The Effect of Buffer Management Strategies on 6LoWPAN's Response to Buffer Reservation Attacks
| Title | The Effect of Buffer Management Strategies on 6LoWPAN's Response to Buffer Reservation Attacks |
| Publication Type | Conference Paper |
| Year of Publication | 2017 |
| Authors | Raoof, A., Matrawy, A. |
| Conference Name | 2017 IEEE International Conference on Communications (ICC) |
| ISBN Number | 978-1-4673-8999-0 |
| Keywords | 6L0WPAN, 6L0WPAN adaptation layer, 6LoWPAN, Adaptation models, buffer circuits, buffer cleanups, buffer management strategies, Buffer Reservation, Buffer storage, composability, Computer crime, computer network security, Current measurement, cyber physical systems security, defence strategies, Fragmentation Attacks, fragmentation-based buffer reservation denial of service attacks, fragmentation-based buffer reservation DoS attacks, Internet of Things, IoT security, packet drop rate, packets tags, PDR, personal area networks, Protocols, pubcrawl, resilience, Resiliency, scoring systems, slotted buffer, Split Buffer, split buffer mechanism, TCP-IP model, vehicular networking applications |
| Abstract | The 6L0WPAN adaptation layer is widely used in many Internet of Things (IoT) and vehicular networking applications. The current IoT framework [1], which introduced 6LoWPAN to the TCP/IP model, does not specif the implementation for managing its received-fragments buffer. This paper looks into the effect of current implementations of buffer management strategies at 6LoWPAN's response in case of fragmentation-based, buffer reservation Denial of Service (DoS) attacks. The Packet Drop Rate (PDR) is used to analyze how successful the attacker is for each management technique. Our investigation uses different defence strategies, which include our implementation of the Split Buffer mechanism [2] and a modified version of this mechanism that we devise in this paper as well. In particular, we introduce dynamic calculation for the average time between consecutive fragments and the use of a list of previously dropped packets tags. NS3 is used to simulate all the implementations. Our results show that using a ``slotted'' buffer would enhance 6LoWPAN's response against these attacks. The simulations also provide an in-depth look at using scoring systems to manage buffer cleanups. |
| URL | http://ieeexplore.ieee.org/document/7996578/ |
| DOI | 10.1109/ICC.2017.7996578 |
| Citation Key | raoof_effect_2017 |
- resilience
- Internet of Things
- IoT security
- packet drop rate
- packets tags
- PDR
- personal area networks
- Protocols
- pubcrawl
- fragmentation-based buffer reservation DoS attacks
- Resiliency
- Scoring Systems
- slotted buffer
- Split Buffer
- split buffer mechanism
- TCP-IP model
- vehicular networking applications
- composability
- 6L0WPAN adaptation layer
- 6LoWPAN
- Adaptation models
- buffer circuits
- buffer cleanups
- buffer management strategies
- Buffer Reservation
- Buffer storage
- 6L0WPAN
- Computer crime
- computer network security
- Current measurement
- Cyber Physical Systems Security
- defence strategies
- Fragmentation Attacks
- fragmentation-based buffer reservation denial of service attacks