Wireless Vulnerabilities Research Articles

Parallel-pipelined-memory Blowfish FPGA-based radio system with improved power-throughput for secured IoT network

The Internet of Things (IoT) has emerged as a disruptive force, transforming industries, cities, and daily life in a time of unprecedented connection. This outcome has called for robust security, reliability, and efficient power management for the IoT network. The security of small mobile devices within the IoT network has become a pressing concern due to the multitude of wireless vulnerabilities that threaten data transmission, the harsh wireless environment for data transmission, and the need for low-power consumption devices. This study proposed the development of a new parallel-pipelined-memory (P2M) Blowfish field programmable gate array (FPGA)-based radio system as a prototype of a secured mobile device for IoT application. The FPGA platform verified the proposed system, indicating a minimum of 64 % power-throughput improvement. In this case, the hardware utilisation was reduced by 3.5 % compared to the recently published works. Meanwhile, the real-time transmission analysis of the suggested P2M Blowfish radio system in a non-line-of-sight (NLOS) indoor environment indicated that the transmitted data over 2.4 GHz ZigBee standard at 10 dBm radio frequency (RF) power level demonstrated the optimum signal quality with received signal strength and signal-to-noise ratio (SNR) of −34.58 dBm and 39.06 dB, respectively. This feature also included a 6.25 × 10−3 minimum bit error rate (BER) at 61 m as the maximum communication range. Thus, the P2M Blowfish FPGA-based radio system could improve the security, reliability, and power efficiency of IoT networks.

PUF-Based Mutual Authentication and Key Exchange Protocol for Peer-to-Peer IoT Applications

Peer to Peer (P2P) or direct connection IoT has become increasingly popular owing to its lower latency and higher privacy compared to database-driven or server-based IoT. However, wireless vulnerabilities raise severe concerns on IoT device-to-device communication. This is further aggravated by the challenge to achieve lightweight direct mutual authentication and secure key exchange between IoT peer nodes in P2P IoT applications. Physical unclonable function (PUF) is a key enabler to lightweight, low-power and secure authentication of resource-constrained devices in IoT. Nevertheless, current PUF-enabled authentication protocols, with or without the challenge-response pairs (CRPs) of each of its interlocutors stored in the verifier's side, are incompatible for P2P IoT scenarios due to the security, storage and computing power limitations of IoT devices. To solve this problem, a new lightweight PUF-based mutual authentication and key exchange protocol is proposed. It allows two resource-constrained PUF embedded endpoint devices to authenticate each other directly without the need for local storage of CRPs or any private secrets, and simultaneously establish the session key for secure data exchange without resorting to the public-key algorithm. The proposed protocol is evaluated using the game-based formal security analysis method as well as the automatic security analysis tool ProVerif to corroborate its mutual authenticity, secrecy, and resistance against replay and man-in-the-middle (MITM) attacks. Using two Avnet Ultra96-V2 boards to emulate the two IoT endpoint devices, a physical prototype system is also constructed to demonstrate and validate the feasibility of the proposed secure P2P connection scheme. A comparative analysis shows that the proposed protocol outperforms related protocols in terms of security features, computational complexity as well as communication and storage costs.

WAYS OF INCREASING THE RELIABILITY OF MESSAGE TRANSMISSION IN INFORMATION AND COMMUNICATION SYSTEMS USING ONE-WAY RADIO CHANNELS

Modern information and communication systems which use one-way radio channels have the main task to maximize the reliability and information transmission stealth. This task becomes more relevant in conditions of the radio-electronic warfare and growing of the cyber incidents with wireless vulnerabilities exploitation. This solution is useful for Internet of Things technologies with one-way interaction protocols and unmanned aerial vehicle control systems for organization and critical infrastructure cyber security support.The purpose of this work is the fading of possible ways for increasing of the message transmission reliability in the information and communication systems with one-way radio channels.The examples of digital modulation methods applications, interference-resistant coding which are used in modern information and communication technologies with one-way radio transmission are considered in the article. In the work were received results of digital modulation methods and interference-resistant coding analysis with minimum bit error rate criterion. The usage futures of combined random coding which is based on interference-resistant and stochastic coding combination were researched.Standard random bit generators were tested by the NIST Statistical Test Suite 2.1.2 application.This research results give us the possibility to increase the reliability of message transmission by way using binary phase-shift keying in combination with majority coding. In this case we should solve tasks to improve the phase estimation schemes of received signal and optimal choice of majority coding redundancy.In order to increase the reliability and information stealth of message transmission the using of combined random coding was proposed. At the same time, we recommend to use Blum-Blum-Shub random bit generator for the codebook creating. Blum-Blum-Shub random bit generator was chosen according to estimation results, obtained with the help of NIST Statistical Test Suite.

Secure WiFi-Direct Using Key Exchange for IoT Device-to-Device Communications in a Smart Environment

With the rapid growth of Internet of Things (IoT) devices around the world, thousands of mobile users share many data with each other daily. IoT communication has been developed in the past few years to ensure direct connection among mobile users. However, wireless vulnerabilities exist that cause security concerns for IoT device-to-device (D2D) communication. This has become a serious debate, especially in smart environments where highly sensitive information is exchanged. In this paper, we study the security requirements in IoT D2D communication. In addition, we propose a novel authentication approach called Secure Key Exchange with QR Code (SeKeQ) to verify user identity by ensuring an automatic key comparison and providing a shared secret key using Diffie-Hellman key agreement with an SHA-256 hash. To evaluate the performance of SeKeQ, we ran a testbed using devices with a WiFi-Direct communication interface. The obtained results depict that our proposal can offer the required security functions including key exchange, data confidentiality, and integrity. In addition, our proposal can reach the same security performances as MANA (Manual Authentication) and UMAC (Universal-Hashing Message Authentication Code) but with 10 times fewer key computations and reduced memory occupancy.

Security requirement derivation by noun–verb analysis of use–misuse case relationships: a case study using positive train control

Use cases and misuse cases, respectively, state the interactions that an actor can have and a mal-actor be prevented from having with a system. The cases do not specify either the security requirements or the associated attributes that a system must possess to operate in a secure manner. We present an algorithmic, domain-independent approach rooted in verb---noun analysis of use cases and misuse cases to generate system requirements and the associated security attributes. We illustrate the utility of this general five-step method using Positive train control (PTC) (a command and control system used to navigate trains in a railway grid) as a case study. This approach allows the designer to protect against the effect of wireless vulnerabilities on the safety of PTC systems.

유무선 VoIP 취약점 분석과 해킹공격 및 보안 연구

Recently VoIP has provided voice(both wired and wireless from IP-based) as well as the transmission of multimedia information. VoIP used All-IP type, Gateway type, mVoIP etc. Wired and wireless VoIP has security vulnerabilities that VoIP call control signals, illegal eavesdropping, service misuse attacks, denial of service attack, as well as wireless vulnerabilities etc. from WiFi Zone. Therefore, the analysis of security vulnerabilities in wired and wireless VoIP and hacking incidents on security measures for research and study is needed. In this paper, VoIP (All-IP type, and for Gateway type) for system and network scanning, and, IP Phone to get the information and analysis of the vulnerability. All-IP type and Gateway type discovered about the vulnerability of VoIP hacking attacks (Denial of Service attacks, VoIP spam attacks) is carried out. And that is a real VoIP system installed and operated in the field of security measures through research and analysis is proposed.

Ad hoc network routing and security: A review

AbstractAd hoc network is a collection of wireless mobile nodes dynamically forming a local area network without the use of any existing network infrastructure or centralized administration. One problem in the design of such network is its wireless vulnerabilities and limited physical security. This paper considers the security attributes and goals of ad hoc network, reviews the latest developments of current routing and security mechanissm including encryption, protocols, user authentication, and physical security. It also explores the new approaches trying to solve current problems and points out the future research directions. These methods will be helpful in the military and other security‐sensitive fields. Copyright © 2006 John Wiley & Sons, Ltd.

Taking Care of (E)-Business?: Australian IT Professionals’ Views of Wireless Network Vulnerability Assessments

M-commerce, a growing sub-category of E-business, allows business to be done ‘anywhere, anytime’. However security of wireless devices remains problematic. It is unclear whether protocols to alleviate security problems, such as wireless vulnerability assessments (WNVAs), are being used or are effective. The paper reports on a survey-based study of Australian computer security professionals’ use of and opinions about two types of WNVA: wireless monitoring and penetration testing. An initially surprising finding was how little both types are used, despite the ease with which wireless networks can be attacked and the fact that penetration testing is fairly well understood. In the light of organizational culture the survey findings become more explicable. Senior management, and even IT staff, may still hold a traditional, ‘wired network’ view of their organization. Aspects of organizational culture also appear to limit the way WNVA users go about the assessment process. A cultural shift could help change users’ perceptions about the risks and rewards of WNVAs. This could threaten IT staff’s professional identity, however, and needs further research.

Wireless vulnerability assessment

Only a few years ago, wireless networking was still a magical art. Special wireless cards had to be bought and plugged into existing computers. Drivers had to be downloaded from vendors regularly because they were buggy and under constant development. Home use access points cost more than $300 and enterprise access points did not really exist.