Abstract:Nowadays wireless sensor networks (WSNs) have drawn great attention from both industrial world and academic community. To facilitate real-time data access for external users from the sensor nodes directly, password-based authentication has become the prevalent authentication mechanism in the past decades. In this work, we investigate three foremost protocols in the area of password-based user authentication scheme for WSNs. Firstly, we analyze an efficient and anonymous protocol and demonstrate that though this protocol is equipped with a formal proof, it actually has several security loopholes been overlooked, such that it cannot resist against smart card loss attack and violate forward secrecy. Secondly, we scrutinize a lightweight protocol and point out that it cannot achieve the claimed security goal of forward secrecy, as well as suffering from user anonymity violation attack and offline password guessing attack. Thirdly, we find that an anonymous scheme fails to preserve two critical properties of forward secrecy and user friendliness. In addition, by adopting the "perfect forward secrecy (PFS)" principle, we provide several effective countermeasures to remedy the identified weaknesses. To test the necessity and effectiveness of our suggestions, we conduct a comparison of 10 representative schemes in terms of the underlying cryptographic primitives used for realizing forward secrecy.

The Denial of Service Attack Analysis of WLAN Authentication Infrastructure

A secure and efficient user authentication protocol for two-tiered wireless sensor networks

Weakness analysis and attack test for WLAN

An Efficient and DoS-resistant User Authentication Scheme for Two-Tiered Wireless Sensor Networks

Demo: WISP-based Access Control Combining Electronic and Mechanical Authentication

A New Countermeasure for Protecting Authentication Protocols against Denial of Service Attack

A Mutual Authentication and Privacy Mechanism for WLAN Security.

Securing Wireless Systems Via Lower Layer Enforcements

Security Analysis of WEP Algorithm Used in IEEE 802.11

Comparative Studies on Authentication and Key Exchange Methods for 802.11 Wireless LAN

Study of Network Authentication Based on RADIUS Protocol

A Lightweight Secure User Authentication and Key Agreement Protocol for Wireless Sensor Networks.

Cryptanalysis and Security Enhancement of Three Authentication Schemes in Wireless Sensor Networks.

A Method Based on AMHI for DDoS Attacks Detection and Defense

Observations on the Message Integrity Code in IEEE802.11Wireless LANs

Security Protocols and Analysis of 3G-WLAN Interworking

Wireless Local Area Network Security through Protocol Wireless Protected Access

Automatic Vulnerability Checking of IEEE 802.16 WiMAX Protocols through TLA+

Rejecting the attack: Source authentication for Wi-Fi management frames using CSI Information

Exception triggered DoS attacks on wireless networks

Security Authentication of 3G-WLAN Interworking