New embedded S
Download 1.14 Mb.
|
- Navigate this page:
- 5.3.1Proposed approaches
- 5.3.2Important Attributes
- 5.3.3References
5.3Automatic Access ControlAccess controls are mechanisms that are made to protect networks and services from unauthorized access to the target’s resources. Many methods have been proposed to implement access control in a network, depending on the intelligence of the nodes, the memory capabilities and the predefined profiles, and are based on:
The denial of service (DoS) attack is an attempt of a malicious entity to obstruct the availability of a network or a service. It is extremely difficult to counter against such attacks, especially in wireless networks. There are many methods to carry out a DoS attack. In the general case, an attacker sends a large amount of requests to a server. The server is kept occupied as it tries to serves those request, exhausts its resources, like power, processing power, network bandwidth and memory, and becomes unavailable to serve requests derived from legitimate users. The past years revealed the fact that poor design decisions in network protocols and operating systems can become a serious obstacle in DoS and Distributed DoS resilient systems and services. The IP protocol is vulnerable to such attacks and basic software design methodologies don’t take into account security requirements that would enable DDoS resilient services. In wireless networks, DoS attacks that can be performed in the communication link between legitimate tags and readers. These DoS attacks can be classified in three main categories based on the factors that cause them:
5.3.1Proposed approachesThere is a special type of DoS attack that can exploit vulnerable access control mechanisms. In the basic scenario of an access protocol, clients exchange encrypted messages with an authentication server in order to gain access to the service. The server has to perform an expensive public key process, like a decryption operation, in order to be able to elaborate the message’s content. Then an attacker can perform a DoS attack by sending a large number of access request messages to the server. In order to protect networks from this kind of DoS attack lightweight access control mechanisms have been implemented. The automatic access control stands for a technique where the entities that participate in a network can use a lightweight feature to authenticate each other. Thus, the server won’t use an expensive encryption operation that can lead to the DoS attack. The most common technique is to use hash functions. The client sends a hashed secret that is known to the server. Ordinary, the server keeps a map of all these hashed secrets for all of its clients. Then, server only needs to perform a cheap look up function to discover if the user is legitimate. Thereby, the attack can be efficiently encountered. However, several issues can arise from the adaptation of an automatic control mechanism that include mutual authentication, de-synchronization of client and server, DoS attacks in other steps of the propose protocol replay attacks and link-ability of different communications of the same user. Except from hash functions, other methods that encounter this problem include: authentication using matrix multiplication, pseudorandom number generators and cyclic redundancy check. Several protocols have been proposed in the literature and associated attacks are considered. Such attacks can involve relevant issues of mutual authentication, de-synchronization of client-server, DoS attacks in other steps of the proposed protocols, replay attacks and link-ability of different communications of the same user. O-FRAP+ [1] and Gossamer [2] are two indicative ultra-lightweight protocols that address this issue. O-FRAP+ uses two keys for every tag, the one from the previous session and the new one for the current session, and the secret key updating procedure is performed in a chain fashion. It provides mutual authentication, privacy-preserving authentication, forward security and resistant against DoS attack. Gossamer makes use of pseudorandom numbers and can effective to provide data confidentiality, tag anonymity, mutual authentication, data integrity, forward security, robustness against replay attacks and DoS attack prevention. Moreover, even when we use automatic or simple access control the failure of recognizing a legitimate user, leads as to the conclusion that the system can be under attack. Thereby, other mechanisms [3] like anomaly detection, intrusion detection (IDS), intrusion prevention (IPS), intrusion tolerance and mitigation, intrusion response mechanisms and firewalls can take on.
5.3.3References
Directory: images images -> Pelan pentaksiran kursus images -> Military callsign list as of dec 2010 images -> For Date: 02/01/2013 Friday Call Number Time Call Reason Action 13-768 0008 motor vehicle stop warning Issued images -> Creating Buy-In – Building Relationships images -> Deadline: Saturday, March 12th, 2016 images -> News items from Raising Our Voices images -> Last year four of the best Afrikaans Christian singers joined forces to tour Down Under with the production ‘Manne wat Glo’ images -> World-renowned vocal ensemble sweet honey in the rock images -> Peoples Voice Café History images -> Simon Mckeown Artist C. V. DaDaFest International Artist of the Year 2010 Download 1.14 Mb. Share with your friends:
|