Vulnerabilities Of Wireless Networks Research Articles

An Efficient and Secure Certificateless Aggregate Signature Scheme for Vehicular Ad hoc Networks

Vehicular ad hoc networks (VANETs) have become an essential part of the intelligent transportation system because they provide secure communication among vehicles, enhance vehicle safety, and improve the driving experience. However, due to the openness and vulnerability of wireless networks, the participating vehicles in a VANET system are prone to a variety of cyberattacks. To secure the privacy of vehicles and assure the authenticity, integrity, and nonrepudiation of messages, numerous signature schemes have been employed in the literature on VANETs. The majority of these solutions, however, are either not fully secured or entail high computational costs. To address the above issues and to enable secure communication between the vehicle and the roadside unit (RSU), we propose a certificateless aggregate signature (CLAS) scheme based on hyperelliptic curve cryptography (HECC). This scheme enables participating vehicles to share their identities with trusted authorities via an open wireless channel without revealing their identities to unauthorized participants. Another advantage of this approach is its capacity to release the partial private key to participating devices via an open wireless channel while keeping its identity secret from any other third parties. A provable security analysis through the random oracle model (ROM), which relies on the hyperelliptic curve discrete logarithm problem, is performed, and we have proven that the proposed scheme is unforgeable against Type 1 (FGR1) and Type 2 (FGR2) forgers. The proposed scheme is compared with relevant schemes in terms of computational cost and communication overhead, and the results demonstrate that the proposed scheme is more efficient than the existing schemes in maintaining high-security levels.

ИССЛЕДОВАНИЕ УГРОЗ ФУНКЦИОНИРОВАНИЯ КИБЕРФИЗИЧЕСКИХ СИСТЕМ ЗА СЧЕТ ИСПОЛЬЗОВАНИЯ УЯЗВИМОСТЕЙ БЕСПРОВОДНОГО СТАНДАРТА IEEE 802.11

The purpose of the paper is to analyze and systematize the existing security threats to the functioning of cyber-physical systems through vulnerabilities of wireless networks operating on the basis of protocols defined by the IEEE 802.11 standard. The relevance of the study is explained by ever growing number of devices and various systems using wireless networks to ensure their functioning, including the designated standard. Using examples of existing varieties of this technology (there are more than 15 generations of the standard), the features of wireless local area connections according to this standard as well as the ways of organizing wireless communication lines (with one access point and (or) several, without an access point) are analyzed. Since the functioning of cyber-physical systems at the network level is based on this Wi-Fi technology, major attention is paid to the study of security threats of the IEEE 802.11 wireless standard,. Despite the benefits of using such means of communication, namely: high data transfer rates, high bandwidth, wide coverage area, reliability of the built network, ease of implementation and scalability, the implementation of security threats can lead to a violation of confidentiality and authenticity of the transmitted information, loss of control over the access point, the communication channel itself, the integrity of the transmitted data, etc. The existing security functions implemented in client devices operating on the basis of wireless connection of local area networks of the IEEE 802.11 standard are systematized in the paper as well.

Cryptanalysis of an Efficient and Secure Certificateless Aggregate Signature-Based Authentication Scheme for Vehicular Ad Hoc Networks

Vehicular ad hoc networks (VANETs) apply the Internet of Things technology to provide secure communication among the vehicles, thereby improving the safe driving of vehicles, the utilization of traffic resources, and the efficiency of information services. Due to the openness and vulnerability of wireless networks in VANETs, messages in sharing and transmission are easily attacked and destroyed. Therefore, a large number of schemes for VANETs were proposed to protect the privacy of vehicles and ensure the authentication, integrity, and nonrepudiation of messages. However, most of these schemes have serious security flaws or poor performance issues. Recently, Thumbur et al. presented an efficient certificateless aggregate signature-based authentication scheme for VANETs and then gave the detailed security proof (IEEE Internet of Things Journal, vol. 8, no. 3, pp. 1908–1920, 2021). In this article, we analyze the security of Thumbur et al.’s scheme and demonstrate that it has significant security problems. Specifically, their scheme cannot resist public key replacement attacks from external adversaries, and it is not secure against coalition attacks from malicious vehicles. Then, we improve Thumbur et al.’s scheme to address the security weaknesses. According to the security and performance analysis, the improved scheme enhances the security while maintaining the performance of the original scheme.

WNV-Detector: automated and scalable detection of wireless network vulnerabilities

The security of wireless routers receives much attention given by the increasing security threats. In the era of Internet of Things, many devices pose security vulnerabilities, and there is a significant need to analyze the current security status of devices. In this paper, we develop WNV-Detector, a universal and scalable framework for detecting wireless network vulnerabilities. Based on semantic analysis and named entities recognition, we design rules for automatic device identification of wireless access points and routers. The rules are automatically generated based on the information extracted from the admin webpages, and can be updated with a semi-automated method. To detect the security status of devices, WNV-Detector aims to extract the critical identity information and retrieve known vulnerabilities. In the evaluation, we collect information through web crawlers and build a comprehensive vulnerability database. We also build a prototype system based on WNV-Detector and evaluate it with routers from various vendors on the market. Our results indicate that the effectiveness of our WNV-Detector, i.e., the success rate of vulnerability detection could achieve 95.5%.

Wireless Sensor Networks: Towards Resilience Against Weather-Based Disruptions

Abstract The article discusses vulnerability of wireless sensors networks to weather-based disruptions considering the opinions of different experts published in a range of scientific materials. The introduction provides a brief overview of wireless signals in real world conditions focusing on how weather affects signals (rain, fog and clouds, snow, hail, lightning, wind, bodies of water, trees and physical obstruction). Information about the effects of weather on wireless sensor networks using Free Space Optical / Radio Frequency (FSO/RF) communication is then provided. Finally, the impact of weather conditions on MANET routing protocols is considered theoretically, and experimental simulations are performed by comparing the sustainability of different protocols to different weather conditions. After analysis of experiment results, ideas on how to decrease vulnerability of wireless networks to weather-based disruptions are discussed.

How Vulnerabilities in Wireless Networks Can Enable Advanced Persistent Threats

With the tremendous popularity of mobile devices an d their increasing adoption in the corporate environments, there is a larger oppor tunity for Advanced Persistent Threats (APTs) to exploit vulnerabilities in wireless and mobility networks. We review several vulnerabilities and successful attacks in this domain, and evaluate the possibility of these attacks to be used by APTs. Our analysis shows that known attacks in the mobili ty domain are powerful enough to contribute to the success of an APT operation. Copyright © 2013 Praise Worthy Prize S.r.l. - All r ights reserved.

Safety Analysis and Strategy of Alipay

With the widespread use pay treasures, which occupy an increasingly large daily, the proportion of third-party payment, pay treasure security issues become more and more prominent. So, how to better respond to Alipay security risks, how to improve its security, these are very important to discuss the contents. This article briefly learn Alipay technical processes missing from the mobile phone, Internet and transaction worries wireless network vulnerabilities, a brief description of the security issues Alipay, and put forward relevant measures in the third chapter of governance.

Providing A Forward Secure Authentication and Key Agreement Protocol for UMTS

Access to the wireless and radio connections is different from wired networks regarding to the vulnerability of wireless networks. Universal Mobile Telecommunication System (UMTS) as one of the third-generation cellular telecommunication systems is capable of adjustment to the Global system for Mobile Communications (GSM) and has resolved some of its drawbacks too. Furthermore, UMTS has provided an authentication and key agreement protocol (AKA) namely UMTS AKA that has some disadvantages like as bandwidth usage, huge memory to store data, lack of User Identification security, and synchronization problem. In this paper we investigate an authentication and key agreement protocol named IAP AKA that has resolved a number of problems associated with the security shortcomings of the UMTS AKA protocol. Then, we will represent a new protocol that has applied new procedures for the secrecy of User Identification by preventing general access to user identity. In addition, Elliptic Curve Cryptography is used to strength our protocol security. Finally, the most interesting property of our proposed protocol is Forward Secrecy which is necessary for user conversations confidentiality.

Protocol-aware radio frequency jamming in Wi-Fi and commercial wireless networks

Radio frequency (RF) jamming is a denial of service attack targeted at wireless networks. In resource-hungry scenarios with constant traffic demand, jamming can create connectivity problems and seriously affect communication. Therefore, the vulnerabilities of wireless networks must be studied. In this study, we investigate a particular type of RF jamming that exploits the semantics of physical (PHY) and medium access control (MAC) layer protocols. This can be extended to any wireless communication network whose protocol characteristics and operating frequencies are known to the attacker. We propose two efficient jamming techniques: A low-data-rate random jamming and a shot-noise based protocol-aware RF jamming. Both techniques use shot-noise pulses to disrupt ongoing transmission ensuring they are energy efficient, and they significantly reduce the detection probability of the jammer. Further, we derived the tight upper bound on the duration and the number of shot-noise pulses for Wi-Fi, GSM, and WiMax networks. The proposed model takes consider the channel access mechanism employed at the MAC layer, data transmission rate, PHY/MAC layer modulation and channel coding schemes. Moreover, we analyze the effect of different packet sizes on the proposed jamming methodologies. The proposed jamming attack models have been experimentally evaluated for 802.11b networks on an actual testbed environment by transmitting data packets of varying sizes. The achieved results clearly demonstrate a considerable increase in the overall jamming efficiency of the proposed protocol-aware jammer in terms of packet delivery ratio, energy expenditure and detection probabilities over contemporary jamming methods provided in the literature.

An Efficient Protocol for Privacy and Authentication for Resource-Constrained Devices in Wireless Networks

The authors envision a scenario for security of wireless networks that include and integrate nodes of all different capabilities, including tiny sensors or similarly battery-powered, resource-constrained tiny nodes. However, the existing Wireless Protected Access (WPA) protocol that supports security services for wireless networks today may not be suitable for such resource-constrained, low-end nodes since its existing authentication and privacy mechanisms are complex and computationally intensive. In this work, the authors propose an efficient protocol for authentication and privacy in wireless networks using identity-based encryption (IBE) techniques. Specifically, the authors propose an enhanced and extended version of the WPA protocol by incorporating IBE based authentication methods in the existing WPA protocol at the link layer level. The enhanced WPA protocol can be used for small and resource-constrained wireless devices to integrate them in existing wireless networks. Their proposed protocol is proven to be secure against common attacks and vulnerabilities in wireless networks. Also, the authors’ analysis of the protocol shows that it is feasible and efficient in terms of computation, communication, and storage overheads to support many resource-constrained devices.

Kablosuz Ağlar için bir DoS Saldırısı Tasarımı

Ozet: Kablosuz aglarin gelisimi ve kullanimlarinin artisi ile bu aglarin guvenliginin saglamasi hususu on plana cikmistir. Kablolu aglarda bu gune dek kullanilagelmis olan cesitli saldiri tipleri, ayni sekilde kablosuz aglarda da kullanilir olmustur. En sik gorulen saldiri tiplerinden biri, DoS (Denial of Service – Hizmet Reddi) seklinde siniflandirilmis olan saldiri cesididir. Kablosuz Ag donanimi imal eden belli basli sirketler, bu DoS saldirilarina karsi guvenlik politikalari gelistirmis ve bunlari onlemeye cabalamistir. Ancak, bu kablosuz cihazlarin kullanildigi kimi sahalarda birtakim guvenlik zafiyetleri gozlemlenmistir. Bu calismada ilk olarak DoS saldiri teknikleri siniflandirilmistir. Ardindan, kamuya acik alanlardaki kablosuz aglarin DoS saldirilarina karsi zafiyetlerini test etmek icin Vbasic programlama dili kullanilarak bir program yazilmistir. Gerceklestirilen saldiri tipleri, TCP ( Transmission Control Protocol) Tasma saldirisi, UDP (User Datagram Protocol) Tasma saldirisi ve Ping Tasma saldirisi olmustur. Neticede, gerceklestirilen saldirilar basarili olmustur.

Intrusion Detection Techniques In Mobile Networks

The rapid proliferation of wireless networks and mobile computing applications has changed the landscape of network security. The recent denial of service attacks on major Internet sites have shown us, no open computer network is immune from intrusions. The wireless ad-hoc network is particularly vulnerable due to its features of open medium, dynamic changing topology, cooperative algorithms, lack of centralized monitoring and management point, and lack of a clear line of defense. The traditional way of protecting networks with firewalls and encryption software is no longer sufficient and effective. Many intrusion detection techniques have been developed on fixed wired networks but have been turned to be inapplicable in this new environment. We need to search for new architecture and mechanisms to protect wireless networks and mobile computing application. In this paper, we examine the vulnerabilities of wireless networks and say that we must include intrusion detection in the security architecture for mobile computing environment. We have showed such architecture and evaluated key mechanisms in this architecture such as applying mobile agents to intrusion detection, anomaly detection and misuse detection for mobile ad-hoc networks.

Site survey: mapeamento, detecção de vulnerabilidades e análise de sinal de redes sem fio

A técnica do site survey em redes wireless possibilita o mapeamento gráfico, a análise de sinais wi-fi e a detecção de vulnerabilidades em redes sem fio. O conhecimento dessa ferramenta é fundamental para determinar a viabilidade de sua implantação e analisar a abrangência dos sinais de radiofreqüência, contribuindo para a execução de projetos de redes wireless, com qualidade, eficiência e segurança.

Intrusion detection techniques for mobile wireless networks

The rapid proliferation of wireless networks and mobile computing applications has changed the landscape of network security. The traditional way of protecting networks with firewalls and encryption software is no longer sufficient and effective. We need to search for new architecture and mechanisms to protect the wireless networks and mobile computing application. In this paper, we examine the vulnerabilities of wireless networks and argue that we must include intrusion detection in the security architecture for mobile computing environment. We have developed such an architecture and evaluated a key mechanism in this architecture, anomaly detection for mobile ad-hoc network, through simulation experiments.