scispace - formally typeset
Book ChapterDOI

The Resurrecting Duckling: Security Issues for Ad-hoc Wireless Networks

Reads0
Chats0
TLDR
A resurrecting duckling security policy model is presented, which describes secure transient association of a device with multiple serialised owners over the air in a short range wireless channel.
Abstract
In the near future, many personal electronic devices will be able to communicate with each other over a short range wireless channel. We investigate the principal security issues for such an environment. Our discussion is based on the concrete example of a thermometer that makes its readings available to other nodes over the air. Some lessons learned from this example appear to be quite general to ad-hoc networks, and rather different from what we have come to expect in more conventional systems: denial of service, the goals of authentication, and the problems of naming all need re-examination. We present the resurrecting duckling security policy model, which describes secure transient association of a device with multiple serialised owners.

read more

Content maybe subject to copyright    Report

Citations
More filters
Book ChapterDOI

Validating and Securing Spontaneous Associations between Wireless Devices

TL;DR: In this paper, the authors propose protocols to thwart spoofing and replay attacks by physically validating the two devices in a wireless association and in so doing, exchanging a shared session key between them for subsequent secure communication.

ARRIVE: Algorithm for Robust Routing in Volatile Environments

TL;DR: ARRIVE is a probabilistic algorithm that leverages the high node density and the inherent broadcast medium found in sensor networks to achieve routing robust to both link failures and patterned node failures without resorting to periodic flooding of the network.
Proceedings ArticleDOI

SPATE: small-group PKI-less authenticated trust establishment

TL;DR: The implementation of SPATE on Nokia N70 smartphones allows users to establish trust in small groups of up to eight users in less than one minute, and the example SPATE applications provide increased security with little overhead noticeable to users once keys are established.
Journal ArticleDOI

Deep Learning with Dense Random Neural Network for Detecting Attacks against IoT-connected Home Environments

TL;DR: Empirical validation results on packet captures in which attacks were inserted show that the Dense RNN correctly detects attacks.
Patent

System and method for providing secure resource management

TL;DR: In this paper, the authors propose a secure resource management system that includes a first device that creates a secure, shared resource space and a corresponding root certificate for the shared space, and the first device associates one or more resources that it can access with the shared spaces.
References
More filters
Journal ArticleDOI

New Directions in Cryptography

TL;DR: This paper suggests ways to solve currently open problems in cryptography, and discusses how the theories of communication and computation are beginning to provide the tools to solve cryptographic problems of long standing.

Integrity Considerations for Secure Computer Systems

K. J. Biba
TL;DR: The author identifies the integrity problems posed by a secure military computer utility and integrity policies addressing these problems are developed and their effectiveness evaluated.

Tamper resistance: a cautionary note

TL;DR: It is concluded that trusting tamper resistance is problematic; smartcards are broken routinely, and even a device that was described by a government signals agency as 'the most secure processor generally available' turns out to be vulnerable.
Book ChapterDOI

Low Cost Attacks on Tamper Resistant Devices

TL;DR: A number of attacks that can be mounted by opponents with much shallower pockets, such as smart-cards, are described.
Journal Article

Low cost attacks on tamper resistant devices

TL;DR: In this article, the authors describe a number of attacks that can be mounted by opponents with much shallower pockets, three of them involve special (but low cost) equipment: differential fault analysis, chip rewriting, and memory remanence.