Specification-based intrusion detection system for WiBro

Authors:
Yunho Lee;Sang-Guun Yoo;Juho Kim;Soojin Lee
Affiliations:
Korea National Defense University, Seoul, Korea;Department of Computer Science and Engineering, Sogang University, Seoul, Korea;Department of Computer Science and Engineering, Sogang University, Seoul, Korea;Korea National Defense University, Seoul, Korea
Venue:
ICHIT'11 Proceedings of the 5th international conference on Convergence and hybrid information technology
Year:
2011

Citing 7
Cited 0

Computer immunology

Communications of the ACM
Learning Program Behavior Profiles for Intrusion Detection

Proceedings of the Workshop on Intrusion Detection and Network Monitoring
Execution monitoring of security-critical programs in distributed systems: a Specification-based approach

SP '97 Proceedings of the 1997 IEEE Symposium on Security and Privacy
A specification-based intrusion detection system for AODV

Proceedings of the 1st ACM workshop on Security of ad hoc and sensor networks
WiMax/802.16 threat analysis

Proceedings of the 1st ACM international workshop on Quality of service & security in wireless and mobile networks
Specification-Based Intrusion Detection in WLANs

ACSAC '06 Proceedings of the 22nd Annual Computer Security Applications Conference
Synthesizing fast intrusion prevention/detection systems from high-level specifications

SSYM'99 Proceedings of the 8th conference on USENIX Security Symposium - Volume 8

Quantified Score

Hi-index	0.00

Visualization

Abstract

WiBro (Wireless Broadband), the service based on the IEEE 802.16e (mobile WiMAX) standard, is a wireless broadband Internet technology developed by the South Korean telecommunications industry. In this paper, we analyze security vulnerabilities of the WiBro standard, focusing on the initial authentication phase and propose a specification-based intrusion detection system that can detect those vulnerabilities. We first derive specifications from the normal operational process of the initial authentication based on PKMv2 EAP-AKA and formalize the derived specifications as a state transition diagram. The proposed system executes the intrusion detection based on those specifications and the state transition diagram. In this paper, to verify the detection capability of the proposed system, we construct an experimental network and execute scenario-based tests.