NDLI: Counter-Flooding: DoS Protection for Public Key Handshakes in LANs

Content Provider	IEEE Xplore Digital Library
Author	Jerschow, Y.I. Scheuermann, B. Mauve, M.
Copyright Year	2009
Abstract	The majority of security protocols employ public key cryptography for authentication at least in the connection setup phase. However, verifying digital signatures is an expensive task compared to symmetric key operations and may become the target for Denial of Service (DoS) attacks, where the adversary floods the victim host with fake signature packets trying to overload it. In this paper we present counter-flooding, a new defense mechanism against DoS attacks which exploit the lack of initial address authenticity in LANs. A benign host having a signature packet addressed to a host which is currently under attack ensures the processing of its packet by flooding copies of this packet for a short period of time itself. The key idea is for the victim host to verify only a fixed number of signatures per time period without becoming overloaded and to select those packets for verification which have the largest number of duplicates. Under weak assumptions we prove that the packet from the benign host will be among them. We derive bounds for our counter-flooding mechanism to succeed and perform experiments with Ethernet switches to study the bandwidth division between concurrent flows under overload conditions.
Starting Page	376
Ending Page	382
File Size	308610
Page Count	7
File Format	PDF
ISBN	9781424436880
DOI	10.1109/ICNS.2009.88
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2009-04-20
Publisher Place	Spain
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Ethernet networks Switches local area networks Security Computer crime Cryptographic protocols DoS countermeasures public key cryptography Public key Authentication Public key cryptography Protection Digital signatures authentication
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

An introduction to implementation attacks and countermeasures

Key Establishment Using Secure Distance Bounding Protocols

Securing return routability protocol against active attack

IDSec: An Identification Layer Security Model

An enhanced authentication key exchange protocol

Securing RFID Tags: Authentication Protocols with Completeness, Soundness, and Non-Traceability

A secure mobile IP authentication based on identification protocol

Collision-free hashfunctions based on blockcipher algorithms

SECURCOM - the security solution for Ethernet LANs

Counter-Flooding: DoS Protection for Public Key Handshakes in LANs

Similar Documents

An introduction to implementation attacks and countermeasures

Key Establishment Using Secure Distance Bounding Protocols

Securing return routability protocol against active attack

IDSec: An Identification Layer Security Model

An enhanced authentication key exchange protocol

Securing RFID Tags: Authentication Protocols with Completeness, Soundness, and Non-Traceability

A secure mobile IP authentication based on identification protocol

Collision-free hashfunctions based on blockcipher algorithms

SECURCOM - the security solution for Ethernet LANs

Counter-Flooding: DoS Protection for Public Key Handshakes in LANs