Abstract

The present strategies that reduce the delay associated with multicast authentication, make more efficient usage of receiver-side buffers, make delayed key dis¬closure authentication more resilient to buffer overflow denial of service attacks, and allow for multiple levels of trust in authen¬tication. Throughout this base paper, the main focus of discussion will be on the popular multicast authentication scheme Timed Efficient Stream Loss-tolerant Authentication (TESLA) based upon the delayed key disclosure principle. Similar to other schemes based upon delayed key disclosure, TESLA is susceptible to Denial-of-Service (DoS) at¬tacks and is not well suited for delay-sensitive applications.

References

• Alon.N (1991), “Probabilistic Methods in Extremal Finite Set Theory”, in Extremal Problems for Finite Sets, 39–57.
• Anderson. R. J, F. Bergadano, B. Crispo, J.-H. Lee, C. Manifavas, and R. M. Needham (1998). A new family of authentication protocols. Operating Systems Review, 32(4):9–20.
• Anna Lysyanskaya, Roberto Tamassia, and Nikos Triandopoulos (2003). Multicast authentication in fully adversarial networks. In IEEE Symposium on Security and Privacy, pages 241 – 253, Oakland, USA, IEEE Press.
• Ayanoglu. E, I. Chih-Lin, R.D. Gitlin, J.E. Mazo (1993). Diversity Coding for Transparent Self-Healing and Fault-Tolerant Communication Networks. IEEE Transactions on Communications, 41(11).
• Ballardie. A. J (1995), “A New Approach to Multicast Communication in a Datagram Network”, Ph.D. Thesis, University College London.
• Bellare. M, R. Canetti and H. Krawczyk (1996), “Keying Hash Functions for Message Authentication”, Advances in Cryptology – Crypto ’96, LNCS vol. 1109, Springer-Verlag.
• Bellare. M, R. Canetti, and H. Krawczyk (1997). HMAC: Keyedhashing for message authentication. Internet Request for Comment RFC 2104, Internet Engineering Task Force.
• Bellovin. S (2000). The icmp traceback message. http:// www.research.att.com / ˜smb.
• Bergadano. F, D. Cavagnino, and B. Crispo (2000a), "Individual single source authentication on the mbone," in Proc. IEEE Int. Conf. Mutlimedia Expo. pp. 541-544.
• Bergadano. F, D. Cavagnino, and B. Crispo (2000b). Chained stream authentication. In Selected Areas in Cryptography 2000, Waterloo, Canada.
• Bhaskar. N and I. Kouvelas (2000). Source-specific protocol independent multicast. Internet Draft, Internet Engineering Task Force.
• Bishop. M (1990). A Security Analysis of the NTP Protocol Version 2. In Sixth Annual Computer Security Applications Conference.
• Brown, C. Perkins, and J. Crowcroft, “Watercasting: Distributed Watermarking of Multicast Media,” Networked Group Commun. ’99, Pisa, Italy, Nov. 1999, pp. 286–300.
• C. K. Wong, M. Goudo, and S. S. Lam, "Secure Group Communication Using Key Graphs." Prac. ACM SIGCOMM 1998.
• D. Bolenron, D. McGrew, and A. Sheimon, "Keyhkgement for Large Dynamic Groups: One-way Function Trees and Amortized Initialization," IETF Internet droft (work in progrerr], Feb. 1999
• D. M. Wollner, E. J. Harder, and R. C. Agee, "Key Management forMulti-cast: Issues and Architectures," IETF Info. RFC, Sept. 1998.
• H. Chu, L. Qiao, and K. Nahrstedt, “A Secure Multicast Protocol with Copyright Protection,” Proc. IS&T/SPIE’s Symp. Elect. Imaging: Sci. and Tech., Jan. 1999.
• I.Chang et al, “A toolkit for Secure Multicast Services over the Internet”, IBM tech rep., l998.
• P. Q. Judge and M. H. Ammar, “WHIM: Watermarking Multicast Videowith a Hierarchy of Intermediaries,” Proc. NOSSDAV, Chapel Hill, NC, June 2000.
• Perrig, R. Canetti, J. Tygar, and D. X. Song. Efficient authenticationand signing of multicast streams over lossy channels. In IEEE Symposium on Security and Privacy, May 2000.
• T. Hardjono and B. Cain, “Key establishment for IGMP authentication in IP multicast,” in IEEE European Conference on Universal Multiservice Networks(ECUMN), CREF, Colmar, France, 2000.