... [1] developed B-SIPS as a client/server-based system for PIDs which detects anomalies in IC d... more ... [1] developed B-SIPS as a client/server-based system for PIDs which detects anomalies in IC drain of smart batteries. ... Snort's primary purpose is to combat network-based attacks and protectnetwork assets by monitoring packet streams for malicious activity. ...
This paper proposes an innovative battery-sensing intrusion protection system (B-SIPS) for mobile... more This paper proposes an innovative battery-sensing intrusion protection system (B-SIPS) for mobile computers, which alerts on power changes detected on small wireless devices. These hosts are employed as sensors in a wireless network and form the basis of the "Canary-Net" intrusion detection system (IDS). This detection capability is scalable and complementary with existing commercial and open system network IDSs. B-SIPS implementation correlates device power consumption with IEEE 802.11 and Bluetooth communication activity. Irregular and attack activity is detected and reported to the intrusion detection engine for correlation with existing signatures in a database and for forensic investigation by a security manager
... Both modules continually monitor packet streams in real-time and log attack discoveries into ... more ... Both modules continually monitor packet streams in real-time and log attack discoveries into databases that can be queried by the CIDE server. ... b. Snort-Based Wi-Fi Module Usingnetwork-based attacks from Table I, the goal of this test set was to determine ... Merlin II analyzer. ...
MILCOM 2016 - 2016 IEEE Military Communications Conference, 2016
Network-based moving target defense systems are a valuable addition to the world of computer secu... more Network-based moving target defense systems are a valuable addition to the world of computer security and privacy. Ongoing research attempts to push the boundaries of network-based moving target defenses by adding client/server functionality to the Moving Target IPv6 Defense (MT6D) system. While this additional functionality provides a great many benefits, it is important to fully understand the impact to the network of implementing an MT6D server, which by definition greatly increases the amount of management traffic on a network segment. IPv6 relies on the Neighbor Discovery Protocol (NDP) for all network management functions, including the discovery of currently active addresses. Each address that is bound requires a number of NDP messages to be exchanged before a host can begin using said address. When an MT6D server requires the binding of a large number of IPv6 addresses to a single interface, there is likely to be some negative impact to the network due to the amount of NDP t...
Large-scale, high-profile Distributed Denial-of-Service (DDoS) attacks have become common recurri... more Large-scale, high-profile Distributed Denial-of-Service (DDoS) attacks have become common recurring events that increasingly threaten the proper functioning and continual success of the Internet. Recently, client puzzle protocols have been proposed as a mitigation technique for DoS attacks. These protocols require a client to solve a cryptographic “puzzle” before it receives any service from a remote server. By embedding the client puzzle mechanism into the lowest layer of the Internet protocol stack that is vulnerable against network DoS attacks— the network layer—we can mitigate the most virulent form of DoS attacks: flooding-based DDoS attacks. This paper describes the framework of a novel IP-layer client puzzle protocol that we call Chained Puzzles. We describe the framework in detail and show its effectiveness using simulation results
A system and method performs a moving target blind rendezvous by exchanging data through a distri... more A system and method performs a moving target blind rendezvous by exchanging data through a distributed hash table. The system allows users to securely send small pieces of information over a network while only requiring an exchange of public keys ahead of time. The system relies on the size and resilience of the BitTorrent Distributed Hash Table and the security properties of cryptographic constructions such as Elliptic Curve Diffie-Hellman key exchange and secure one-way hash functions.https://digitalcommons.usmalibrary.org/patents/1000/thumbnail.jp
... [1] developed B-SIPS as a client/server-based system for PIDs which detects anomalies in IC d... more ... [1] developed B-SIPS as a client/server-based system for PIDs which detects anomalies in IC drain of smart batteries. ... Snort's primary purpose is to combat network-based attacks and protectnetwork assets by monitoring packet streams for malicious activity. ...
This paper proposes an innovative battery-sensing intrusion protection system (B-SIPS) for mobile... more This paper proposes an innovative battery-sensing intrusion protection system (B-SIPS) for mobile computers, which alerts on power changes detected on small wireless devices. These hosts are employed as sensors in a wireless network and form the basis of the "Canary-Net" intrusion detection system (IDS). This detection capability is scalable and complementary with existing commercial and open system network IDSs. B-SIPS implementation correlates device power consumption with IEEE 802.11 and Bluetooth communication activity. Irregular and attack activity is detected and reported to the intrusion detection engine for correlation with existing signatures in a database and for forensic investigation by a security manager
... Both modules continually monitor packet streams in real-time and log attack discoveries into ... more ... Both modules continually monitor packet streams in real-time and log attack discoveries into databases that can be queried by the CIDE server. ... b. Snort-Based Wi-Fi Module Usingnetwork-based attacks from Table I, the goal of this test set was to determine ... Merlin II analyzer. ...
MILCOM 2016 - 2016 IEEE Military Communications Conference, 2016
Network-based moving target defense systems are a valuable addition to the world of computer secu... more Network-based moving target defense systems are a valuable addition to the world of computer security and privacy. Ongoing research attempts to push the boundaries of network-based moving target defenses by adding client/server functionality to the Moving Target IPv6 Defense (MT6D) system. While this additional functionality provides a great many benefits, it is important to fully understand the impact to the network of implementing an MT6D server, which by definition greatly increases the amount of management traffic on a network segment. IPv6 relies on the Neighbor Discovery Protocol (NDP) for all network management functions, including the discovery of currently active addresses. Each address that is bound requires a number of NDP messages to be exchanged before a host can begin using said address. When an MT6D server requires the binding of a large number of IPv6 addresses to a single interface, there is likely to be some negative impact to the network due to the amount of NDP t...
Large-scale, high-profile Distributed Denial-of-Service (DDoS) attacks have become common recurri... more Large-scale, high-profile Distributed Denial-of-Service (DDoS) attacks have become common recurring events that increasingly threaten the proper functioning and continual success of the Internet. Recently, client puzzle protocols have been proposed as a mitigation technique for DoS attacks. These protocols require a client to solve a cryptographic “puzzle” before it receives any service from a remote server. By embedding the client puzzle mechanism into the lowest layer of the Internet protocol stack that is vulnerable against network DoS attacks— the network layer—we can mitigate the most virulent form of DoS attacks: flooding-based DDoS attacks. This paper describes the framework of a novel IP-layer client puzzle protocol that we call Chained Puzzles. We describe the framework in detail and show its effectiveness using simulation results
A system and method performs a moving target blind rendezvous by exchanging data through a distri... more A system and method performs a moving target blind rendezvous by exchanging data through a distributed hash table. The system allows users to securely send small pieces of information over a network while only requiring an exchange of public keys ahead of time. The system relies on the size and resilience of the BitTorrent Distributed Hash Table and the security properties of cryptographic constructions such as Elliptic Curve Diffie-Hellman key exchange and secure one-way hash functions.https://digitalcommons.usmalibrary.org/patents/1000/thumbnail.jp
Uploads