Denial of Service Protection for Optimized and QoS-aware Handover Based on Localized Cookies
Please always quote using this URN:urn:nbn:de:0296-matheon-345
- Quality of Service (QoS) mechanisms in networks supporting mobile Internet communications give rise to new threats: these mechanisms could be abused by malicious entities launching so-called Denial of Service (DoS) attacks. If the network can not efficiently check the credibility of a QoS-request during a handover process, malicious entities could flood the network with bogus QoSrequests; if the authentication check is performed by means of an AAA protocol before the access network commits its resources to the request, the authentication process may not only introduce a notable latency to the handover process, but also generate an extensive traffic which degrades the signaling capacity in the network when there are a considerable amount of malicious requests. In order to defend against these kinds of attacks and meet the low-latency micro-mobility handover requirement, we 1propose to have a preliminary authentication check with a cookie-based mechanism before processing the requests and performing authentication and authorization. The performance evaluation shows that the cookie-based mechanism is efficient in dealing with the identified issues.
Author: | Tianwei Chen, Günter Schäfer, Changpeng Fan, Stefan Adams, Michel Sortais, Adam Wolisz |
---|---|
URN: | urn:nbn:de:0296-matheon-345 |
Referee: | Volker Mehrmann |
Document Type: | Preprint, Research Center Matheon |
Language: | English |
Date of first Publication: | 2004/05/01 |
Release Date: | 2004/05/01 |
Institute: | Technische Universität Berlin |
Preprint Number: | 32 |