A comparative analysis of common threats, vulnerabilities, attacks and countermeasures within smart card and wireless sensor network node technologies

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4462 LNCS, Issue , 2007, Pages 161-174

  Eagles, Kevin ^a   Markantonakis, Konstantinos ^a   Mayes, Keith ^a  

^a UNIVERSITY OF LONDON   (United Kingdom)

Author keywords

RFID; Security; Security models; Sensor networks; Smart card security; Ubiquitous networks

Indexed keywords

MATHEMATICAL MODELS; SECURITY OF DATA; UBIQUITOUS COMPUTING; WIRELESS SENSOR NETWORKS; COMPUTATION THEORY; INTELLIGENT BUILDINGS; RADIO FREQUENCY IDENTIFICATION (RFID); SENSOR NETWORKS; SENSOR NODES; SMART CARDS; TRANSPORTATION;

SECURITY MODELS; SMART CARD SECURITY; UBIQUITOUS NETWORKS; WIRELESS SENSOR NETWORK NODES; COMPARATIVE ANALYSIS; CONTACT LESS; SECURITY; SECURITY MODEL; THREAT ANALYSIS; WIRELESS SENSOR;

SMART CARDS; NETWORK SECURITY;

EID: 37149015795     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-72354-7_14     Document Type: Conference Paper

References (39)

1. Low-Rate Wireless Personal Area Networks: Enabling Wireless Sensors with IEEE 802.15.4 (Second Edition), http://shop.ieee.org/ieeestore/ Product.aspx?product_no=SP1150
2. Common Criteria website: http://www.commoncriteriaportal.org
3. Smart Card Security User Group Smart Card Protection Profile (SCSUG-SCPP) Version 3.0 9 (September 2001)
4. JTC 1/SC 17: ISO/IEC 7810:2003 Identification cards - Physical characteristics (December 2005) http://http://www.iso.org/iso/en/prods-services/ ISOstore/store.html
5. JTC 1/SC 17: ISO/IEC 7813:2006 Information technology -Identification cards Financial transaction cards (June 2006) http: //http: //www. iso.org/iso/ en/prods-services/ISOstore/store.html
6. JTC 1/SC 17: ISO/IEC 7816-1 to 15 Identification cards - Integrated circuity) cards with contacts (Parts 1 to 15) http://http://www.iso.org/iso/en/ prods-services/ISOstore/store.html
7. JTC 1/SC 17: ISO/IEC 14443-1 to 4 Identification cards - Contactless integrated circuit(s) cards - Proximity cards (Parts 1 to 4) http://http: //www. iso.org/iso/ en/prods-services/ISOstore/store.html
8. JTC 1/SC 17: ISO/IEC 15693-lto 3 Identification cards - Contactless integrated circuit(s) cards - Vicinity cards (Parts 1 to 3) http://http://www. iso.org/iso/ en/prods-services/ISOstore/store.html
9. German Federal Office for Information Security (BSI): Security Aspects and Prospective Applications of RFID Systems (2004)
10. Anderson, R., Kuhn, M.: Low Cost Attacks on Tamper Resistant Devices (1997)
11. Abraham, D.G., Dolan, G.M., Double, G.P., Stevens, J.V.: Transaction Security System. IBM Systems Journal v 30 no 2 (1991) 206-229
12. Skorobogatov, S.P.: Semi-invasive attacks - A new approach to hardware security analysis. PhD Thesis UCAM-CL-TR-630 ISSN 1476-2986 (April 2005)
13. Kocher, P. C.: Timing attacks on Implementations of Diffie-Hellman, RSA, DSS, and Other systems. Crytpography Research Inc. CRYPTO (1996)
14. Java Card Forum: Working status & Deliverables Presentation (2005) http://www.javacaxdfor_m.org/03_documents/00_documents/marketingpre sentationgeneral.pdf
15. Chaumette, S., Grange, P., Karray, A., Sauveron, D.: Secure distributed computing on a Java Card Grid - 19th IEEE International Parallel and Distributed Processing Symposium (IPDPS'05), 7th International Workshop on Java for Parallel and Distributed Computing (2005)
16. Hollar, S.: Cots Dust Masters Degree Thesis (1996) http://www-bsac.eecs. berkeley.edu/archive/users/hollar-seth/publications/cotsdust.pdf
17. Tubaishat, M., Madria, S.: Sensor Networks: An Overview. IEEE Potentials, 22 (2003), 20-23.
18. Karlof, C., Wagner, D.: Secure routing in wireless sensor networks: attacks and countermeasures. Elsevier Article (2003)
19. Shi, E., Perrig, A.: Designing Secure Sensor Networks. IEEE Publication (2001). http ://www.cs.ucsb.edu/~suri/Spr05/generalB.pdf
20. Benenson, Z., Freiling, F. C.: On the Feasibility and Meaning of Security in Sensor Networks. 4th GI/ITG KuVS Fachgesprch "Drahtlose Sensornetze", (2005) http://user.it.uu.se/~zina/publications/security- taxonomy.pdf
21. Healy, W.: Standards and Test Methods for Sensor Networks and Alert Systems (2007) http ://www2.bfrl.nist.gov/proj ects/proj contain.asp?cc= 8634508431
22. Official Website of the US Govt. Sensornet Project http://www.sensornet. gov/
23. Swiderski, F., and Snyder, W.: Threat Modelling, Microsoft Press (2004) 259
24. Becher, A., Benenson, Z., Dornseif, M.: Tampering with Motes: Real World Physical Attacks on Wireless (2005)
25. Finke, T., Kelter,H.: Abhrmglichkeiten der Kommunikation zwischen Lesegert und Transponder am Beispiel eines IS014443 - Systems. BSI, (2004) http ://www.bsi.de/fachthem/rfid/Abh_RFID.pdf
26. Rieback, M. R., Crispo, B., Tanenbaum, A. S.: Is your cat infected with a computer virus. Vrije Universiteit Amsterdam. (2006)
27. SUN's Sizzle (SSSL) Webserver for small devices http://research.sun.com/ spotlight/2004-12-20_vgupta.html
28. Brewer, E., Culler, D., Gay, D., Levis, P., von Behren, R., Welsh, M.: nesC: A Programming Language for Deeply Networked Systems - (2004) http ://nescc.sourceforge. net/
29. Official Website for the Bluetooth Short Range Wireless Connectivity Standardb http ://www.bluetooth.com/bluetooth/
30. ZigBee Alliance Official Website, http://www.zigbee.org/en/index.asp
31. Global Platform Official Website, http://www.globalplatform.org/
32. Bernabeu, G.: GlobalPlatform Mobey Forum 2005 Presentation: Page 15 Card Manager Responsibilities (2005) http://www.globalplatform.org/uploads/ Mobey'/.20Forum_0ct2005.pdf
33. Java Card Technology Datasheet (incl. JCRE) http://java.sun.com/products/ javacard/datasheet.html
34. DoD Radio Frequency Identification Update: Enterprise Data Collection Across the Supply Chain (June 14, 2006). http://www.dla.mil/j-6/AIT/Files/ Conferences/AirForce_Supply_Chain_AIT_ For-m/2006_06_13/Day2/Smith,/.20-7.200SD, /.20RFID. pdf
35. United States Department of Defense Suppliers' Passive RFID Information Guide ver.8.0 (2005) http://www.acq.osd.mil/log/rf id/DoD_Suppliers ' -Passive. RFID_Information_Guide.v8.0.pdf
36. Shaikh, R. A., Lee, S., Song, Y. J., Zhung, Y.: Securing Distributed Wireless Sensor Networks: Issues and Guidelines (2006) 226-231
37. Chan, H., Perrig, A.: Security and Privacy in Sensor Networks. IEEE Publication Computer, vol. 36, no. 10, (2003) 103-105
38. Muftic, S., Chang, C.: Security in Wireless Sensor Networks: Status, Problems, Current Technologies and Trends. Enisa Quarterly No. 4 (2006) 5-6
39. Arnab, A., Hutchison, A.: Ticket Based Identity System for DRM (2006)