Improving Routing Security Using a Decentralized Public Key Distribution Algorithm

In Wireless Sensor Networks, Broadcast communication is the most fundamental and prevailing communication pattern. Securing the broadcast messages from the adversary is critical issue. To defend the WSNs against the adversary attacks of impersonation of a broadcast source or receiver, modification/fabrication of the broadcast message, attacker injecting malicious traffic to deplete the energy from the sensors, broadcast authentication of source and receivers becomes extremely inevitable. In this paper, we propose a novel ECC based public key distribution protocol and broadcast authentication scheme. The proposed method provides high security and has low overhead.

Download Full-text

ANALYSIS OF ATTACKS ONTO QUANTUM PUBLIC KEY DISTRIBUTION SYSTEM

PRIKLADNAYa DISKRETNAYa MATEMATIKA ◽

10.17223/20710410/2/13 ◽

2008 ◽

pp. 62-66

Author(s):

V.G. Skobelev

Keyword(s):

Distribution System ◽

Key Distribution ◽

Public Key ◽

Quantum Public Key

Download Full-text

Implementasi BGP dan Resource Public Key Infrastructure menggunakan BIRD untuk Keamanan Routing

Jurnal RESTI (Rekayasa Sistem dan Teknologi Informasi) ◽

10.29207/resti.v5i6.3631 ◽

2021 ◽

Vol 5 (6) ◽

pp. 1161-1170

Author(s):

Valen Brata Pranaya ◽

Theophilus Wellem

Keyword(s):

Autonomous Systems ◽

Public Key Infrastructure ◽

Digital Certificate ◽

Public Key ◽

The Internet ◽

Certification Authority ◽

Internet Routing ◽

Internet Connectivity ◽

Routing Security ◽

Bgp Routing

The validity of the routing advertisements sent by one router to another is essential for Internet connectivity. To perform routing exchanges between Autonomous Systems (AS) on the Internet, a protocol known as the Border Gateway Protocol (BGP) is used. One of the most common attacks on routers running BGP is prefix hijacking. This attack aims to disrupt connections between AS and divert routing to destinations that are not appropriate for crimes, such as fraud and data breach. One of the methods developed to prevent prefix hijacking is the Resource Public Key Infrastructure (RPKI). RPKI is a public key infrastructure (PKI) developed for BGP routing security on the Internet and can be used by routers to validate routing advertisements sent by their BGP peers. RPKI utilizes a digital certificate issued by the Certification Authority (CA) to validate the subnet in a routing advertisement. This study aims to implement BGP and RPKI using the Bird Internet Routing Daemon (BIRD). Simulation and implementation are carried out using the GNS3 simulator and a server that acts as the RPKI validator. Experiments were conducted using 4 AS, 7 routers, 1 server for BIRD, and 1 server for validators, and there were 26 invalid or unknown subnets advertised by 2 routers in the simulated topology. The experiment results show that the router can successfully validated the routing advertisement received from its BGP peer using RPKI. All invalid and unknown subnets are not forwarded to other routers in the AS where they are located such that route hijacking is prevented.

Download Full-text