Security Enhancement for Wireless Communication Bassam Almogahed

Almogahed B 2 Agenda Introduction Introduction Materials and Methods Materials and Methods Results Results Conclusions Conclusions Recommendation Recommendation

Almogahed B 3 Introduction Legitimate users communicating via wireless networks Third party interrupting the communication between the two communicators Alice Bob Trudy

Almogahed B 4 Station in a network Wireless Routers Location A Location C Location B Physical Wireless Settings Materials and Methods

Almogahed B 5 Materials and Methods cont’d. Send through wireless network Location A Protocol (location A) Protocols and Methods Location C How Strong is the protocol? Location B Apply Protocol or Method Interrupt communication Test: How efficient is the protocol? Test Experiment Process

Almogahed B 6 Attacks: Attacks: Man-in-the-Middle AttackMan-in-the-Middle Attack Replay AttackReplay Attack Known Plaintext AttackKnown Plaintext Attack Exhaustive Search AttackExhaustive Search Attack Chosen Plaintext AttackChosen Plaintext Attack Materials and Methods cont’d.

Almogahed B 7 Materials and Methods cont’d

Almogahed B 8 Materials and Methods cont’d.

Almogahed B 9 Materials and Methods cont’d.

Almogahed B 10 Materials and Methods cont’d. Recorded Data Recorded Data What is the name of the protocol being tested?What is the name of the protocol being tested? What is the level of complexity?What is the level of complexity? Are the legitimate communicators able to communicate with each other?Are the legitimate communicators able to communicate with each other? How fast is the transition?How fast is the transition? Is the communication interrupted?Is the communication interrupted? Can the protocol be broken using any of the attack techniques? If so, which one(s)?Can the protocol be broken using any of the attack techniques? If so, which one(s)? What is the level of security?What is the level of security? What is the level reliability?What is the level reliability?

Almogahed B 11 Materials and Methods cont’d Ratings Standards HighMedium High Medium Low Secure key space key space key space key space Efficient1Mbps200kbps54kbps11kbps ComplexO(n) 2 O(nlogn)O(n)O(log n) Reliable%0.3<%0.9 <%2 <%10 > Test components and classifications

Almogahed B 12Results Medium Low Low High Medium High Authentication Protocols Experiment Results Standards Protocols SecurityEfficiencyComplexityReliability Public/Private Key Symmetric Key Hash Function Session Key

Almogahed B 13 Medium Low Low High Medium High Standards Methods SecurityEfficiencyComplexity Reliability CRC Check Symmetric Key Hash Algorithm Message Authentication Code (MAC) Integrity Experiment Results Results cont’d.

Almogahed B 14 Medium Low Low High Medium High Confidentiality Experiment Results Standards Methods SecurityEfficiencyComplexityReliability Symmetric Key Public/Private Key Hash Algorithm Stream Ciphers Results cont’d.

Almogahed B 15 Authentication Authentication The public key authentication protocol that Genentech currently uses is the only one to rank highly secure, but this security comes at the price of complexity and inefficiency.The public key authentication protocol that Genentech currently uses is the only one to rank highly secure, but this security comes at the price of complexity and inefficiency. The symmetric key protocol shows high efficiency, but is also very unreliable.The symmetric key protocol shows high efficiency, but is also very unreliable. The session key protocol offers very high efficiency and reliability, but lacks security.The session key protocol offers very high efficiency and reliability, but lacks security. The hash function protocol has by far the worst overall rating across the board with just mediocre levels of security, reliability and efficiency.The hash function protocol has by far the worst overall rating across the board with just mediocre levels of security, reliability and efficiency. Conclusions

Almogahed B 16 Conclusions Integrity Integrity The current Genentech integrity method, CRC, has very low security features although it is very efficient.The current Genentech integrity method, CRC, has very low security features although it is very efficient. MAC shows highest security with highest reliability rate among all methods tested.MAC shows highest security with highest reliability rate among all methods tested. Confidentiality Confidentiality All confidentiality methods tested are mostly secure.All confidentiality methods tested are mostly secure. The current method, symmetric key, is very efficient, but the least reliable compared to the other three methods.The current method, symmetric key, is very efficient, but the least reliable compared to the other three methods. Public key shows the highest security methods.Public key shows the highest security methods. stream ciphers shows the best overall combined results.stream ciphers shows the best overall combined results.

Almogahed B 17 Recommendation Combine public key and session key protocols for the authentication process. Use the public key protocol to deliver the session key used for the rest of the authentication process Combine public key and session key protocols for the authentication process. Use the public key protocol to deliver the session key used for the rest of the authentication process Use the public key system to encrypt and compute the message authentication code (MAC), which will in turn yield increased confidentiality and integrity together in one method. Use the public key system to encrypt and compute the message authentication code (MAC), which will in turn yield increased confidentiality and integrity together in one method.