Security vulnerabilities in IEEE 802.22

ABSTRACT

Cognitive Radio (CR) is seen as one of the enabling technologies for realizing a new spectrum access paradigm, viz. Opportunistic Spectrum Sharing (OSS). IEEE 802.22 is the world's first wireless standard based on CR technology. It defines the air interface for a wireless regional area network (WRAN) that uses fallow segments of the licensed (incumbent) TV broadcast bands. CR technology enables unlicensed (secondary) users in WRANs to utilize licensed spectrum bands on a non-interference basis to incumbent users. The coexistence between incumbent users and secondary users is referred to as incumbent coexistence. On the other hand, the coexistence between secondary users in different WRAN cells is referred to as self-coexistence. The 802.22 draft standard prescribes several mechanisms for addressing incumbent- and self-coexistence issues. In this paper, we describe how adversaries can exploit or undermine such mechanisms to degrade the performance of 802.22 WRANs and increase the likelihood of those networks interfering with incumbent networks. The standard includes a security sublayer to provide subscribers with privacy, authentication, and confidentiality. Our investigation, however, revealed that the security sublayer falls short of addressing all of the key security threats. We also discuss countermeasures that may be able to address those threats.

REFERENCES

• 1: John Bellardo , Stefan Savage, 802.11 denial-of-service attacks: real vulnerabilities and practical solutions, Proceedings of the 12th conference on USENIX Security Symposium, p.2-2, August 04-08, 2003, Washington, DC
• 2: Timothy X. Brown , Amita Sethi, Potential cognitive radio denial-of-service vulnerabilities and protection countermeasures: a multi-dimensional analysis and assessment, Mobile Networks and Applications, v.13 n.5, p.516-532, October 2008 [doi>10.1007/s11036-008-0085-x]
• 3: R. Chen, J.-M. Park, and J. H. Reed, "Defense against Primary User Emulation Attacks in Cognitive Radio Networks", IEEE Journal on Selected Areas in Communcations Special Issue on Cognitive Radio Theory and Applications, Vol. 26 (1), January 2008, pp. 25--37.
• 4: C. M. Cordeiro, K. Challapali, and D. Birru, "IEEE 802.22: An Introduction to the First Wireless Standard based on Cognitive Radios", Journal of communications, Vol. 1(1), April 2006, pp. 38--47.
• 5: W. Diffie, and M. E. Hellman, "New Directions in Cryptography", IEEE Transsactions on Infomation Theory, Vol IT-22(6), Nov. 1976, pp. 644--654.
• 6: John R. Douceur, The Sybil Attack, Revised Papers from the First International Workshop on Peer-to-Peer Systems, p.251-260, March 07-08, 2002
• 7: D. Grandblaise and W. Hu, "Inter Base Stations Adaptive On Demand Channel Contention for IEEE 802.22 WRAN Self Coexistence", IEEE docs: IEEE 802.22-07/0024r0, Januarary 2007.
• 8: V. Gupta, S. Krishnamurthy and M. Faloutsos, "Denial of Service Attacks at the MAC Layer in Wireless Ad Hoc Networks", in Proc. of IEEE Military Communications Conference (MILCOM '02), 2002, pp. 1118--1123.
• 9: A. M. Hegland, E. Winjum, S. F. Mjolsnes, C. Rong, O. Kure, and P. Spilling, "A Survey of Key Management in Ad Hoc Networks", IEEE Communications Surveys & Tutorials, the 3rd Qtr. 2006, Vol. 8(3), pp. 48--66.
• 10: S. Huang, X. Liu, and Z. Ding, "Opportunistic Spectrum Access in Cognitive Radio Networks", in Proc. of IEEE INFOCOM 2008, April 2008.
• 11: IEEE 802.16 Task Group E, "Amendment to IEEE Standard for Local and Metropolitan Area Networks, Part 16: Air Interface for Fixed Broadband Wireless Access Systems---Physical and Medium Access Control Layers for Combined Fixed and Mobile Operation in Licensed Bands", IEEE Standard 802.16e-2005, IEEE Press, 2005.
• 12: IEEE 802.22 WG, "ETRI FT Philips Samsung Proposal", IEEE docs: 22-06-0005-01-0000, January 2006.
• 13: IEEE 802.22 WG, "IEEE P802.22/D0.1 Draft Standard for Wireless Regional Area Networks Part 22: Cognitive Wireless RAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications: Policies and Procedures for Operation in the TV Bands", IEEE docs: 22-06-0067-00-0000_P802-22_D0.1, May 2006.
• 14: IEEE 802.22 WG, "Reviews of Channel Model", IEEE docs: 22-05-0070-00-0000, August 2005.
• 15: IEEE Standard for Wireless LAN-Medium Access Control and Physical Layer Specification, 802.11, 1999.
• 16: D. Johnston and J. Walker, "Mutual Authorization for PKMv2", IEEE C802.16e-04/229, 2004.
• 17: David Johnston , Jesse Walker, Overview of IEEE 802.16 Security, IEEE Security and Privacy, v.2 n.3, p.40-48, May 2004 [doi>10.1109/MSP.2004.20]
• 18: Pradeep Kyasanur , Nitin H. Vaidya, Selfish MAC Layer Misbehavior in Wireless Networks, IEEE Transactions on Mobile Computing, v.4 n.5, p.502-516, September 2005 [doi>10.1109/TMC.2005.71]
• 19: Haiyun Luo , Jiejun Kong , Petros Zerfos , Songwu Lu , Lixia Zhang, URSA: ubiquitous and robust access control for mobile ad hoc networks, IEEE/ACM Transactions on Networking (TON), v.12 n.6, p.1049-1063, December 2004 [doi>10.1109/TNET.2004.838598]
• 20: A. N. Mody, R. Reddy, M. J. Sherman, T. Kiernan, and DJ Shyy, "Security and the Protocol Reference Model Enhancements in IEEE 802.22", IEEE doc: 802.22-08/0083r04, June 2008.
• 21: J. Notor, "The Evolution of Spectrum Sharing in the IEEE 802.22 WRAN Standards Process", February 2006, Available at: http://www.eecs.berkeley.edu/~dtse/3r_otherpapers.html
• 22: P. Pawelczak, "Protocol Requirements for Cognitive Radio Networks", Technical Report, July 2005. Available at: https://doc.freeband.nl/dscgi/ds.py/Get/File-60831
• 23: Svetlana Radosavac , John S. Baras , Iordanis Koutsopoulos, A framework for MAC protocol misbehavior detection in wireless networks, Proceedings of the 4th ACM workshop on Wireless security, September 02-02, 2005, Cologne, Germany [doi>10.1145/1080793.1080801]
• 24: Theodore Rappaport, Wireless Communications: Principles and Practice, Prentice Hall PTR, Upper Saddle River, NJ, 2001
• 25: Maxim Raya , Jean-Pierre Hubaux , Imad Aad, DOMINO: a system to detect greedy behavior in IEEE 802.11 hotspots, Proceedings of the 2nd international conference on Mobile systems, applications, and services, June 06-09, 2004, Boston, MA, USA [doi>10.1145/990064.990077]
• 26: Stephen J. Shellhammer , Sai Shankar N , Rahul Tandra , James Tomcik, Performance of power detector sensors of DTV signals in IEEE 802.22 WRANs, Proceedings of the first international workshop on Technology and policy for accessing spectrum, p.4-es, August 05-05, 2006, Boston, Massachusetts [doi>10.1145/1234388.1234392]
• 27: H. Urkowitz, "Energy Detection of Unknown Deterministic Signals", in Proc. of IEEE, April 1967, pp. 523--531.
• 28: L. Zhou and Z. Haas, "Securing Ad Hoc Networks", IEEE Network, Vol. 13(6), 1999, pp. 24--30.

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.1 Network Architecture and Design
          Subjects: Wireless communication

General Terms:
Design, Security, Standardization

Keywords:
IEEE 802.22, cognitive MAC, incumbent coexistence, security, self-coexistence