scispace - formally typeset
Book ChapterDOI

The Resurrecting Duckling: Security Issues for Ad-hoc Wireless Networks

Reads0
Chats0
TLDR
A resurrecting duckling security policy model is presented, which describes secure transient association of a device with multiple serialised owners over the air in a short range wireless channel.
Abstract
In the near future, many personal electronic devices will be able to communicate with each other over a short range wireless channel. We investigate the principal security issues for such an environment. Our discussion is based on the concrete example of a thermometer that makes its readings available to other nodes over the air. Some lessons learned from this example appear to be quite general to ad-hoc networks, and rather different from what we have come to expect in more conventional systems: denial of service, the goals of authentication, and the problems of naming all need re-examination. We present the resurrecting duckling security policy model, which describes secure transient association of a device with multiple serialised owners.

read more

Content maybe subject to copyright    Report

Citations
More filters
Proceedings ArticleDOI

Distinguishing users with capacitive touch communication

TL;DR: This paper presents a capacitive communication method through which a device can recognize who is interacting with it, and exploits the capacitive touchscreens, which are now used in laptops, phones, and tablets, as a signal receiver.
Book ChapterDOI

A Distributed Light-Weight Authentication Model for Ad-hoc Networks

TL;DR: This work presents a security model for low-value transactions in ad-hoc networks in which this is the core requirement for commercial transactions and is based on a recommendation and reference protocol that is inspired by human behavior and that is in accordance with the very nature of ad-Hoc networks.
Proceedings ArticleDOI

Group Device Pairing based Secure Sensor Association and Key Management for Body Area Networks

TL;DR: This paper proposes a lightweight scheme for secure sensor association and key management in BAN called GDP, which supports batch deployment of sensor nodes to save setup time, does not rely on any additional hardware devices, and is mostly based on symmetric key cryptography, while allowing batch node addition and revocation.
Journal ArticleDOI

The Sleep Deprivation Attack in Sensor Networks: Analysis and Methods of Defense

TL;DR: This research shows how adversary nodes can exploit clustering algorithms to ensure their selection as cluster heads for the purpose of launching attacks that prevent victim nodes from sleeping, and finds that the hash-based scheme is the best at mitigating the sleep deprivation attack.
Proceedings ArticleDOI

Towards an intrusion detection system for battery exhaustion attacks on mobile computing devices

TL;DR: This intrusion detection system uses several parameters, such as CPU load and disk accesses, to estimate the power consumption using a linear regression model, allowing us to find the energy used on a per process basis, and thus identifying processes that are potentially battery exhaustion attacks.
References
More filters
Journal ArticleDOI

New Directions in Cryptography

TL;DR: This paper suggests ways to solve currently open problems in cryptography, and discusses how the theories of communication and computation are beginning to provide the tools to solve cryptographic problems of long standing.

Integrity Considerations for Secure Computer Systems

K. J. Biba
TL;DR: The author identifies the integrity problems posed by a secure military computer utility and integrity policies addressing these problems are developed and their effectiveness evaluated.

Tamper resistance: a cautionary note

TL;DR: It is concluded that trusting tamper resistance is problematic; smartcards are broken routinely, and even a device that was described by a government signals agency as 'the most secure processor generally available' turns out to be vulnerable.
Book ChapterDOI

Low Cost Attacks on Tamper Resistant Devices

TL;DR: A number of attacks that can be mounted by opponents with much shallower pockets, such as smart-cards, are described.
Journal Article

Low cost attacks on tamper resistant devices

TL;DR: In this article, the authors describe a number of attacks that can be mounted by opponents with much shallower pockets, three of them involve special (but low cost) equipment: differential fault analysis, chip rewriting, and memory remanence.