New DoS Defense Method Based on Strong Designated Verifier Signatures

Abstract

We present a novel technique for source authentication of a packet stream in a network, which intends to give guarantees that a specific network flow really comes from a claimed origin. This mechanism, named packet level authentication (PLA), can be an essential tool for addressing Denial of Service (DoS) attacks. Based on designated verifier signature schemes, our proposal is an appropriate and unprecedented solution applying digital signatures for DoS prevention. Our scheme does not rely on an expensive public-key infrastructure and makes use of light cryptography machinery that is suitable in the context of the Internet of Things (IoT). We analyze our proposed scheme as a defense measure considering known DoS attacks and present a formal proof of its resilience face to eventual adversaries. Furthermore, we compare our solution to already existent strategies, highlighting its advantages and drawbacks.

Multi-Sensor Wearable Health Device Framework for Real-Time Monitoring of Elderly Patients Using a Mobile Application and High-Resolution Parameter Estimation

“…Even though secure data communication is not a focus of this paper, it is essential to highlight that a distributed system such as this proposed healthcare application needs a fully distributed security system, such as proposed in Ferreira and de Sousa Jr. ( 2017 ). As it also comprises interactions according to the Internet of Things (IoT) paradigm and involves personal data, a particularly lightweight protocol for the authentication of devices, as proposed in de Almeida et al ( 2018 ), is also paramount.…”

Review on Security of Internet of Things Authentication Mechanism

“…DoS attack is quite common in IoT based network, where an unauthorized user sends thousands of requests to the authentication server to shut down the operation temporarily. To contrast, de Almeida et al [48] developed a method to defense Dos attack in a network by providing packet-level authentication. In addition, a distributed denial of service attack is an advanced DoS attack where DoS is performed in a distributed manner.…”

Low-Rate DoS Attacks Detection Based on MAF-ADM

“…The total signal energy (TSE), named T, refers to the sum of the amplitude frequency of all elements in the time-frequency joint distribution matrix as Formula (5). In Figure 4, the total signal energy values of 150 detection windows acquired in normal state and LDoS attack state respectively are compared.…”

“…Due to the constant preemption of resources by the LDoS attack stream, the service quality of TCP connection in the network is affected. Therefore, the average value of TCP is lower, and the value of TSE is also reduced according to Formulas (4) and (5).…”

“…In February 2019, the website of the Philippine National Association of Journalists suffered a DoS attack and was closed for 12 h. The Facebook was also attacked by DoS in March 2019, and users could not log in to their accounts. Nowadays cloud computing [2], software defined network [3,4], and wireless sensor networks [5,6] are widely applied. The development of these technologies makes the current network structure which has higher node density, larger scale and limited resources more vulnerable to DoS attacks [7][8][9].…”