Search

Abstract: This paper proposed a hierarchical network security protocols designing model based on public key, the designing of the protocols is to be completed in several layers. Each sub-protocol achieved a sub-goal that it should complete, and provided data interface to a higher sub-protocol. And then merged the sub-protocol of each layer, to complete the protocols designing. In the previous research, the security of the protocol was always regarded as a whole, which caused the protocols designing to be tremendous complexity. The hierarchical model simplifies the process of security protocols designing, and make the protocols designing more clear or less cost, the security proof more simpler. [Copyright &y& Elsevier]

Security has become one of the major issues for data communication over wired and wireless networks. Different from the past work on the designs of cryptography algorithms and system infrastructures, we will propose a dynamic routing algorithm that could randomize delivery paths for data transmission. The algorithm is easy to implement and compatible with popular routing protocols, such as the Routing Information Protocol in wired networks and Destination-Sequenced Distance Vector protocol in wireless networks, without introducing extra control messages. An analytic study on the proposed algorithm is presented, and a series of simulation experiments are conducted to verify the analytic results and to show the capability of the proposed algorithm. [ABSTRACT FROM AUTHOR]

With rapid changes in the modern communication environment such as ad hoc networks and ubiquitous computing, it is necessary to construct a secure end-to-end channel between clients. In the last few years, researchers have extensively studied the password-authenticated key exchange (PAKE) in the three-party setting. The fundamental security goal of PAKE is security against dictionary attacks. The protocols for verifier-based PAKE are additionally required to be secure against server compromise. In this paper we propose an efficient verifier-based C2C-PAKE (called EV-C2C-PAKE) protocol resilient to server compromise. The new protocol resists dictionary attacks mounted by either passive or active network intruders, allowing, in principle, even weak password phrases to be used safely. It also offers perfect forward secrecy, which protects past sessions and passwords against future compromises. Finally, user passwords are stored in a form that is not plaintext-equivalent to the password itself, so an attacker who captures the password database cannot use it directly to compromise security and gain immediate access to the host. Furthermore, the authentication server can't get any information for the session key between the two users and the mutual authentication will carry through between the server and the two users. [ABSTRACT FROM AUTHOR]

The article discusses the results of the study on the methods of protecting the session initiation protocol (SIP) from information leak exposures which is used for voice over Internet Protocol signaling. Several forms of the exploitation of implementation vulnerabilities involve unauthorized access, worms, viruses, and denial of service attacks. The researchers introduced techniques to fingerprint SIP devices and develop a fingerprinting tool called SIPProbe that gathered fingerprints and determine SIP implementations. The study showed several useful applications of SIP fingerprinting such as higher priority given to messages from voice gateways, customization of messages for specific user agents, and slow processing of messages that are suspected to be malicious.

The article discusses the application of Security Assertion Markup Language (SAML) to protect Session Initiation Protocol (SIP) in voice over Internet Protocol signaling. SAML standard was used to supports the expression of security assertions which include authentication, role membership, or permissions. The flexibility of SAML assertions allows for the encoding of the identity imformation about the user, its generic authentication and authorization attributes to accommodate full authorization mechanisms and enable trait-based authorization. Moreover, SIP can be used together with SAML which was reflected in the present standardization work within the Internet Engineering Task Force.

The current studies on security architecture and information system security architecture (ISSA) are surveyed in this paper, and some types and their features of ISSA are discussed. Then, the structural elements of ISSA are analyzed, and the constructing steps for ISSA are proposed. [ABSTRACT FROM AUTHOR]