Denial Of Service Vulnerabilities Research Articles

Generator of Slow Denial-of-Service Cyber Attacks.

In today’s world, the volume of cyber attacks grows every year. These attacks can cause many people or companies high financial losses or loss of private data. One of the most common types of attack on the Internet is a DoS (denial-of-service) attack, which, despite its simplicity, can cause catastrophic consequences. A slow DoS attack attempts to make the Internet service unavailable to users. Due to the small data flows, these attacks are very similar to legitimate users with a slow Internet connection. Accurate detection of these attacks is one of the biggest challenges in cybersecurity. In this paper, we implemented our proposal of eleven major and most dangerous slow DoS attacks and introduced an advanced attack generator for testing vulnerabilities of protocols, servers, and services. The main motivation for this research was the absence of a similarly comprehensive generator for testing slow DoS vulnerabilities in network systems. We built an experimental environment for testing our generator, and then we performed a security analysis of the five most used web servers. Based on the discovered vulnerabilities, we also discuss preventive and detection techniques to mitigate the attacks. In future research, our generator can be used for testing slow DoS security vulnerabilities and increasing the level of cyber security of various network systems.

DoS and DDoS vulnerability of IoT: A review

Internet of Things (IoT) paradigm became particularly popular in the last couple of years in such a way that the devices are present in almost every home across the globe. Using cheap components one can connect any device to the internet and enable information collecting from the environment, making everyday life a lot easier. Even though it does bring multiple advantages to the table, at the same time it brings certain challenges and vulnerabilities that need to be addressed. In this paper we focus on Distributed Denial of Service (DDoS) and Denial of Service (DoS) attacks and we provide a review of the current architecture of Internet of Things which is prone to these.

English

Mobile Ad-hoc Networks (MANETs) can form a network by allowing the wireless nodes without any fixed infrastructure. For MANET’s, early routing protocols are not accounted because of security issues. Further, cryptographic methods were revised to secure the routing information. These protocols had created new avenues for denial of service (DoS) as a part of the process. Thus, the trade-off between security strength and DoS vulnerability has become an emerging area, which required further investigation. Therefore, Different trust methods can be used for the protocol development at various levels during trade-off. To gain the knowledge on this, real world testing which evaluates the cost of existing proposals is mandatory. Without this, the protocol design in the future will be difficult. Thus, in the present paper, the comparison of two MANET routing protocols, namely SAODV and TAODV are carried. This addresses the routing security through cryptographic and trust-based means, and also the performance comparisons on actual resource-limited hardware. Based on this, the design decisions are evaluated for routing protocols in near future. Keywords— ad-hoc, security, routing, trust-based,

T-MAC 통신 프로토콜에서 보안 이슈

본 T-MAC 프로토콜은 WSN을 위해 설계된 잘 알려진 MAC 프로토콜이다. 본 논문에서 우리는 T-MAC 보안 취약성을 살펴보고 DoS 취약성과 재연공격에 대한 취약성과 관련하여, T-MAC 각 단계별 소모하는 전력을 분석하였다. 분석된 결과로부터 일반적인 T-MAC 통신을 위한 신뢰성, 효율성, 보안을 제공하는 전력에 효율적인 인증기법의 필요성을 고려하였다. 이 연구는 T-MAC 통신에 전력 소비 및 DoS 취약성 사례 연구에 관한 것이다. Time out-medium access control (T-MAC) protocol is one of the well-known MAC protocols designed for wireless sensor networks (WSN), and is proposed to enhance the poor performance of the S-MAC protocol. In this paper, we are reviewed about security vulnerability in T-MAC, and analyzed the power which is consumed at each stage of T-MAC protocol according to vulnerability of denial of service (DoS) and replay problem. From our analytical results, it can be considered the need of power efficient authentication scheme which provides the reliability, efficiency, and security for a general T-MAC communication. This is the case study of possible DoS vulnerability and its power consumption in T-MAC.

Cryptographic Versus Trust-based Methods for MANET Routing Security

Mobile Ad-hoc Networks (MANETs) allow wireless nodes to form a network without requiring a fixed infrastructure. Early routing protocols for MANETs failed to take security issues into account. Subsequent proposals used strong cryptographic methods to secure the routing information. In the process, however, these protocols created new avenues for denial of service (DoS). Consequently, the trade-off between security strength and DoS vulnerability has emerged as an area requiring further investigation. It is believed that different trust methods can be used to develop protocols at various levels in this trade-off. To gain a handle on this exchange, real world testing that evaluates the cost of existing proposals is necessary. Without this, future protocol design is mere speculation. In this paper, we give the first comparison of SAODV and TAODV, two MANET routing protocols, which address routing security through cryptographic and trust-based means respectively. We provide performance comparisons on actual resource-limited hardware. Finally, we discuss design decisions for future routing protocols.

Security Analysis of DoS Vulnerability in Stream Authentication Schemes Using Hash Chaining

SUMMARY In this letter, we show that some stream authenticationschemes using hash chaining are highly vulnerable to denial of service(DoS) attacks. An adversary can disrupt all receivers of group by makinguse of modifying a few packets in those schemes. key words: stream authentication schemes, hash chaining, denial of ser-vice(DoS) attack 1. Introduction Hash chaining provides a cost effective means with a real-time streaming application which needs to support data ori-gin authentication and integrity protection in multicast. Toreduce the cost of digital signature including both the com-putation and the communication overhead in some streamauthentication schemes [1]–[4], the source generates anamortizing signature over a set of packets called a block.As a result, a signature can be generated and transmittedonce a block at the beginning or at the end of a block, whichcontains the hash value of the first or the last packet in ablock. In addition, each packet, which contains only a fewhash values of its previous or succeed packets as an authen-tication tag, is transmitted continuously, thus this is calledhash chaining.From the viewpoint of efficiency, previous work usinghash chaining may be appropriate but can be suffered fromthe denial of service attack. In particular, the DoS attackon the receiver side is much serious problem in multicastthan those in the case of unicast since a single adversary candisrupt thousands of receivers at a time. In this letter, weshow that just one or a few packet’s modifications can causethe failed verification of all packets in the block.1.1 NotationsWe use the following notations throughout this letter: