Prevention Scheme of DDoS Attack in Mobile WiMAX Networks Using Shared Authentication Information 


Vol. 34,  No. 2, pp. 162-169, Feb.  2009


PDF
  Abstract

Message Authentication Code (MAC) assures integrity of messages. In Mobiel WiMAX, 128-bit Cipher-based MAC (CMAC) is calculated for management messages but only the least significant half is actually used truncating the most significant 64 bits. Naming these unused most significant 64bits Shared Authentication Information (SAI), we suggest that SAI can be applied to protect the network from DDoS attack which exploits idle mode vulnerabilities. Since SAI is the unused half of CMAC, it is as secure as 64bits of CMAC and no additional calculations are needed to obtain it. Moreover, SAI doesn't have to be exchanged through air interface and shared only among MS, BS, and ASN Gateway. With these good properties, SAI can efficiently reduce the overheads of BS and ASN GW under the DDoS attack.

  Statistics
Cumulative Counts from November, 2022
Multiple requests among the same browser session are counted as one view. If you mouse over a chart, the values of data points will be shown.


  Cite this article

[IEEE Style]

Y. Kim and S. Bahk, "Prevention Scheme of DDoS Attack in Mobile WiMAX Networks Using Shared Authentication Information," The Journal of Korean Institute of Communications and Information Sciences, vol. 34, no. 2, pp. 162-169, 2009. DOI: .

[ACM Style]

Youngwook Kim and Saewoong Bahk. 2009. Prevention Scheme of DDoS Attack in Mobile WiMAX Networks Using Shared Authentication Information. The Journal of Korean Institute of Communications and Information Sciences, 34, 2, (2009), 162-169. DOI: .

[KICS Style]

Youngwook Kim and Saewoong Bahk, "Prevention Scheme of DDoS Attack in Mobile WiMAX Networks Using Shared Authentication Information," The Journal of Korean Institute of Communications and Information Sciences, vol. 34, no. 2, pp. 162-169, 2. 2009.