Ding-Zhu Du Editors. Network Security

Transcription

1 Network Security

2 Scott C.-H. Huang Ding-Zhu Du Editors David MacCallum Network Security 123

3 Editors Scott C.-H. Huang Department of Computer Science City University of Hong Kong Tat Chee Avenue 83 Hong Kong Hong Kong SAR David MacCallum Department of Computer Science & Engineering University of Minnesota Union Street SE., Minneapolis Minnesota EE/CS Bldg. USA Ding-Zhu Du Department of Computer Science University of Texas, Dallas Erik Jonsson School of Engineering & Computer Science W. Campbell Road Richardson Texas USA ISBN e-isbn DOI / Springer New York Dordrecht Heidelberg London Library of Congress Control Number: c Springer Science+Business Media, LLC 2010 All rights reserved. This work may not be translated or copied in whole or in part without the written permission of the publisher (Springer Science+Business Media, LLC, 233 Spring Street, New York, NY 10013, USA), except for brief excerpts in connection with reviews or scholarly analysis. Use in connection with any form of information storage and retrieval, electronic adaptation, computer software, or by similar or dissimilar methodology now known or hereafter developed is forbidden. The use in this publication of trade names, trademarks, service marks, and similar terms, even if they are not identified as such, is not to be taken as an expression of opinion as to whether or not they are subject to proprietary rights. Printed on acid-free paper Springer is part of Springer Science+Business Media (

4 Preface Over the past two decades, network technologies have been remarkably renovated and computer networks, particularly the Internet, have permeated into every facet of our daily lives. These changes also brought about new challenges, particularly in the area of security. Network security is essential to protect data integrity, confidentiality, access control, authentication, user privacy, and so on. All of these aspects are critical to provide fundamental network functionalities. This book covers a comprehensive array of topics in network security including secure metering, group key management, DDoS attacks, and many others. It can be used as a handy reference book for researchers, educators, graduate students, as well as professionals in the field of network security. This book contains 11 refereed chapters from prominent researchers working in this area around the globe. Although these selected topics could not cover every aspect, they do represent the most fundamental and practical techniques. This book has been made possible by the great efforts and contributions of many people. First, we thank the authors of each chapter for contributing informative and insightful chapters. Then, we thank all reviewers for their invaluable comments and suggestions that improved the quality of this book. Finally, we thank the staff members from Springer for publishing this work. Besides, we would like to dedicate this book to our families. City University of Hong Kong, Hong Kong SAR University of Minnesota, USA University of Texas at Dallas, USA Scott C.-H. Huang David MacCallum Ding-Zhu Du v

5 Contents Preface... Contributors... v ix Secure Metering Schemes... 1 Carlo Blundo, Stelvio Cimato, and Barbara Masucci A Cryptographic Framework for the Controlled Release Of Certified Data Endre Bangerter, Jan Camenisch, and Anna Lysyanskaya Scalable Group Key Management for Secure Multicast: A Taxonomy and New Directions Sencun Zhu and Sushil Jajodia Web Forms and Untraceable DDoS Attacks Markus Jakobsson and Filippo Menczer Mechanical Verification of Cryptographic Protocols Xiaochun Cheng, Xiaoqi Ma, Scott C.-H. Huang, and Maggie Cheng Routing Security in Ad Hoc Wireless Networks Mohammad O. Pervaiz, Mihaela Cardei, and Jie Wu Insider Threat Assessment: Model, Analysis and Tool Ramkumar Chinchani, Duc Ha, Anusha Iyer, Hung Q. Ngo, and Shambhu Upadhyaya Toward Automated Intrusion Alert Analysis Peng Ning and Dingbang Xu vii

6 viii Contents Conventional Cryptographic Primitives Vincent Rijmen Efficient Trapdoor-Based Client Puzzle Against DoS Attacks Yi Gao, Willy Susilo, Yi Mu, and Jennifer Seberry Attacks and Countermeasures in Sensor Networks: A Survey Kai Xing, Shyaam Sundhar Rajamadam Srinivasan, Major Jose Manny Rivera, Jiang Li, and Xiuzhen Cheng Index...273

7 Contributors Endre Bangerter IBM Zurich Research Laboratory, Säumerstrasse 4, 8803 Rüschlikon, Switzerland, Carlo Blundo Dipartimento di Informatica ed Applicazioni, Università di Salerno, Baronissi (SA), Italy, Jan Camenisch IBM Zurich Research Laboratory, Säumerstrasse 4, 8803 Rüschlikon, Switzerland, Mihaela Cardei Department of Computer Science and Engineering, Florida Atlantic University, Boca Raton, FL 33431, USA, Maggie Cheng Department of Computer Science, University of Missouri Rolla, MO, USA, Xiaochun Cheng Department of Computer Science, The University of Reading, Whiteknights, Reading RG6 6AY, England, UK, Xiuzhen Cheng Computer Science Department, George Washington University, Washington, DC 20052, USA, Ramkumar Chinchani Computer Science and Engineering, State University of New York at Buffalo, Amherst, NY 14260, USA, Stelvio Cimato Dipartimento di Tecnologie dell Informazione, Università di Milano, Crema, Italy, Yi Gao School of Information Technology and Computer Science, University of Wollongong, Australia, Duc Ha Computer Science and Engineering, State University of New York at Buffalo, Amherst, NY 14260, USA, Scott C.-H. Huang Department of Computer Science, University of Minnesota, MN, USA, Anusha Iyer Computer Science and Engineering, State University of New York at Buffalo, Amherst, NY 14260, USA, ix

8 x Contributors Sushil Jajodia Center for Secure Information Systems, George Mason University, Fairfax, VA 22030, USA, Markus Jakobsson School of Informatics and Computing, Indiana University, Bloomington, IN 47408, USA, Jiang Li Department of Systems and Computer Science, Howard University, Washington, DC 20059, USA, Anna Lysyanskaya Computer Science Department, Brown University, Providence, RI 02912, USA, Xiaoqi Ma Department of Computer Science, The University of Reading, Whiteknights, Reading RG6 6AY, England, UK, Barbara Masucci Dipartimento di Informatica ed Applicazioni, Università di Salerno, Baronissi (SA), Italy, Filippo Menczer School of Informatics and Computing, Indiana University, Bloomington, IN 47408, USA, Yi Mu School of Information Technology and Computer Science, University of Wollongong, Australia, Hung Q. Ngo Computer Science and Engineering, State University of New York at Buffalo, Amherst, NY 14260, USA, Peng Ning Computer Science Department, North Carolina State University, Raleigh, NC 27695, USA, Mohammad O. Pervaiz Department of Computer Science and Engineering, Florida Atlantic University, Boca Raton, FL 33431, USA, Vincent Rijmen Department of Electrical Engineering/ESAT, Katholieke Universiteit Leuven, Leuven, Belgium, Major Jose Manny Rivera Computer Science Department, George Washington University, Washington, DC 20052, USA, Jennifer Seberry School of Information Technology and Computer Science, University of Wollongong, Australia, Shyaam Sundhar Rajamadam Srinivasan Computer Science Department, George Washington University, Washington, DC 20052, USA, Willy Susilo School of Information Technology and Computer Science, University of Wollongong, Australia, Shambhu Upadhyaya Computer Science and Engineering, State University of New York at Buffalo, Amherst, NY 14260, USA, Jie Wu Department of Computer Science and Engineering, Florida Atlantic University, Boca Raton, FL 33431, USA,

9 Contributors xi Kai Xing School of Computer Science and Technology, Suzhou Institute for Advanced Study, University of Science and Technology of China, Hefei, Anhui, China, Dingbang Xu Computer Science Department, North Carolina State University, Raleigh, NC 27695, USA, Sencun Zhu Department of Computer Science, School of Information Science and Technology, The Pennsylvania State University, University Park, PA 16802, USA,