基于6LoWPAN的缓冲区保留攻击中使用离散事件系统的攻击者揭示方案

Dipojjwal Ray, Pradeepkumar Bhale, S. Biswas, Sukumar Nandi, P. Mitra
{"title":"基于6LoWPAN的缓冲区保留攻击中使用离散事件系统的攻击者揭示方案","authors":"Dipojjwal Ray, Pradeepkumar Bhale, S. Biswas, Sukumar Nandi, P. Mitra","doi":"10.1109/ANTS50601.2020.9342842","DOIUrl":null,"url":null,"abstract":"6LoWPAN, an adaptation layer designed by IETF, is meant for IPv6 connectivity over lossy links and low power resource constrained devices using the IEEE 802.15.4 networks. Of late, the growing emergence of Internet of Things (IoT) enabled devices in areas such as industrial Cyber Physical Systems (CPS) and home automation has mobilized extensive implementation of 6LoWPAN. However, absence of authentication mechanisms render the adaptation layer prone to various attacks arising out of duplicated or fabricated fragments. Buffer Reservation Attack targets the vulnerability induced due to fictitious allocation of the butter, which then denies new packets from occupancy till timeout. Existing research works to mitigate such attacks resort to cryptographic solutions and split butter approaches to intelligently guarantee butter reservation. In this paper we propose an attacker revelation scheme using Discrete Event Systems (DES) in the framework of Finite State Machines (FSM). The motivation behind our countermeasure is that no work has addressed identification of the adversary in 6LoWPAN setting before. We detect the attack using Wireshark analytics and identify the malicious node from responses to probe packets using a DES based state estimator which ensures correctness too. Our approach is tested on Contiki OS and experimental results show that the proposed scheme provides energy efficient solutions with lesser response times compared to the state of the art solutions.","PeriodicalId":426651,"journal":{"name":"2020 IEEE International Conference on Advanced Networks and Telecommunications Systems (ANTS)","volume":"24 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2020-12-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"3","resultStr":"{\"title\":\"ArsPAN: Attacker Revelation Scheme using Discrete Event System in 6LoWPAN based Buffer Reservation Attack\",\"authors\":\"Dipojjwal Ray, Pradeepkumar Bhale, S. Biswas, Sukumar Nandi, P. Mitra\",\"doi\":\"10.1109/ANTS50601.2020.9342842\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"6LoWPAN, an adaptation layer designed by IETF, is meant for IPv6 connectivity over lossy links and low power resource constrained devices using the IEEE 802.15.4 networks. Of late, the growing emergence of Internet of Things (IoT) enabled devices in areas such as industrial Cyber Physical Systems (CPS) and home automation has mobilized extensive implementation of 6LoWPAN. However, absence of authentication mechanisms render the adaptation layer prone to various attacks arising out of duplicated or fabricated fragments. Buffer Reservation Attack targets the vulnerability induced due to fictitious allocation of the butter, which then denies new packets from occupancy till timeout. Existing research works to mitigate such attacks resort to cryptographic solutions and split butter approaches to intelligently guarantee butter reservation. In this paper we propose an attacker revelation scheme using Discrete Event Systems (DES) in the framework of Finite State Machines (FSM). The motivation behind our countermeasure is that no work has addressed identification of the adversary in 6LoWPAN setting before. We detect the attack using Wireshark analytics and identify the malicious node from responses to probe packets using a DES based state estimator which ensures correctness too. Our approach is tested on Contiki OS and experimental results show that the proposed scheme provides energy efficient solutions with lesser response times compared to the state of the art solutions.\",\"PeriodicalId\":426651,\"journal\":{\"name\":\"2020 IEEE International Conference on Advanced Networks and Telecommunications Systems (ANTS)\",\"volume\":\"24 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2020-12-14\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"3\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2020 IEEE International Conference on Advanced Networks and Telecommunications Systems (ANTS)\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/ANTS50601.2020.9342842\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2020 IEEE International Conference on Advanced Networks and Telecommunications Systems (ANTS)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/ANTS50601.2020.9342842","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 3

摘要

6LoWPAN是IETF设计的适配层,用于使用IEEE 802.15.4网络的有损链路和低功耗资源受限设备上的IPv6连接。最近,物联网(IoT)设备在工业网络物理系统(CPS)和家庭自动化等领域的日益兴起,已经动员了6LoWPAN的广泛实施。然而,由于身份验证机制的缺失,使得适应层容易受到由重复或伪造的片段引起的各种攻击。缓冲区保留攻击的目标是由于虚构的黄油分配导致的漏洞,然后拒绝新的数据包占用直到超时。现有的缓解此类攻击的研究工作采用加密解决方案和分割黄油的方法来智能地保证黄油的保留。本文提出了一种在有限状态机框架下使用离散事件系统(DES)的攻击者披露方案。我们的对策背后的动机是,以前没有工作解决了在6LoWPAN设置中识别对手的问题。我们使用Wireshark分析来检测攻击,并使用基于DES的状态估计器从响应到探测数据包中识别恶意节点,这也确保了正确性。我们的方法在Contiki OS上进行了测试,实验结果表明,与最先进的解决方案相比,所提出的方案提供了更少响应时间的节能解决方案。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
ArsPAN: Attacker Revelation Scheme using Discrete Event System in 6LoWPAN based Buffer Reservation Attack
6LoWPAN, an adaptation layer designed by IETF, is meant for IPv6 connectivity over lossy links and low power resource constrained devices using the IEEE 802.15.4 networks. Of late, the growing emergence of Internet of Things (IoT) enabled devices in areas such as industrial Cyber Physical Systems (CPS) and home automation has mobilized extensive implementation of 6LoWPAN. However, absence of authentication mechanisms render the adaptation layer prone to various attacks arising out of duplicated or fabricated fragments. Buffer Reservation Attack targets the vulnerability induced due to fictitious allocation of the butter, which then denies new packets from occupancy till timeout. Existing research works to mitigate such attacks resort to cryptographic solutions and split butter approaches to intelligently guarantee butter reservation. In this paper we propose an attacker revelation scheme using Discrete Event Systems (DES) in the framework of Finite State Machines (FSM). The motivation behind our countermeasure is that no work has addressed identification of the adversary in 6LoWPAN setting before. We detect the attack using Wireshark analytics and identify the malicious node from responses to probe packets using a DES based state estimator which ensures correctness too. Our approach is tested on Contiki OS and experimental results show that the proposed scheme provides energy efficient solutions with lesser response times compared to the state of the art solutions.
求助全文
通过发布文献求助,成功后即可免费获取论文全文。 去求助
来源期刊
自引率
0.00%
发文量
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术官方微信