Modelling denial of service attacks on JFK with Meadows's cost-based framework

Authors:
J. Smith;J. M. González-Nieto;C. Boyd
Affiliations:
Information Security Institute, Queensland University of Technology, Brisbane, Australia;Information Security Institute, Queensland University of Technology, Brisbane, Australia;Information Security Institute, Queensland University of Technology, Brisbane, Australia
Venue:
ACSW Frontiers '06 Proceedings of the 2006 Australasian workshops on Grid computing and e-research - Volume 54
Year:
2006

Citing 10
Cited 12

A cost-based framework for analysis of denial of service in networks

Journal of Computer Security
Stateless connections

ICICS '97 Proceedings of the First International Conference on Information and Communication Security
Pricing via Processing or Combatting Junk Mail

CRYPTO '92 Proceedings of the 12th Annual International Cryptology Conference on Advances in Cryptology
A Key Recovery Attack on Discrete Log-based Schemes Using a Prime Order Subgroupp

CRYPTO '97 Proceedings of the 17th Annual International Cryptology Conference on Advances in Cryptology
A Formal Framework and Evaluation Method for Network Denial of Service

CSFW '99 Proceedings of the 12th IEEE workshop on Computer Security Foundations
Defending Against Denial-of-Service Attacks with Puzzle Auctions

SP '03 Proceedings of the 2003 IEEE Symposium on Security and Privacy
Just fast keying: Key agreement in a hostile internet

ACM Transactions on Information and System Security (TISSEC)
New client puzzle outsourcing techniques for DoS resistance

Proceedings of the 11th ACM conference on Computer and communications security
Mitigating bandwidth-exhaustion attacks using congestion puzzles

Proceedings of the 11th ACM conference on Computer and communications security
Using client puzzles to protect TLS

SSYM'01 Proceedings of the 10th conference on USENIX Security Symposium - Volume 10

Cost-based and time-based analysis of DoS-resistance in HIP

ACSC '07 Proceedings of the thirtieth Australasian conference on Computer science - Volume 62
Towards Denial-of-Service-Resilient Key Agreement Protocols

ACISP '09 Proceedings of the 14th Australasian Conference on Information Security and Privacy
Security Notions and Generic Constructions for Client Puzzles

ASIACRYPT '09 Proceedings of the 15th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology
An economical model for the risk evaluation of DoS vulnerabilities in cryptography protocols

ISPEC'07 Proceedings of the 3rd international conference on Information security practice and experience
Stronger difficulty notions for client puzzles and denial-of-service-resistant protocols

CT-RSA'11 Proceedings of the 11th international conference on Topics in cryptology: CT-RSA 2011
An integrated approach to cryptographic mitigation of denial-of-service attacks

Proceedings of the 6th ACM Symposium on Information, Computer and Communications Security
Formal modelling and automatic detection of resource exhaustion attacks

Proceedings of the 6th ACM Symposium on Information, Computer and Communications Security
Examining the dos resistance of HIP

OTM'06 Proceedings of the 2006 international conference on On the Move to Meaningful Internet Systems: AWeSOMe, CAMS, COMINF, IS, KSinBIT, MIOS-CIAO, MONET - Volume Part I
Customizing protocol specifications for detecting resource exhaustion and guessing attacks

FMCO'10 Proceedings of the 9th international conference on Formal Methods for Components and Objects
Towards a provably secure dos-resilient key exchange protocol with perfect forward secrecy

INDOCRYPT'11 Proceedings of the 12th international conference on Cryptology in India
Some improvements to the cost-based framework for analyzing denial of service attacks

INTRUST'11 Proceedings of the Third international conference on Trusted Systems
Modeling and analysis of internet key exchange protocolv2 and a proposal for its variant

Proceedings of the 6th ACM India Computing Convention

Quantified Score

Hi-index	0.00

Visualization

Abstract

We present the first detailed application of Meadows's cost-based modelling framework to the analysis of JFK, an Internet key agreement protocol. The analysis identifies two denial of service attacks against the protocol that are possible when an attacker is willing to reveal the source IP address. The first attack was identified through direct application of a cost-based modelling framework, while the second was only identified after considering coordinated attackers. Finally, we demonstrate how the inclusion of client puzzles in the protocol can improve denial of service resistance against both identified attacks.