Laboratory of Cryptography and systems Security (CrySyS)
Department of Telecommunications
Budapest University of Technology and Economics
www.crsysy.hu
Contents:
| Members |
Faculty members and senior researchers:
PhD students:
Correspondant members:
| Research activity |
Routing is one of the most fundamental networking functions. It is known that an adversary can easily paralyze the operation of a whole network by attacking the routing protocol. Moreover, attacks against the routing protocol usually do not require a lot of resources, but alteration of a few routing messages or injection of some fake ones is sufficient to disturb the operation of the network. Hence, the problem of secure routing is very relevant.
Most of the routing protocols proposed for wireless ad hoc and sensor networks are insecure. One of the reasons is that there is no clear understanding of what secure routing should mean. In additon, tools that allow the security analysis of routing protocols are lacking.
Therefore, our goal is to develop formal models in which precise definitions of secure routing can be given, and routing protocols proposed for multi-hop wireless networks can be rigorously analyzed. Our ultimate objective is to better understand the design principles of secure routing protocols and to apply those principles for designing secure routing protocols for ad hoc and sensor networks.
Participating researchers:
Gergely Ács, Levente Buttyán, István Vajda
Related projects:
UbiSecSens,
OTKA T046664
Related publications:
AB07ht-en, AB07wsns
Sensor nodes are often unattended and easy to capture. In addition, sensors are rarely tamper resistant, therefore, the operation of captured nodes can be corrupted. A corrupted sensor node may still send authentic messages (e.g., it can use the cryptographic keys stored in it), but it may not work according to its original specifications (e.g., it may send erronous readings to the base station). It is clear that this is an undesirable situation, and one would like to detect if a node is captured and corrupted, or at least eliminate the effect of corrupted nodes.
We study the problem of node capture in the context of data aggregation in sensor networks. Our goal is to design node capture resilient data aggregation schemes that eliminate the effect of corrupted data on the aggregated value.
Participating researchers:
Péter Schaffer, István Vajda, Levente Buttyán
Related projects:
UbiSecSens,
OTKA T046664
Related publications:
BS07mass, SV07mswim
End-to-end reliability of communications is an important requirement in many applications of wireless sensor networks. For this reason, a number of reliable transport protocols specifically designed for wireless sensor networks have been proposed in the literature. Besides providing end-to-end reliability, some of those protocols also address the problems of fairness and congestion control, and they are all optimized for low energy consumption. However, most of those protocols completely neglect security issues. As a consequence, they ensure reliable communications and low energy consumption only in a benign environment, where packet losses and delays occur as a result of random errors in lower layers of the communication stack, but they fail in a hostile environment, where an adversary can forge or replay control packets of the protocol. More specifically, our analysis shows that control packet injection and replay can cause permanent loss of data packets, and thus, such misdeeds make the hitherto reliable protocol unreliable. In addition, even if the protocol can recover from such an attack, the recovery overhead caused by forged or replayed control packets can be large, which gives an opportunity for energy depleting attacks. As sensor nodes usually operate on batteries, which are often very difficult or even impossible to recharge or replace, energy depletion attacks can jeopardize the entire mission of the network. Besides the security analysis of the most important reliable sensor network transport protocols, we also intend to propose some general design principles to make them more resistant against malicious attacks.
Participating researchers:
László Csik, Levente Buttyán
Related projects:
UbiSecSens,
OTKA T046664
Related publications:
One serious concern about ubiquitous computing is that it may result in breaches of privacy. In particular, the whereabouts of mobile individuals may be easily tracked by monitoring the wireless transmissions of their electronic devices that they carry with themselves. So one would like to ensure location privacy for users, while still making the services of the system available to them.
Our goal is to study the location privacy problem in various environments including traditional mobile networks and vehicular ad hoc networks, and to design appropriate privacy preserving mechanisms for these environments.
Participating researchers:
Tamás Holczer, Levente Buttyán, István Vajda
Related projects:
SeVeCom,
MIK 2.3.1,
OTKA T046664
Related publications:
BHV07esas, ABHV07tspuc
In a delay tolerant network, the nodes carry the packets while they are moving, and forwards the packets to the nodes in their vicinity in an opportunistic manner. Due to node mobility, the wireless links between the nodes are usually short-lived. Furthermore, nodes are usually constrained in terms of energy supply, memory, CPU, and available bandwidth.
In this context, we study three problems:
Participating researchers:
László Dóra, Levente Buttyán, Márk Félegyházi, István Vajda
Related projects:
BIONETS,
OTKA T046664
Related publications:
BDFV07aoc
Enabling mobility is one of the key features of today's wireless networks. In order to provide services to mobile users anywhere at any time, network operators will deploy wireless access networks based on various technologies (e.g., WiFi, UMTS, etc.). Users are expecting to be able to dynamically choose among these technologies and use the most appropriate one for their purposes. We study what this dynamicity of user requirements and heterogeneity of technologies mean for the security architecture. Our goal is to develop a security architecture that supports user mobility in a heterogeneous wireless environment. We also study the security requirements of modern services targeting mobile users, such as location based services and m-commerce services, and we intend to develop appropriate security mechansisms for them.
Participating researchers:
László Dóra, Levente Buttyán, István Vajda
Related projects:
MIK 2.3.1,
MobilSEC
Related publications:
BBD07wicon
API level vulnerabilities of hardware security modules represent a serious threat, thus, discovering and patching security holes in APIs are important. We argue and illustrate that the application of formal verification methods is a promising approach for API analysis. In particular, we propose an API verification method based on process algebra. The proposed method seems to be extremely well-suited for API analysis as it allows for the straightforward modelling of the API, the precise definition of the security requirements, and the rigorous verification of the security properties offered by the API. We use our method to analyze the HSM API designed in the context of the SeVeCom Project.
Participating researchers:
Ta Vinh Thong, Levente Buttyán
Related projects:
SeVeCom,
OTKA T046664
Related publications:
BT07ht, T07tdk
Today, e-mail viruses generate 40-60% of the total Internet e-mail traffic. These viruses infect millions of computers, and by doing so, they enable identity theft, spamming, etc. Anti-virus softwares have not solved the problem of Internet viruses yet. In particular, they do not stop the rapid propagation of new viruses. A system approach seems to be necessary to achieve a better protection.
We are developing a general architecture consisting of some small, collaborative components allowing the following:
Participating researchers:
Boldizsár Bencsáth, István Vajda
Related projects:
DESEREC
Related publications:
BV07ijns, BR07cts
Wireless Sensor Networks (WSN)s are an exciting development with very large potential to have a significant beneficial impact on every aspect of our lives while generating huge opportunities for European industry. What is needed to kick off the development and exploitation of WSNs is an architecture for medium and large scale wireless sensor networks integrating comprehensive security capabilities right form the concept stage. This would support the rapid development of sensor networks and would open up the application domain for commercial activities.
UbiSec&Sens intends to solve this by providing a comprehensive architecture for medium and large scale wireless sensor networks with the full level of security that will make them trusted and secure for all applications. In addition, UbiSec&Sens will provide a complete tool box of security aware components which, together with the UbiSec&Sens radically new design cycle for secure sensor networks, will enable the rapid development of trusted sensor network applications.
The UbiSec&Sens approach is to use three representative WSN scenarios to iteratively determine solutions for the key WSN issues of scalability, security, reliability, self-healing and robustness. This will also give a clearer understanding of the real-world WSN requirements and limitations as well as identifying how to achieve a successful rollout of WSNs.
The results of UbiSec&Sens are a necessary step to progress the field of security and communication research in Europe and, as well as advancing the competitiveness of the European industry, they assist the European Commission to develop more comprehensive programs for innovative socially and economically beneficial sensor applications to be part of future research programs after 2007.
Vehicular communications (VC) and inter-vehicular communications (IVC) bring the promise of improved road safety and optimised road traffic through co-operative systems applications. To this end, a number of initiatives have been launched, such as the Car-2-Car consortium in Europe, or the DSRC in North America. A prerequisite for the successful deployment of vehicular communications is to make them secure. For example, it is essential to make sure that life-critical information cannot be modified by an attacker; it should also protect as far as possible the privacy of the drivers and passengers. The specific operational environment (moving vehicles, sporadic connectivity, ...) makes the problem very novel and challenging.
SeVeCom addresses security of future vehicle communication networks, including both the security and privacy of inter-vehicular and vehicle-infrastructure communication. Its objective is to define the security architecture of such networks, as well as to propose a roadmap for progressive deployment of security functions in these networks.
SeVeCom will focus on communications specific to road traffic. This includes messages related to traffic information, anonymous safety-related messages, and liability-related messages. The following research and innovation work is foreseen:
The motivation for BIONETS comes from emerging trends towards pervasive computing and communication environments, where myriads of networked devices with very different features will enhance our five senses, our communication and tool manipulation capabilities. The complexity of such environments will not be far from that of biological organisms, ecosystems, and socio-economic communities.
Traditional communication approaches are ineffective in this context, since they fail to address several new features: a huge number of nodes including low-cost sensing/identifying devices, a wide heterogeneity in node capabilities, high node mobility, the management complexity, the possibility of exploiting spare node resources.
BIONETS aims at a novel approach able to address these challenges. Nature and society exhibit many instances of systems in which large populations are able to reach efficient equilibrium states and to develop effective collaboration and survival strategies, able to work in the absence of central control and to exploit local interactions. BIONETS seeks inspiration from these systems to provide a fully integrated network and service environment that scales to large amounts of heterogeneous devices, and that is able to adapt and evolve in an autonomic way.
The goal of BIONETS is to provide a biologically-inspired open networking paradigm for the creation, dissemination, execution, and evolution of autonomic services able to adapt to the surrounding environment and user needs, to evolve without direct human supervision, and able to deal with large-scale networks of heterogeneous nodes ranging from small, cheap devices to more complex network nodes. In order to achieve this goal, the project will design and implement a new communication architecture and service framework inspired by nature, and optimised for maximum adaptation to society.
Most of European critical activities rely on networked Information Systems, highly interconnected. The performance of such Information Systems could be jeopardized by incidents of various kinds. A multi-disciplinary approach is compulsory to leverage their dependability by an alliance of three approaches:
These three features respond both to attacks from the outside (e.g., aiming at Intrusion or Denial of Service), and to intrinsic failures, whatever is the origin (hardware failure, software fault, environment).
The DESEREC framework includes three response loops working on 3 different timings:
The DESEREC approach, framework, and tools apply to critical information and communication systems in order to improve their resilience and their depndability.
The general objective of the MobilSEC project is to develop new user authentication mechanisms that provide stronger security than the traditional username/password approach, but still do not require special hardware such as smart cards or other physical security tokens. The authentication methods that are developed in the project should also support mobile users, and they should also ensure privacy for the users as much as possible.
This is project No 2.3.1 of the Mobile Innovation Center (MIK). The general objective of the project is to study the relationship between mobility (users, devices, and services) and security. In particular, the project is concerned with the following problems:
The vision of ubiquitous computing is to surround people with all kinds of embedded computing devices that could assist them in their everyday activity and make their life easier. In order to take full advantage of this new paradigm, it is expected that these devices will form networks through which they can communicate with each other and reach existing computing infrastructures such as the Internet. Besides its potential advantages, the ubiquitous computing paradigm also raises several problems related to security and privacy. Broadly speaking, these problems can be divided into two classes: First, there are traditional security and privacy problems that also arise in a ubiquitous computing environment (e.g., authenication, integrity protection, availability, anonymity), but these must be solved under fundemantally different conditions and assumptions. Second, there are brand new security and privacy problems that arise due to the very nature of the ubiquitous computing environment. An example for the latter is the problem of cooperation among potentially selfish mobile nodes.
The research topics we are dealing with in this project are the following:
| Books: | ||
| [BH07book] | L. Buttyán and J.-P. Hubaux, Security and Cooperation in Wireless Networks, Cambridge University Press, November 2007. | |
| [BGW07book] | L. Buttyán, V. Gligor, and D. Westhoff (eds.), Security and Privacy in Ad Hoc and Sensor Networks, Lecture Notes in Computer Science No. 4357, Springer 2007. | |
| Journal and magazine articles: | ||
| [BV07ijns] | B. Bencsáth, I. Vajda Efficient Directory Harvest Attacks and Countermeasures, International Journal of Network Security, Vol. 5, No. 3, 2007. | |
| [BT07ht] | L. Buttyán, Ta Vinh Thong Biztonsági API analízis a spi-kalkulussal, Hiradástechnika, August 2007. | |
| [AB07ht-en] | G. Ács, L. Buttyán, A taxonomy of routing protocols for wireless sensor networks, Hiradástechnika, January 2007. | |
| Conference and workshop papers: | ||
| [BBD07wicon] | A. Bohák, L. Buttyán and L. Dóra, An authentication scheme for fast handover between WiFi access points, ACM Wireless Internet Conference (WICON 2007) Austin, Texas, USA, October 2007. | |
| [BS07mass] | L. Buttyán and P. Schaffer, PANEL: Position-based aggregator node election in wireless sensor networks, IEEE Conference on Mobile Ad-Hoc and Sensor Systems (MASS 2007) Pisa, Italy, October 2007. | |
| [SV07mswim] | P. Schaffer and I. Vajda, CORA: Correlation-based Resilient Aggregation in Sensor Networks, ACM/IEEE International Symposium on Modeling, Analysis and Simulation of Wireless and Mobile Systems (MSWiM 2007) Chania, Crete, Greece, October, 2007. | |
| [AB07wsns] | G. Ács, L. Buttyán, and I. Vajda, The security proof of a link-state routing protocol for wireless sensor networks, IEEE Workshop on Wireless and Sensor Networks Security (WSNS 2007) Pisa, Italy, October 2007. | |
| [BHV07esas] | L. Buttyán, T. Holczer, and I. Vajda, On the effectiveness of changing pseudonyms to provide location privacy in VANETs, European Workshop on Security and Privacy in Ad Hoc and Sensor Networks (ESAS 2007) Cambridge, UK, July 2007. | |
| [P+07itst] | P. Papadimitratos, L. Buttyán, J-P. Hubaux, F. Kargl, A. Kung, M. Raya, Architecture for Secure and Private Vehicular Communications, International Conference on ITS Telecommunications (ITST 2007) Sophia Antipolis, France, June 2007. | |
| [BDFV07aoc] | L. Buttyán, L. Dóra, M. Félegyházi, and I. Vajda, Barter-based cooperation in delay-tolerant personal wireless networks, IEEE Workshop on Autonomic and Opportunistic Communications (AOC 2007) Helsinki, Finland, June 2007. | |
| [ABHV07tspuc] | G. Avoine, L. Buttyán, T. Holczer, and I. Vajda, Group-Based Private Authentication, IEEE Workshop on Trust, Security, and Privacy for Ubiquitous Computing (TSPUC 2007) Helsinki, Finland, June 2007. | |
| [BR07cts] | B. Bencsáth, M. A. Rónai, Empirical Analysis of Denial of Service Attack Against SMTP Servers, IEEE Symposium on Collaborative Technologies and Systems, 2007. | |
| [T07tdk] | Ta Vinh Thong, Biztonsági API analízis a spi-kalkulussal, BME TDK (I. díj), November 2007. | |
| Teaching activity |
Our teaching activities are mainly related to the base course called Information Security and to the Special on Security of Information and Communication Systems.
| Sponsors |
In 2007, the following institutions and companies supported our work: