Exploring the security requirements for quality of service in combined wired and wireless networks

ABSTRACT

In the modern era of Internet, providing Quality of Service (QoS) is a challenging issue, particularly in resource-constrained wireless networks with delay-sensitive multimedia traffic. Real-time and multimedia services are now available to end-users over wired networks, Wireless Local Area Networks (WLANs), and Wireless Personal Area Networks (WPANs). While the usual trend is to provide the best possible QoS for these services, it is also imperative to deploy security requirements along with the QoS parameters. In this paper, we argue that the existing approaches for including security parameters (such as encryption/decryption key lengths) with QoS parameters (e.g., end-to-end delay requirements) lead to further security risks and consequently fail to provide an adequate solution. Through simulations, we point out the pitfalls of integrating delay and security support in the contemporary approaches. We also envision QoS², a framework integrating both quality of security and QoS, in order to provide possible solutions for solving these problems. We also demonstrate via simulation the effectiveness and strength of our adopted approach.

REFERENCES

• 1: R. Braden , D. Clark , S. Shenker, Integrated Services in the Internet Architecture: an Overview, RFC Editor, 1994
• 2: S. Blake , D. Black , M. Carlson , E. Davies , Z. Wang , W. Weiss, An Architecture for Differentiated Service, RFC Editor, 1998
• 3: S. N. Foley, S. Bistarelli, B. O'Sullivan, J. Herbert, and G. Swart, "Multilevel Security and Quality of Protection," in First Workshop on Quality of Protection, Como, Italy, Sep. 2005.
• 4: W. He and K. Nahrstedt, "An Integrated Solution to Delay and Security Support in Wireless Networks," in Proc. IEEE Wireless Communications and Networking Conference (WCNC), Las Vegas, NV, USA, Apr. 2006.
• 5: S. Abdelsayed, D. Glimsholt, C. Leckie, S. Ryan, and S. Shami, "An Efficient Filter for Denial-of-Service Bandwidth Attacks," in Proc. IEEE Globecom, San Francisco, USA, Dec. 2003.
• 6: David Brumley , Dan Boneh, Remote timing attacks are practical, Computer Networks: The International Journal of Computer and Telecommunications Networking, v.48 n.5, p.701-716, 5 August 2005 [doi>10.1016/j.comnet.2005.01.010]
• 7: C. Irvine , T. Levin , E. Spyropoulou , B. Allen, Security as a Dimension of Quality of Service in Active Service Environments, Proceedings of the Third Annual International Workshop on Active Middleware Services, p.87, August 06-06, 2001
• 8: S. Hariri, G. Qu, R. Modukuri, H. Chen, and M. Yousif, "Quality-of-protection (QoP) - an Online Monitoring and Self-protection Mechanism," in IEEE J. on Selected Areas in Communications, Vol. 23, No. 10, Oct. 2005, pp. 1983--1993.
• 9: Avesh K. Agarwal , Wenye Wang, On the impact of quality of protection in wireless local area networks with IP mobility, Mobile Networks and Applications, v.12 n.1, p.93-110, January 2007 [doi>10.1007/s11036-006-0009-6]
• 10: Sandrine Duflos , Brigitte Kervella , Valerie C. Gay, Considering Security and Quality of Service in SLS to Improve Policy-Based Management of Multimedia Services, Proceedings of the Sixth International Conference on Networking, p.39, April 22-28, 2007 [doi>10.1109/ICN.2007.31]
• 11: S. Yi, P. Naldurg, and R. Kravets, "Integrating Quality of Protection into Ad Hoc Routing Protocols," in Proc. 6^th World Multi-Conference on Systemics, Cybernetics, and Informatics, Orlando, FL, USA, Aug. 2002.
• 12: P. Muppala , Johnson Thomas , Ajith Abraham, QoS-Based Authentication Scheme for Ad Hoc Wireless Networks, Proceedings of the International Conference on Information Technology: Coding and Computing (ITCC'05) - Volume I, p.709-714, April 04-06, 2005 [doi>10.1109/ITCC.2005.234]
• 13: X. Fu, D. Hogrefe, S. Narayanan, and R. Soltwisch, "QoS and Security in 4G Networks," in Proc. 1^st Annual Global Mobile Congress, Shanghai, China, Oct. 2004.
• 14: The Network Simulator - NS-2, available at: http://www.isi.edu/nsnam/ns/
• 15: Srikanth Kandula , Dina Katabi , Matthias Jacob , Arthur Berger, Botz-4-sale: surviving organized DDoS attacks that mimic flash crowds, Proceedings of the 2nd conference on Symposium on Networked Systems Design & Implementation, p.287-300, May 02-04, 2005
• 16: Z. M. Fadlullah, T. Taleb, N. Ansari, K. Hashimoto, Y. Miyake, Y. Nemoto, and N. Kato, "Combating Against Attacks on Encrypted Protocols," in Proc. IEEE ICC, Glasgow, Scotland, Jun. 2007.
• 17: Tarik Taleb , Zubair Md. Fadlullah , Kazuo Hashimoto , Yoshiaki Nemoto , Nei Kato, Tracing back attacks against encrypted protocols, Proceedings of the 2007 international conference on Wireless communications and mobile computing, August 12-16, 2007, Honolulu, Hawaii, USA [doi>10.1145/1280940.1280966]

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General

General Terms:
Security

Keywords:
encryption, quality of protection, quality of service