Abstract

Denial of serviceisbecoming a growing concern. As our systems communicate more and more with others that we know less and less, they become increasingly vulnerable to hostile intruders who may take advantage of the very protocols intended for the establishment and authentication of communication to tie up our resources and disable our servers. Since these attacks occur beforeparties are authenticatedtoeach other, we cannot rely upon enforcement of the appropriate access control policy to protect us #as is recommended in the classic work of Gligor and Millen in #5, 18, 19##. Instead we must build our defenses, as much as possible, into the protocols themselves. This paper shows how some principles that have already been used to make protocols moreresistant to denial of servicecan be formalized, and indicates the ways in which existing cryptographic protocol analysis tools could be modi#ed to operate within this formal framework. 1 Introduction Denial of service is becoming a growing c...

Citations

1040	R.: A logic for authentication - Burrows, Abadi, et al. - 1989
368	The inductive approach to verifying cryptographic protocols - Paulson - 1998
307	Password authentication with insecure communication - Lamport
245	Automated Analysis of Cryptographic Protocols using Mur - Mitchell, Mitchell, et al. - 1997
216	The NRL Protocol Analyzer: An Overview - Meadows - 1996
183	A compiler for the analysis of security protocols - Casper - 1997
135	Client puzzles: a cryptographic countermeasure against connection depletion attacks, in - Juels, Brainard - 1999
101	spaces: Why is a security protocol correct - Strand - 1998
99	Analysis of a denial of service attack on TCP - Schuba, Krsul, et al. - 1997
89	Some new attacks upon security protocols - Lowe - 1996
79	Fail-stop protocols: An approach to designing secure protocols - Gong, Syverson - 1995
69	Photuris: Session-Key Management Protocol", RFC 2522 - Karn, Simpson - 1999
55	What do we mean by entity authentication - Gollmann - 1996
43	CAPSL: Common Authentication Protocol Specification Language - Millen - 1997
42	A Resource Allocation Model for Denial of Service - Millen
36	M.J.: Authentication and authenticated key exchanges. Design Codes Cryptography 2 - Diffie, Oorschot, et al. - 1992
29	The Interrogator Model - Millen - 1995
20	A note on the denial-of-service problem - Gligor - 1983
16	CAPSL Interface for the NRL Protocol Analyzer - Brackin, Meadows, et al. - 1999
10	Authentication and authenticated key exchanges. Designs, Codes and Cryptography - Die, Oorschot, et al. - 1992
9	the Ordering of Events in a Distributed System - Times - 1978
7	Denial of Service: A Perspective - Millen - 1994
4	Internet routing infrastructure security countermeasures - Kent, Ellis, et al. - 1996
1	The Internet Key Exchange (IKE), version 8. draft-ietf-ipsec-isakmpoakley -08.txt - Harkins, Carrel - 1998
1	The Internet Key Exchange (IKE), version 8 - Harkins, Carrel - 1998