IP multicast security: Issues and directions

Annales des Telecommunications/Annals of Telecommunications

Volumn 55, Issue 7, 2000, Pages 324-340

  Hardjono, Thomas ^a   Tsudik, Gene ^b  

^a NORTEL NETWORKS   (United States)

^b UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

MULTICAST SECURITY; 'CURRENT; COMMUNICATIONS PROTOCOLS; CORE PROBLEMS; IP MULTICAST; KEY-MANAGEMENT; MODELING; MULTICAST COMMUNICATION; PRIVACY; SECURITY;

COMPUTER ARCHITECTURE; INTERNET; MULTICASTING; NETWORK PROTOCOLS; DATA PRIVACY; INTERNET PROTOCOLS; NETWORK SECURITY; ROUTING PROTOCOLS;

SECURITY OF DATA; AUTHENTICATION;

EID: 0034226894     PISSN: 00034347     EISSN: 19589395     Source Type: Journal    
DOI: None     Document Type: Article

References (72)

1. DEERING (S.), "Host extensions for IP multicasting," RFC 1112, IETF, 1989.
2. WAITZMAN (D.), PARTRIDGE (C.), DEERING (S.), "Distance vector multicast routing protocol," RFC 1075, IETF, 1988.
3. BALLARDIE (T.), FRANCIS (P.), CROWCROFT (J.), "Core based trees: An architecture for scalable inter-domain multicast routing," in Proceedings of ACM SIGCOMM'93, (San Francisco), pp. 85-95, ACM, 1993.
4. MOY (J.), "Multicast extensions to OSPF," RFC 1584, IETF, 1994.
5. DEERING (S.), ESTRIN (D.), FARINACCI (D.), HANDLEY (M.), HELMY (A.), JACOBSON (V.), LIU (C.), SHARMA (P.), THALER (D.), WEI (L.), "Protocol Independent Multicast - Sparse Mode: Motivations and architecture," draft-IETF-pim-arch-05.txt (Work in Progress), Aug 1998.
6. FENNER (W.), "Internet group management protocol version 2," RFC 2236, IETF, 1997.
7. CAIN (B.), DEERING (S.), THYAGARAJAN (A.), "Internet group management protocol version 3," draft-ietf-idmr-igmp-v3-Oi.txt (Work in Progress), Feb 1999.
8. HARDJONO (T.), "Secure Multicast Group (SMuG) Reference Framework," http://uuu.ipmulticast.com/community/smug (IRTF Work in Progress), March 1999.
9. CANETTI (R.), PINKAS (B.), "A taxonomy of multicast security issues," draft-canetti-secure-multicast-taxonomy-01.txt (Work in Progress), Nov 1998.
10. HARDJONO (T.), CAIN (B.), DORASWAMY (N.), "A framework for group key management for multicast security," draft-IETF-ipsec-gkmframework-01.txt (Work in Progress), Feb 1999.
11. MITTRA (S.), "The Iolus framework for scalable secure multicasting," in Proceedings of ACM SIGCOMM'97, pp. 277-288, ACM, 1997.
12. WALLNER (D.), HARDER (E.), AGEE (R.), "Key management for multicast: Issues and architectures," draft-wallner-key-arch-01.txt (Work in Progress), Sept 1998.
13. SHAMIR (A.), "How to share a secret," Communications of the ACM, vol 22, no 11, pp. 612-613, 1979.
14. SIMMONS (G.J.), "An introduction to shared secret and/or shared control schemes and their application," in Contemporary Cryptology: The Science of Information Integrity (Simmons G.J., ed.), pp. 441-497, IEEE Press, 1992.
15. BALENSON (D.), MCGREW (D.), SHERMAN (A.), "Key management for large dynamic groups: One-way function trees and amortized initialization," draft-balenson-groupkeymgmt-oft-00.txt (Work in Progress), Feb 1999.
16. HARNEY (H.), MUCKENHIRN (C.), "Group key management protocol (GKMP) specification," RFC 2093, IETF, July 1997.
17. HARNEY (H.), MUCKENHIRN (C.), "Group key management protocol (GKMP) architecture," RFC 2094, IETF, July 1997.
18. HARKINS (D.), DORASWAMY (N.), "A secure scalable multicast key management protocol (MKMP)," (Work in Progress), November 1997.
19. BALLARDIE (T.), "Scalable multicast key distribution," RFC 1949. IETF, 1996.
20. BALLARDIE (A.), CAIN (B.), ZHANG (Z.), "Core Based Trees (CBT version 3) multicast routing," draft-IETF-idmr-cbt-spec-v3-01.txt (Work in Progress), August 1998.
21. HARDJONO (T.), CAIN (B.), MONGA (I.), "Intra-domain group key management protocol," draft-IETF-ipsec-intragkm-00.txt (Work in Progress), Nov 1998.
22. MEYER (D.), "Administratively scope IP multicast," RFC 2365, IETF, July 1998.
23. HANDLEY (M.), THALER (D.), ESTRIN (D.), "The internet multicast address allocation architecture," draft-handley-malloc-arch-00.txt (Work in Progress), Dec 1997.
24. CANETTI (R.), CHENG (P.), PENDARAKIS (D.), RAO (J.), ROHATGI (P.), SAHA (D.), "An architecture for secure internet multicast," draft-irtf-smug-sec-mcast-arch-00.txt (Work in Progress), Feb 1999.
25. HARNEY (H.), HARDER (E.), "Group security association key management protocol," draft-harney-sparta-gsnkmp-sec-00.txt (Work in Progress), Apr 1999.
26. WONG (C.K.), GOUDA (M.), LAM (S.), "Secure group communications using key graphs," in Proceedings of ACM SIGCOMM'9S, ACM, 1998.
27. CHANG (I.), ENGEL (R.), KANDLUR (D.), PENDARAKIS (D.), and Saha (D.), "Key management for secure internet multicast using boolean function minimization techniques," in Proceedings of Infocom '99, (New York), IEEE, March 1999.
28. CANETTI (R.), MALKIN (T.), NISSIM (K.), "Efficient communication-storage tradeoffs for multicast encryption," in Proceedings of Eurocrypt '99, Springer-Verlag, 1999.
29. HARNEY (H.), HARDER (E.), "Logical Key hierarchy (LKH) protocol, draft-harney-sparta-lkhp-sec-00.txt (Work in Progress), Mar 1999.
30. HARNEY (H.), HARDER (E.), "Multicast Security Management Protocol (MSMP) requirements and policy," draft-harney-sparta-msmp-sec-OO.txt (Work in Progress), Mar 1999.
31. HARKINS (D.), CARREL (D.), "The internet key exchange (IKE)," RFC 2409, IETF, Nov 1998.
32. KENT (S.), ATKINSON (R.), "Security architecture for the Internet Protocol," RFC 2401, IETF, Nov 1998.
33. PERLMAN (R.), "Network layer protocols with byzantine robustness", Technical Report MIT/LCS/TR-429, Massachusetts Institute of Technology, October 1988.
34. MURPHY (S.L.), BADGER (M.R.), "Digital signature protection of ospf routing protocol," in Proceedings of the 1996 Network and Distributed System Security Symposium, (San Diego), ISOC, 1996.
35. HEFFERNAN (A.), "Protection of BGP sessions via the TCP MD5 signature option," draft-ietf-idr-bgp-tcp-md5-00.txt (Work in Progress), Mar 1998.
36. BATES (T.), BUSH (R.), LI (T.), REKHTER (Y.), "DNS-based NLRI origin AS verification in BGP," draft-bates-bgp4-nlri-orig-verif-00.txt (Work in Progress), Feb 1998.
37. MURPHY (S.), "BGP security analysis," draft-murphy-bgp-secr-01.txt (Work in Progress), Aug 1998.
38. PRZYGIENDA (T.), "BGP-4 MD5 authentication," draft-przygienda-bgp-md5-00.txt (Work in Progress), Nov 1997.
39. REKHTER (Y.), LI (T.), "A Border Gateway Protocol 4 (BGP-4)," RFC 1771, IETF, 1995.
40. MURPHY (S.), BADGER (M.), WELLINGTON (B.), "OSPF with digital signatures," RFC 2154, IETF, 1997.
41. MOY (J.), OSPF: Anatomy of an Internet Routing Protocol, Addison-Wesley, 1998.
42. MOY (J.), OSPF version 2, RFC 2328, IETF, 1998.
43. VILLAMIZAR (C.), ALAETTINOGLU (C.), MEYER (D.), MURPHY (S.), and ORANGE (C.), "Routing policy system security," draft-IETF-rps-auth-01.txt (Work in Progress), May 1998.
44. HAUSER (R.), PRZYGIENDA (T.), TSUDIK (G.), "Reducing the cost of security in link-state routing," in Proceedings of the 1997 Network and Distributed System Security Symposium, (San Diego), ISOC, 1997.
45. SMITH (B.R.), MURTHY (S.), GARCIA-LUNA-ACEVES (J.J.), "Securing distance vector routing protocols," in Proceedings of the 1997 Network and Distributed System Security Symposium, (San Diego), ISOC, 1997.
46. SIROIS (K.E.), KENT (S.T.), "Securing the nimrod routing architecture," in Proceedings of the 1997 Netmork and Distributed System Security Symposium, (San Diego), ISOC, 1997.
47. BALLARDIE (T.), CROWCROFT (J.), "Multicast-specific security threats and counter-measures," in Proceedings of the Symposium on Network and Distributed Systems Security - NDSS'95, (San Diego), ISOC, 1995.
48. WEI (L.), "Authenticating PIM version 2 messages," Nov 1998. draft-IETF-pim-v2-auth-00.txt (Work in Progress).
49. KENT (S.), ATKINSON (R.), "IP authentication header," RFC 2402, IETF, Nov 1998
50. HARDJONO (T.), CAIN (B.), "Simple key management protocol for PIM, 7 draft-ietf-pim-simplelkmp-00.txt (Work in Progress), Mar 1999.
51. SHIELDS (C.), GARCIA-LUNA-ACEVES (J.), "KHIP - a scalable protocol for secure multicast routing," in Proceedings of ACM SIGCOMM'99, ACM, 1999. (To appear).
52. HARDJONO (T.), WHETTEN (B.), "Security requirements for RMTP-II," draft-ielf-rmtp-ii-sec-00.txt (Unpublished Work in Progress), May 1999.
53. WHETTEN (B.), BASAVAIAH (M.), PAUL (S.), MONTGOMERY (T.), "RMTP-II specification," draft-whetten-RMTP-ii-00.txt (Work in Progress), Apr 1998.
54. SMITH (J.), WEINGARTEN (F.), "Research challenges for the next generation internet," Report from the Workshop on Research Directions for NGI, May 1997.
55. STEER (D.), STRAWCZYNSKI (L.), DIFFIE (W.), WIENER (M.), "A secure audio teleconference system," in Advances in Cryptology, CRYPTO'88, August 1990.
56. FIAT (A.), NAOR (M.), "Broadcast encryption," in Advances in Cryptology - CRYPTO'9S, August 1993.
57. BURMESTER (M.), DESMEDT (Y.), "A secure and efficient conference key distribution system," in Advances in Cryptology - EUROCRYPT'94, May 1994.
58. JUST (M.), VAUDENAY (S.), "Authenticated multi-party key agreement," in Advances in Cryptology, EUROCRYPT'96, May 1996.
59. STEINER (M.), TSUDIK (G.), WAIDNER (M.), "Diffie-Hellman key distribution extended to groups," in ACM Symposium on Computer and Communication Security, March 1996.
60. STEINER (M.), TSUDIK (G.), WAIDNER (M.), "Cliques: A new approach to group key agreement," in IEEE Conference on Distributed Computing Systems, May 1998.
61. ATENIESE (G.), STEINER (M.), and TSUDIK (G.), "Authenticated group key agreement and friends," in ACM Symposium on Computer and Communication Security, November 1998.
62. POOVENDRAN (R.), CORSON (S.), BARAS (J.), "A shared key generation procedure using fractional keys," in IEEE Milcom 98, October 1998.
63. DIFFIE (W.), HELLMAN (E.), "New directions in cryptography," IEEE Tansactions on Information Theory, IT-22, no 6, pp. 644-54, 1976.
64. BERKET (K.), MOSER (L.), MELLIAR-SMITH (P.), "The intergroup protocols: Scalable group communication for the internet," in Proceedings of the 3rd Global Internet Mini-Conference, November 1998.
65. KRAWCZYK (H.), BELLARE (M.), CANETTI (R.), "HMAC: Key hashing for message authentication," RFC 2104, IETF, February 1997.
66. SCHNORR (C.), "Efficient signature generation by smart cards," Journal of Cryptology, 4, no3, 1991.
67. CAMENISCH (J.), STADLER (M.), "Efficient group signature schemes for large groups," in Advances in Cryptology, CRYPTO'97, 1997.
68. CHAUM (D.), VAN HEYST (E.), "Group signatures," in Advances in Cryptology - EUROCRYPT'91, 1991.
69. CAMENISCH (J.), "Efficient and generalized group signatures," in Advances in Cryptology, EUROCRYPT'97, 1997.
70. ATENIESE (G.), TSUDIK (G.), "Group signatures à la carte," in ACM/SIAM Symposium on Discrete Algorithms (SODA '99), January 1999.
71. ATENIESE (G.), TSUDIK (G.), "Some open problems and new directions in group signatures," in Financial Cryptography '99, February 1999.
72. PETERSEN (H.), "How to convert any digital signature scheme into a group signature scheme," in Security Protocols Workshop, 1997.