1 Secure Zero Configuration in a Ubiquitous Computing Environment Shenglan Hu and Chris J. Mitchell Information Security Group Royal Holloway, University of London 10 February 2005

Secure ZeroConf in UbiComp 10 February Agenda Security Issues Our Goal Ongoing and Future Work Possible Solutions What and why

Secure ZeroConf in UbiComp 10 February What is Zero Configuration The IETF Zero Configuration Networking (ZeroConf) Working Group has defined a ZeroConf protocol as follows: “A ZeroConf protocol is able to operate correctly in the absence of either user configuration or external configuration from infrastructure services such as conventional DHCP or DNS servers. ZeroConf protocols may use configuration, when it is available, but do not rely on it being present.”

Secure ZeroConf in UbiComp 10 February Areas IP host configuration Multicast address allocation Host name to IP address resolution Service discovery Getting Addresses, Names and Services A link-local technology suitable for use in small wired or wireless local-area networks

Secure ZeroConf in UbiComp 10 February Zero Configuration is a highly desired goal in Ubiquitous Computing Why Zero Configuration is Needed? In a ubiquitous computing environment: Dynamic topology of networks (e.g. ad hoc networks) No centralised servers or administration exist No infrastructure can be relied on Growing number of devices Static configuration or pre-configuration infeasible No skilled administrators or experts available From users’ point of view: Configuration should be as little/easy as possible

Secure ZeroConf in UbiComp 10 February Our Goal Devices can be configured automatically and be connected to the networks without any centralised servers or user intervention. Devices can automatically discover the services available in the network without any user administration or centralised service discovery servers. All this should be done in a secure way!

Secure ZeroConf in UbiComp 10 February Security Issues (1) Wireless networking is widely used in ubiquitous computing. Network bandwidth is limited; Wireless links are vulnerable to both passive and active attacks. Devices are varied and numerous. Some have very limited capabilities and physical protection.

Secure ZeroConf in UbiComp 10 February Security Issues (2) Central servers and user administration might not exist. Key generation, distribution and maintenance become very difficult. Ubiquitous computing environments can be highly dynamic and decentralised. Any security solution involving static configuration of a node is inappropriate because of the dynamic topology of the network.

Secure ZeroConf in UbiComp 10 February Possible Solutions Trust based zero configuration solutions in ubiquitous computing Application of distributed security architecture without central entities

Secure ZeroConf in UbiComp 10 February Ongoing and Future Work Secure Zero Configuration protocols for: –IP address autoconfiguration –Service discovery Trust modeling and management in UbiComp. Countermeasures to denial-of-service attacks. Distributed security architecture or framework for zero configuration.

11 Thank you very much!