Key-agreement protocol will play an important role as an entrance to secure communication over the Internet. Specifically, ISAKMP(Internet Security Association and Key Management Protocol) /Oakley key-agreement is currently a leading approach for communication between two parties. Basic idea of ISAKMP/Oakley is an authenticated DiffieHellman (DH) key-agreement protocol. This authentication owes a lot to public-key primitives whose implementation includes modular exponentiation. Since modular exponentiation is computationally expensive, attackers are motivated to abuse it for Denial-ofService (DoS) attacks. In search of resistance against DoS attacks, this paper first describes a basic idea on the protection mechanism for authenticated DH keyagreement protocols against DoS attacks. The paper then proposes a DoS-resistant version of three-pass ISAKMP/Oakley's Phase 1 where DoS attacks impose expensive computation on the attackers themselves. The DoS-resistance is evaluated in terms of (1...

User mobility is rapidly becoming an important and popular network feature. This is especially evident in wireless/cellular networks where user mobility raises a number of important security issues and concerns. Foremost among them is the ability to track mobile users' movements and whereabouts. Ideally, no entity other than the user himself and a responsible authority in the user's home domain (if any) should know both the real identity and the current location of the mobile user. At present, most environments supporting user mobility either do not address the problem at all or base their solutions on assumptions that are specific to today's cellular phone networks. This paper discusses a number of issues related to anonymity and location privacy in mobile networks. It reviews current state-of-the-art approaches, identifies their exposures of anonymity and proposes several low-cost solutions which vary in complexity, degree of protection and assumptions about the underlying environmen...