Broadband Router Security: History, Challenges and Future Implications

Pooley, Julie Ann; Malina, Alicja

doi:10.15394/jdfsl.2017.1444

Cited by 3 publications

(2 citation statements)

References 23 publications

(3 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…However, security concerns have also risen (eg, risks of transmitting over the Internet and processing/storing data externally). There are several cases of online data exposure, including data hijacking or eavesdropping when using vulnerable Wi‐Fi access points, Internet home connections, and external routing backbones . Therefore, risk levels can be associated with where the data are stored and processed, and several studies take location into account when proposing security solutions.…”

Section: Related Workmentioning

confidence: 99%

“…There are several cases of online data exposure, including data hijacking or eavesdropping when using vulnerable Wi-Fi access points, Internet home connections, and external routing backbones. [14][15][16][17][18] Therefore, risk levels can be associated with where the data are stored and processed, and several studies take location into account when proposing security solutions. Encryption and access-control services were proposed to tackle location-based security decisions.…”

Section: Location-aware Security Policiesmentioning

confidence: 99%

See 1 more Smart Citation

Efficient allocation of elastic interfederation encrypted streaming sessions

et al. 2019

View full text Add to dashboard Cite

Summary Audio and video (A/V) collaboration platforms often use Internet cloud technologies to ensure elasticity. They generally operate on a best‐effort basis, without quality or delivery guarantees. However, such guarantees are a premise of business‐focused platforms, which often rely on static/dedicated infrastructure and hardware‐based components. This article presents results obtained in the final stage of the Elastic Media Distribution (EMD) project, which targets the migration of a business‐focused hardware‐based A/V collaboration tool towards a more elastic, reliable, and secure cloud‐based model. The use case under investigation is an educational scenario: teachers and students located at distributed sites collaborate under different data encryption policies. An existing model of collaboration streaming is extended to accommodate encryption‐enabled streaming components, and new resource allocation heuristics are proposed to deploy these components under stringent service level agreement (SLA) constraints. An extended version of our evaluation framework, based on the CloudSim simulator, manages encryption‐enabled components. A resource usage dataset was obtained by prototyping selected streaming components and evaluating their performance on the Virtual Wall large‐scale test bed. This dataset is fed into the extended simulation framework. Simulation results show longer than expected delays when loading streaming components, an issue that jeopardises the user experience that can be alleviated by the algorithms proposed in this article. Results show that the proposed algorithms enable policy‐based secured communications under bandwidth and virtual machine (VM) cost increases of 48% and 23%, respectively, if compared with a nonencrypted previous solution, and with set‐up times remaining under the required 2‐second deadline.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Location-aware Security Policiesmentioning

confidence: 99%

Efficient allocation of elastic interfederation encrypted streaming sessions

et al. 2019

View full text Add to dashboard Cite

show abstract

Accounting for the Unaccounted Vulnerabilities Found in Endpoint ISP SOHO Router

Jain,

Shete

2023

2023 IEEE International Carnahan Conference on Security Technology (ICCST)

View full text Add to dashboard Cite

But is it exploitable? Exploring how Router Vendors Manage and Patch Security Vulnerabilities in Consumer-Grade Routers

Chalhoub,

Martin

2023

Proceedings of the 2023 European Symposium on Usable Security

View full text Add to dashboard Cite

Millions of consumer-grade routers are vulnerable to security attacks. Router network attacks are dangerous and infections, presenting a serious security threat. They account for 80% of infected devices in the market, posing a greater threat than infected IoT devices and desktop computers. Routers offer an attractive target of attacks due to their gateway function to home networks, internet accessibility, and higher likelihood of having vulnerabilities. A major problem with these routers is their unpatched and unaddressed security vulnerabilities. Reports show that 30% of critical router vulnerabilities discovered in 2021 have not received any response from vendors. Why?To better understand how router vendors manage and patch vulnerabilities in consumer-grade routers, and the accompanying challenges, we conducted 30 semi-structured interviews with professionals in router vendor companies selling broadband and retail routers in the UK. We found that router professionals prioritize vulnerability patching based on customer impact rather than vulnerability severity score. However, they experienced obstacles in patching vulnerabilities due to outsourcing development to third parties and the inability to support outdated models. To address these challenges, they developed workarounds such as offering replacement routers and releasing security advisories. However, they received pushback from customers who were not technically capable or concerned about security. Based on our results, we concluded with recommendations to improve security practice in routers.

show abstract

Broadband Router Security: History, Challenges and Future Implications

Cited by 3 publications

References 23 publications

Efficient allocation of elastic interfederation encrypted streaming sessions

Efficient allocation of elastic interfederation encrypted streaming sessions

Accounting for the Unaccounted Vulnerabilities Found in Endpoint ISP SOHO Router

But is it exploitable? Exploring how Router Vendors Manage and Patch Security Vulnerabilities in Consumer-Grade Routers

Contact Info

Product

Resources

About