Defending against an Internet-based attack on the physical world

ABSTRACT

We discuss the dangers that scalable Internet functionality may present to the real world, focusing upon an attack that is simple, yet can have great impact, which we believe may occur quite soon. We offer and critique various solutions to this class of attack and hope to provide a warning to the Internet community of what is currently possible. The attack is, to some degree, a consequence of the availability of private information on the Web, and the increase in the amount of personal information that users must reveal to obtain Web services.

REFERENCES

• 1: Tuomas Aura , Pekka Nikander , Jussipekka Leiwo, DOS-Resistant Authentication with Client Puzzles, Revised Papers from the 8th International Workshop on Security Protocols, p.170-177, April 03-05, 2000
• 2: Byers, S., Silva, C., and Freire, J. 2001. Imaging web databases with restricted query access.
• 3: William R. Cheswick , Steven M. Bellovin, Firewalls and Internet security: repelling the wily hacker, Addison-Wesley Longman Publishing Co., Inc., Boston, MA, 1994
• 4: Allison L. Coates, Pessimal Print: A Reverse Turing Test, Proceedings of the Sixth International Conference on Document Analysis and Recognition, p.1154, September 10-13, 2001
• 5: Dean, D. and Stubblefield, A. 2001. Using client puzzles to protect tls. 10th Annual USENIX Security Symposium.
• 6: Foundation, N. S. 2001. Report on the national workshop on internet voting, March.
• 7: Ioannidis, J., and Bellovin, S. M. 2002, Implementing pushback: Router-based defense aganist DDoS attacks. In Proceedings of the Internet Society Symposium on Network and Distributed System Security.
• 8: Juels, A. and Brainard, J. 1999. Client puzzles: A cryptographic defense against connection depletion attacks. In Proceedings of NDSS 99, S. Kent, Ed. pages 151--165.
• 9: Naor, M. 1996. Verification of a human in the loop or identification via the turing test.
• 10: N. C. on Federal Election Reform. 2001. To assure pride and confidence in the electoral process, August.
• 11: Paul F. Syverson , Michael G. Reed , David M. Goldschlag, Private Web browsing, Journal of Computer Security, v.5 n.3, p.237-248, June 1997
• 12: Project, T. H. Ed. 2002. Know Your Enemy: Revealing the Security Tools, Tactics, and Motives of the Blackhat Community. Addison-Wesley Publishing Company.
• 13: Michael K. Reiter , Aviel D. Rubin, Crowds: anonymity for Web transactions, ACM Transactions on Information and System Security (TISSEC), v.1 n.1, p.66-92, Nov. 1998 [doi>10.1145/290163.290168]
• 14: T. D. O. P. 2001. The Debate Over Technology. Voting in the information age: The debate over technology, January.
• 15: C.-M. 2001. Voting technology project. Voting: What is; what could be, July.

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.4 COMPUTERS AND SOCIETY
      K.4.4 Electronic Commerce
          Subjects: Security

Additional Classification:
  H. Information Systems
  H.4 INFORMATION SYSTEMS APPLICATIONS
      H.4.m Miscellaneous

Keywords:
Internet threats, automated attacks, cybercrime