Abstract:Denial-of-Service (DoS) attacks are virulent to both computer and networked systems. Modeling and evaluating DoS attacks are very important issues to networked systems; they provide both mathematical foundations and theoretic guidelines to security system design. As defense against DoS has been built more and more into security protocols, this paper studies how to evaluate the risk of DoS in security protocols. First, we build a formal framework to model protocol operations and attacker capabilities. Then we propose an economic model for the risk evaluation. By characterizing the intruder capability with a probability model, our risk evaluation model specifies the “Value-at-Risk” (VaR) for the security protocols. The “Value-at-Risk” represents how much computing resources are expected to lose with a given level of confidence. The proposed model can help users to have a better understanding of the protocols they are using, and in the meantime help designers to examine their designs and get clues of improvement. Finally we apply the proposed model to analyze a key agreement protocol used in sensor networks and identify a DoS flaw there, and we also validate the applicability and effectiveness of our risk evaluation model by applying it to analyze and compare two public key authentication protocols.

Analysis and Improvements of the IKEv2 Protocol

Accelerating Implementation of IKEv2 by Using Security Coprocessor

A Novel Rekeying Protocol for 802.11s Key Management

Implementation of IPSec IKE

Evolving Defense Mechanism for Future Network Security

Cryptanalysis and Improvement of Park Et Al.'s Remote User Authentication Protocol

Simulation Comparision of IKEv1 and IKEv2 Based on Linux

Ml-Ike: A Multilayer Ike Protocol For Tcp Performance Enhancement In Wireless Networks

Security Analysis of WEP Algorithm Used in IEEE 802.11

Enhancing the Security of PPP with Internet Key Exchange Protocol

Comparative Studies on Authentication and Key Exchange Methods for 802.11 Wireless LAN

Detecting IKEv1 Man-in-the-Middle Attack with Message-RTT Analysis

Research on Performance Testing of IKE Protocol

Internet Measurement of Quantum-Resistant IKEv2 in Constrained Networks

An Improved Authenticated Key Agreement Protocol

Research and practice on performance test system for IKE protocol

Research on IPSec Prameter Negotiation Process Based on IKE

Towards Risk Evaluation of Denial-Of-Service Vulnerabilities in Security Protocols

Analysis of the DoIP Protocol for Security Vulnerabilities

A novel interfacing solution to make IKEv2 work in MIPv6 environment

A New Countermeasure for Protecting Authentication Protocols against Denial of Service Attack