer Networks

Merkle Hash Trees CS577: Advanced Computer Networks

TESLA with Instant Key Disclosure CS577: Advanced Computer Networks

Evaluation CS577: Advanced Computer Networks

How it was done Calculated required number of Hashes per second for algorithm Calculated computational power of portable devices CS577: Advanced Computer Networks

Results Suitable for laptops and PDA’s, but not for resource scarce networks Not enough space to store the packet! CS577: Advanced Computer Networks

Conclusions CS577: Advanced Computer Networks

Conclusions Wormholes are dangerous! They can degrade performance of Mobile Ad Hoc routing algorithms Both Geographical and Temporal leashes can detect wormholes TIK is an implementation of Temporal leashes that can be used when there is sufficiently tight time synchronization TIK is not usable in resource-scarce networks CS577: Advanced Computer Networks

Questions? Comments? Donations? CS577: Advanced Computer Networks

References Graphics borrowed from age/PacketLeashes.ppt, s/ secure-routing/infocom2003.pdf CS577: Advanced Computer Networks