Distance hijacking attacks on distance bounding protocols

Proceedings - IEEE Symposium on Security and Privacy

Volumn , Issue , 2012, Pages 113-127

  Cremers, Cas ^a   Rasmussen, Kasper B ^b   Schmidt, Benedikt ^a   Capkun, Srdjan ^a  

^a ETH ZURICH   (Switzerland)

^b Irvine   (United States)

Author keywords

attacks; Distance bounding; formal model; formal verification; hijacking; location verification; multi prover environment; position verification

Indexed keywords

TERRORISM;

ATTACK; DISTANCE BOUNDING; DISTANCE-BOUNDING PROTOCOLS; FORMAL FRAMEWORK; FORMAL MODELING; HIJACKING; LOCATION VERIFICATION; MULTI-PROVER ENVIRONMENT; POSITION VERIFICATION; THEORETICAL RESEARCH;

FORMAL VERIFICATION;

EID: 84868335627     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SP.2012.17     Document Type: Conference Paper

References (30)

1. G. Avoine, M. A. Bingöl, S. Kardaş, C. Lauradoux, and B. Martin. A Framework for Analyzing RFID Distance Bounding Protocols. Journal of Computer Security - Special Issue on RFID System Security, 2010.
2. G. Avoine and A. Tchamkerten. An efficient distance bounding RFID authentication protocol: Balancing false-acceptance rate and memory requirement. In Proceedings of the 12th International Conference on Information Security, ISC '09, pages 250-261. Springer, 2009.
3. D. Basin, S. Čapkun, P. Schaller, and B. Schmidt. Let's get physical: Models and methods for real-world security protocols. In Proceedings of the 22nd International Conference on Theorem Proving in Higher Order Logics, TPHOLs '09, pages 1-22. Springer, 2009.
4. S. Brands and D. Chaum. Distance-bounding protocols. In Advances in Cryptology - EUROCRYPT '93, volume 765 of LNCS, pages 344-359. Springer, 1994.
5. L. Bussard and W. Bagga. Distance-bounding proof of knowledge to avoid real-time attacks. In Security and Privacy in the Age of Ubiquitous Computing, volume 181 of IFIP Advances in Information and Communication Technology, pages 223-238. Springer Boston, 2005.
6. J. T. Chiang, J. J. Haas, and Y.-C. Hu. Secure and precise location verification using distance bounding and simultaneous multilateration. In Proceedings of the second ACM conference on Wireless network security, WiSec '09, pages 181-192. ACM, 2009.
7. C. Cremers. Feasibility of multi-protocol attacks. In Proc. of The First International Conference on Availability, Reliability and Security (ARES), pages 287-294, Vienna, Austria, April 2006. IEEE Computer Society.
8. Y. Desmedt. Major security problems with the 'unforgeable' (Feige)-Fiat-Shamir proofs of identity and how to overcome them. In Proceedings of the 6th worldwide congress on computer and communications security and protection (SecuriCom), pages 147-159, March 1988.
9. S. Drimer and S. J. Murdoch. Keep your enemies close: Distance bounding against smartcard relay attacks. In USENIX Security 2007: Proceedings of the 19th USENIX Security Symposium, 2007.
10. U. Duerholz, M. Fischlin, M. Kasper, and C. Onete. A formal approach to distance-bounding RFID protocols. In Information Security Conference (ISC) 2011, LNCS, 2011. To appear.
11. J. Guttman and F. Thayer. Protocol independence through disjoint encryption. In Proc. 13th IEEE Computer Security Foundations Workshop (CSFW), pages 24-34. IEEE Computer Society, 2000.
12. G. Hancke and M. Kuhn. An RFID distance bounding protocol. In Proc. of IEEE/CreatNet SecureComm, pages 67-73, 2005.
13. J. Kelsey, B. Schneier, and D. Wagner. Protocol interactions and the chosen protocol attack. In Proc. 5th International Workshop on Security Protocols, volume 1361 of LNCS, pages 91-104. Springer, 1997.
14. C. Kim, G. Avoine, F. Koeune, F.-X. Standaert, and O. Pereira. The Swiss-Knife RFID distance bounding protocol. In Information Security and Cryptology ICISC 2008, volume 5461 of Lecture Notes in Computer Science, pages 98-115. Springer, 2009.
15. C. H. Kim and G. Avoine. RFID distance bounding protocol with mixed challenges to prevent relay attacks. In Proceedings of the 8th International Conference on Cryptology and Network Security, CANS '09, pages 119-133. Springer, 2009.
16. M. Kuhn, H. Luecken, and N. O. Tippenhauer. UWB impulse radio based distance bounding. In Proceedings of the Workshop on Positioning, Navigation and Communication (WPNC), 2010.
17. G. Lowe. A hierarchy of authentication specifications. In Proc. 10th IEEE Computer Security Foundations Workshop (CSFW), pages 31-44. IEEE, 1997.
18. C. Meadows, R. Poovendran, D. Pavlovic, L. Chang, and P. Syverson. Distance bounding protocols: Authentication logic analysis and collusion attacks. In Secure Localization and Time Synchronization for Wireless Sensor and Ad Hoc Networks, volume 30 of Advances in Information Security, pages 279-298. Springer US, 2007.
19. J. Munilla and A. Peinado. Distance bounding protocols for RFID enhanced by using void-challenges and analysis in noisy channels. Wirel. Commun. Mob. Comput., 8:1227-1232, November 2008.
20. P. Peris-Lopez, J. C. H. Castro, J. M. Estévez-Tapiador, and J. C. A. van der Lubbe. Shedding some light on RFID distance bounding protocols and terrorist attacks. CoRR, abs/0906.4618, 2009.
21. P. Peris-Lopez, J. Hernandez-Castro, J. Tapiador, E. Palomar, and J. van der Lubbe. Cryptographic puzzles and distance-bounding protocols: Practical tools for RFID security. In RFID, 2010 IEEE International Conference on, pages 45-52, 2010.
22. C. Pöpper, N. O. Tippenhauer, B. Danev, and S. Čapkun. Investigation of signal and message manipulations on the wireless channel. In ESORICS 2011 - 16th European Symposium on Research in Computer Security. Proceedings, volume 6879 of LNCS, pages 40-59. Springer, 2011.
23. K. B. Rasmussen and S. Čapkun. Realization of RF distance bounding. In USENIX Security 2010: Proceedings of the 19th USENIX Security Symposium. USENIX, 2010.
24. J. Reid, J. M. G. Nieto, T. Tang, and B. Senadji. Detecting relay attacks with timing-based protocols. In Proceedings of the 2nd ACM symposium on Information, computer and communications security, ASIACCS '07, pages 204-213. ACM, 2007.
25. B. B. S. Malladi and K. Kothapalli. Automatic analysis of distance bounding protocols. In Foundations of Computer Security. Affiliated to LICS09, August 2009. Informal proceedings.
26. B. Schmidt. Isabelle/HOL sources for the extended framework, models, and proofs. Available online at http://www.infsec.ethz.ch/research/ software#protoveriphy.
27. D. Singelée and B. Preneel. Distance bounding in noisy environments. In Proceedings of the 4th European conference on Security and privacy in ad-hoc and sensor networks, ESAS'07, pages 101-115. Springer, 2007.
28. R. Trujillo-Rasua, B. Martin, and G. Avoine. The Poulidor distance-bounding protocol. In Proceedings of the 6th international conference on Radio frequency identification: security and privacy issues, RFIDSec'10, pages 239-257. Springer, 2010.
29. S. Čapkun, L. Buttyán, and J.-P. Hubaux. SECTOR: secure tracking of node encounters in multi-hop wireless networks. In Proceedings of the 1st ACM workshop on Security of ad hoc and sensor networks, SASN '03, pages 21-32. ACM, 2003.
30. S. Čapkun and M. Čagalj. Integrity regions: authentication through presence in wireless networks. In ACM workshop on Wireless security, pages 1-10. ACM, 2006.