Efficient security mechanisms for overlay multicast-based content distribution

Authors:
Sencun Zhu;Chao Yao;Donggang Liu;Sanjeev Setia;Sushil Jajodia
Affiliations:
Department of Computer Science and Engineering and School of Information Sciences and Technology, The Pennsylvania State University, University Park, PA;Center for Secure Information Systems, George Mason University, Fairfax, VA;Department of Computer Science, North Carolina State University, Raleigh, NC;Center for Secure Information Systems, George Mason University, Fairfax, VA;Center for Secure Information Systems, George Mason University, Fairfax, VA
Venue:
ACNS'05 Proceedings of the Third international conference on Applied Cryptography and Network Security
Year:
2005

Citing 18
Cited 3

Secure group communications using key graphs

Proceedings of the ACM SIGCOMM '98 conference on Applications, technologies, architectures, and protocols for computer communication
A case for end system multicast (keynote address)

Proceedings of the 2000 ACM SIGMETRICS international conference on Measurement and modeling of computer systems
Efficient fault-tolerant certificate revocation

Proceedings of the 7th ACM conference on Computer and communications security
Reliable group rekeying: a performance analysis

Proceedings of the 2001 conference on Applications, technologies, architectures, and protocols for computer communications
Enabling conferencing applications on the internet using an overlay muilticast architecture

Proceedings of the 2001 conference on Applications, technologies, architectures, and protocols for computer communications
A comparitive performance analysis of reliable group rekey transport protocols for secure multicast

Performance Evaluation
Scalable application layer multicast

Proceedings of the 2002 conference on Applications, technologies, architectures, and protocols for computer communications
Revocation and Tracing Schemes for Stateless Receivers

CRYPTO '01 Proceedings of the 21st Annual International Cryptology Conference on Advances in Cryptology
Resilient multicast using overlays

SIGMETRICS '03 Proceedings of the 2003 ACM SIGMETRICS international conference on Measurement and modeling of computer systems
Expander Graphs for Digital Stream Authentication and Robust Overlay Networks

SP '02 Proceedings of the 2002 IEEE Symposium on Security and Privacy
Kronos: A Scalable Group Re-Keying Approach for Secure Multicast

SP '00 Proceedings of the 2000 IEEE Symposium on Security and Privacy
Efficient self-healing group key distribution with revocation capability

Proceedings of the 10th ACM conference on Computer and communications security
HOURS: Achieving DoS Resilience in an Open Service Hierarchy
Exposing and Eliminating Vulnerabilities to Denial of Service Attacks in Secure Gossip-Based Multicast

DSN '04 Proceedings of the 2004 International Conference on Dependable Systems and Networks
Peer-to-peer communication across network address translators

ATEC '05 Proceedings of the annual conference on USENIX Annual Technical Conference
Overcast: reliable multicasting with on overlay network

OSDI'00 Proceedings of the 4th conference on Symposium on Operating System Design & Implementation - Volume 4
Multicast group behavior in the Internet's multicast backbone (MBone)

IEEE Communications Magazine
Resilient self-organizing overlay networks for security update delivery

IEEE Journal on Selected Areas in Communications

Message Dropping Attacks in Overlay Networks: Attack Detection and Attacker Identification

ACM Transactions on Information and System Security (TISSEC)
Secure group communication in wireless mesh networks

Ad Hoc Networks
A novel linear multi-secret sharing scheme for group communication in wireless mesh networks

Journal of Network and Computer Applications

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper studies the security issues that arise in an overlay multicast architecture where service providers distribute content such as web pages, static and streaming multimedia data, realtime stock quotes, or security updates to a large number of users. In particular, two major security problems of overlay multicast, network access control and group key management, are addressed. We first present a bandwidth-efficient scheme, called CRBR, that seamlessly integrates network access control and group key management. Next we propose a DoS-resilient key distribution scheme, called k-RIP, that delivers updated keys to a large fraction of nodes with high probability even if an attacker can selectively compromise nodes in the multicast data delivery hierarchy and command these compromised nodes to drop keying packets. The proposed schemes do not rely on knowledge of overlay topology, and can scale up to very large overlay networks.