Multicast receiver and sender access control and its applicability to mobile IP environments: A survey

IEEE Communications Surveys and Tutorials

Volumn 7, Issue 2, 2005, Pages 46-70

  Kellil, Mounir ^a   Romdhani, Imed ^a   Lach, Hong Yon ^a   Bouabdallah, Abdelmadjid ^b   Bettahar, Hatem ^b  

^a Motorola Labs   (France)

^b UNIVERSITÉ DE TECHNOLOGIE DE COMPIÈGNE   (France)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL MECHANISM; CONTROL PROBLEMS; DELIVERY TREE; DOS ATTACKS; HOST MOBILITY; HYBRID SOLUTION; MOBILE IP;

AUTHENTICATION;

FORESTRY;

EID: 33749055858     PISSN: None     EISSN: 1553877X     Source Type: Journal    
DOI: 10.1109/COMST.2005.1610545     Document Type: Review

References (59)

1. R. Lehtonen and J. Harju, "Controlled Multicast Framework," Proc. 27th Annual IEEE Conf. Local Comp. Net. (LCN), Florida, 2002, pp. 565-71.
2. T. Hardjono, and L. R. Dondeti, Multicast and Group Security, Artech House - Computer Security Series, 2003.
3. T. Hardjono and B. Cain "Key Establishment for IGMP Authentication in IP Multicast," ECUMN, France, Oct. 2000, pp. 247-52.
4. B. Fenner et al., "Protocol Independent Multicast-Sparse Mode (PIM-SM): Protocol Specification (Revised)," Internet draft, draft-ietf-pim-sm-v2-new-11.txt, Oct. 2004 (work in progress).
5. D. Ballardie, "Core Based Trees (CBT version 2) Multicast Routing Protocol Specification," Internet RFC 2189, Sept. 1997.
6. S. Deering, "Host Extension for IP Multicasting," Internet RFC 1112, Aug. 1989.
7. J. Moy, "Multicast Extensions to OSPF," Internet RFC 1584, Mar. 1994.
8. W. Fenner, "Internet Group Management Protocol, Version 2," RFC 2236, Nov. 1997.
9. B. Cain, S. Deering, I. Kouvelas, B. Fenner, and A. Thyagarajan, "Internet Group Management Protocol, Version 3," RFC 3376, Oct. 2002.
10. S. Deering, W. Fenner, and B. Haberman, "Multicast Listener Discovery (MLD) for IPv6," Internet RFC 2710, Oct. 1999.
11. Rolland Vida et al., "Multicast Listener Discovery Version 2 (MLDv2) for IPv6," RFC 3810, June 2004.
12. C. Perkins, "IP Mobility Support for IPv4," RFC 3344, Aug. 2002.
13. D. Johnson, C. Perkins, and J. Arkko, "Mobility Support in IPv6," RFC 3775, June 2004.
14. I. Romdhani et al., "IP Mobile Multicast: Challenges and Solutions," IEEE Commun. Surveys and Tutorials, vol. 6, no. 1, 1st Quarter 2004.
15. R. S. Sandhu and P. Samarati, "Access Control: Principle and Practice," IEEE Commun. Mag., vol. 32, no. 9, 1994, pp. 40-48.
16. R. Shirey, "Internet Security Glossary," RFC 2828, May 2000.
17. G. P. Kumar and P. Venkateram, "Security Management Architecture for Access Control to Network Resources," IEEE Proc. Comp. and Digital Techniques, vol. 144-6, Nov. 1997, pp. 362-70.
18. J. Kohl, and C. Neuman, "The Kerberos Network Authentication Service (V5)," RFC 1510, Sept. 1993.
19. P. Judge and M. Ammar, "Gothic: A Group Access Control Architecture for Secure Multicast and Anycast," IEEE INFOCOM, New York, June 2002, pp. 1547-56.
20. A. Perrig et al., "Efficient Authentication and Signing of Multicast Streams over Lossy Channels," Proc. IEEE Symp. Security and Privacy (S&P 2000), May 2000, pp. 56-73.
21. B. Fenner and D. Meyer, "Multicast Source Discovery Protocol (MSDP)," RFC 3618, Oct. 2003.
22. P. Rajvaidya, K. Ramachandran, and K. C. Almeroth, "Detection and Deflection of DoS Attacks against the Multicast Source Discovery Protocol," Technical Report, Department of Computer Science, University of California, Santa Barbara, July 2002.
23. S. Bhattacharyya et al., " An Overview of Source-Specific Multicast (SSM)," RFC 3569, July 2003.
24. Y. K. Dalal and R. M. Metcalfe. "Reverse Path Forwarding of Broadcast Packets," Commun. ACM, vol. 21, no. 12, Dec. 1978, pp. 1040-48.
25. N. Wang and G. Pavlou, "Scalable IP Multicast Sender Access Control for Bi-directional Trees," Proc. 3rd Int'l. Wksp. Networked Group Commun. (NGC'2001), London, J. Crowcroft, M. Hofmann, Eds., Springer, Nov. 2001, pp. 141-158.
26. B. Fenner et al., "Multicast Source Notification of Interest Protocol," IETF draft, draft-ietf-magma-msnip-05.txt, Mar. 2004, (work in progress).
27. C. Perkins, P. R. Calhoun, and J. Bharatia, "Mobile IPv4 Challenge/Response Extensions (revised)," Internet draft, draft-ietf-mip4-rfc3012bis-03.txt, Dec. 2004 (work in progress).
28. J. Arkko, V. Devarapalli, and F. Dupont, "Using IPsec to Protect Mobile IPv6 Signaling Between Mobile Nodes and Home Agents," RFC 3776, June 2004.
29. Protocol for Carrying Authentication for Network Access (pana), http://www.ietf.org/html.charters/pana-charter.html.
30. J. Dankers et al., "Public Key Infrastructure in Mobile Systems," Electronics & Commun. Eng. J., vol. 14, Oct. 2002, pp. 180-90.
31. G. Montenegro and C. Castelluccia, "Statistically Unique and Cryptographically Verifiable (SUCV) Identifiers and Addresses," ISOC NDSS'02, 2002.
32. National Institute of Standards and Technology (NIST), Federal Information Processing Standard (FIPS) PUB 186, Digital Signature Standard (DSS), U.S. Department of Commerce, 19 May 1994.
33. National Institute of Standards and Technology (NIST), Federal Information Processing Standard (FIPS) PUB 180-1, Secure Hash Standard (SHS), U.S. Department of Commerce, Washington, 1995.
34. R. Housley, W. Polk, W. Ford, and D. Solo, "Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile," RFC 3280, Apr. 2002.
35. A. Ballardie, "Scalable Multicast Key Distribution," RFC 1949, May 1996.
36. A. Ballardie, "Core Based Trees (CBT version 2) Multicast Routing," RFC 2189, Sept. 1997.
37. W. T. Polk, N. E. Hastings, and A. Malpani, "Public Key Infrastructures that Satisfy Security Goals," IEEE Internet Computing, vol. 7, July-Aug. 2003, pp. 60-67.
38. C. Castelluccia and G. Montenegro, "Securing Group Management in IPv6 with Cryptographically Based Addresses," Proc. 8th IEEE Int'l. Symp. Comp. and Commun., Turkey, July 2003, pp. 588-93.
39. C. Ellison et al., "SPKI Certificate Theory," RFC 2693, Sept. 1999.
40. T. Aura "Cryptographically Generated Addresses (CGA)," ISC'03, Oct. 2003, pp. 29-43.
41. T. Ballardie and J. Crowcroft, "Multicast-Specific Security Threats and Counter-Measures," Proc. IEEE Symp. Net. and Distributed System Security, 1995, pp. 2-16.
42. W. Simson, "PPP Challenge Handshake Authentication Protocol (CHAP)," RFC 1994, Aug. 1996.
43. T. Hayashi et al., "Multicast Listener Discovery Authentication Protocol (MLDA)," Internet Draft, draft-hayashi-mlda-02.txt, Apr. 2004 (work in progress).
44. A. Van Moffaert and O. Paridaens, "Security Issues in Internet Group Management Protocol version 3 (IGMPv3)," Internet Draft, draft-irtf-gsec-igmpv3-security-issues-01.txt, Feb. 2002 (work in progress).
45. B. Coan et al., "HASM: Hierarchical Application-Level Secure Multicast," Internet Draft, draft-coan-hasm-01.txt, Oct. 2002, (Work in Progress).
46. T. Hardjono, "Router-Assistance for Receiver Access Control in PIM-SM." Proc. IEEE Int'l. Symp. Comp. Commun. (ISCC), Antibes, France, July 2000, pp. 687-92.
47. N. Ishikawa, N. Yamanouchi, and O. Takahashi, "An Architecture for User Authentication of IP Multicast and Its Implementation," IEEE/APAN Internet Wksp. '99 (IWS'99), Japan, Feb. 1999, pp. 81-87.
48. E. Rescorla, "A Survey of Authentication Mechanisms," Internet Draft, draft-iab-auth-mech-03.txt, Mar. 2004 (work in progress).
49. H. He, T. Hardjono, and B. Cain, "Simple Multicast Receiver Access Control," Internet draft, draft-irtf-gsec-smrac-00.txt, Nov. 2001 (work in progress).
50. C. Shiels and J. J. Garcia-Luna-Aceves, "KHIP: A Scalable Protocol for Secure Multicast Routing," Proc. ACM SIGCOMM'99, 1999, pp. 53-64.
51. C. Shields and J. J. Garcia-LunaAceves, "The HIP Protocol for Hierarchical Multicast routing," Proc. ACM SIGACT-SIGOPS Symp. Principles of Distributed Computing (PODC '98), Mexico, June 1998, pp. 257-66.
52. C. Shields and J. J. Garcia-Luna-Aceves, "The Ordered Core Based Tree Protocol," Proc. IEEE INFOCOM '97, Apr. 1997, pp. 884-91.
53. L. Eschnehauer and V. D. Gligor, "A Key Management Scheme for Distributed Sensor Networks," Proc. 9th ACM Conf. Comp. and Commun. security (CCS'02), Nov. 2002, pp. 41-47.
54. C. Meadows, "A Formal Framework and Evaluation Method for Network Denial of Service," Proc. 12th IEEE Computer Security Foundations Wksp., 1999, pp. 4-13.
55. M. Baugher et al., "The Group Domain of Interpretation," RFC 3547, July 2003.
56. S. Rafaeli and D. Hutchison, "A Survey of Key Management for Secure Group Communication," ACM Computing Surveys (CSUR), vol. 35, Sept. 2003, pp. 309-29.
57. P. Judge and M. Ammar, "Security Issues and Solutions in Multicast Content Distribution: A Survey," IEEE Network, 2003, pp. 30-36.
58. T. Hardjono and B. Weis, "The Multicast Group Security Architecture," RFC 3740, Mar. 2004.
59. S. Farrell, and R. Housley, "An Internet Attribute Certificate Profile for Authorization" RFC 3281, Apr. 2002.