Iolus

Abstract

As multicast applications are deployed for mainstream use, the need to secure multicast communications will become critical. Multicast, however, does not fit the point-to-point model of most network security protocols which were designed with unicast communications in mind. As we will show, securing multicast (or group) communications is fundamentally different from securing unicast (or paired) communications. In turn, these differences can result in scalability problems for many typical applications.In this paper, we examine and model the differences between unicast and multicast security and then propose Iolus: a novel framework for scalable secure multicasting. Protocols based on Iolus can be used to achieve a variety of security objectives and may be used either to directly secure multicast communications or to provide a separate group key management service to other "security-aware" applications. We describe the architecture and operation of Iolus in detail and also describe our experience with a protocol based on the Iolus framework.

Reducing Frequency of Group Rekeying Operation

“…However, this approach requires several decryption and re-encryption operations of multicast message, when it passes from a sub-group to another. ILOUS [4], AKMP [9], and BLADE [5] belong to this group.…”

“…In ad-hoc network, very frequent rekeying operation will eventually cause a broadcast storm. The second category of research focuses on reducing the frequency of re-keying [2,4]. Especially, Kronos and Iolus adopt a time-driven method, which performs the rekeying operation periodically instead of performing it whenever member changes occur [2,4].…”

“…The second category of research focuses on reducing the frequency of re-keying [2,4]. Especially, Kronos and Iolus adopt a time-driven method, which performs the rekeying operation periodically instead of performing it whenever member changes occur [2,4]. The authors demonstrated that the time-driven method could considerably reduce the overhead of re-keying even though such limitations as no guarantee of forward secrecy and delays in adding new members.…”

Towards a Distributed Runtime Monitor for ICS/SCADA Systems

“…Choi et al (2009) present a solution to the problem of broadcast communications, to be used in the event of, for example broadcasting alarm states. Lee et al (2008) integrate Choi et al (2009) with the Iolus framework (Mittra 1997) to break down key distribution into hierarchies to ensure efficient distribution of new keys and revocation of expired keys, whilst still supporting broadcast messages.…”

Current Trends in Group Key Management

“…Third is Group member. IOLUS protocol is the frame work of a hierarchy of multicast subgroups to constitute virtual group [20]. Each subgroup is managed by a Group Security Agent (GSA), responsible for managing key inside the sub group.…”