IETF Logo Mail Archive

Re: [MEXT] Energy consumption attacks

Pars Mutaf <pars.mutaf@gmail.com> Tue, 22 March 2011 08:58 UTC

Return-Path: <pars.mutaf@gmail.com>
X-Original-To: mext@core3.amsl.com
Delivered-To: mext@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 164923A67D4 for <mext@core3.amsl.com>; Tue, 22 Mar 2011 01:58:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.598
X-Spam-Level:
X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hLTZnIftQmHb for <mext@core3.amsl.com>; Tue, 22 Mar 2011 01:58:19 -0700 (PDT)
Received: from mail-qw0-f44.google.com (mail-qw0-f44.google.com [209.85.216.44]) by core3.amsl.com (Postfix) with ESMTP id 8B2153A67AA for <mext@ietf.org>; Tue, 22 Mar 2011 01:58:19 -0700 (PDT)
Received: by qwg5 with SMTP id 5so5680989qwg.31 for <mext@ietf.org>; Tue, 22 Mar 2011 01:59:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=so3+LxTEAH0lksUl41iQ0G8H3nYIjCfKrH336N+T7yk=; b=epEiH7Zq0IRFJN7X/Ap3ZWijFqReC0WDA0WZdeeg0FZzll1xhapiyRgkf6427vQ0kn D6Zv+alk6SSvTbNRAa2v+UpgRvH3Nb1TWdzzoWvxry/a0b4jJRQgf7+fDfJn8+TkuzH0 ehFvq5a5lvLKdfgm7oJDLuONIHTtnQybcVU5E=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=g1gMkAavaGrO/4hMYDUT2ov68InA/KpxRcGm35dVq/mm3+IcQ3SGceMxng0mmoz5BR I0yqAKOEC6RrPKIE6d/RL43bOkk3HrmXgMi5kyfHnqBaFiR2J+ehCjBGI6NIrqzWwtd+ sNsfNwU0JQkNirkl1fmzApGGOztKS5B8X1dSE=
MIME-Version: 1.0
Received: by 10.224.201.74 with SMTP id ez10mr4431851qab.372.1300784392382; Tue, 22 Mar 2011 01:59:52 -0700 (PDT)
Received: by 10.224.67.13 with HTTP; Tue, 22 Mar 2011 01:59:52 -0700 (PDT)
In-Reply-To: <AANLkTikxc0=p-HAqJ--ZFBQgFEpFw-tit_M5CPH8zoqg@mail.gmail.com>
References: <AANLkTikW+MfR_R4A+g2+o=BZDnsAoOmfLHNgiOm4Z_-n@mail.gmail.com> <AANLkTikxc0=p-HAqJ--ZFBQgFEpFw-tit_M5CPH8zoqg@mail.gmail.com>
Date: Tue, 22 Mar 2011 10:59:52 +0200
Message-ID: <AANLkTin2fkBtnf5TG6BANuHPJoN01jd4fNTV1itcE4aA@mail.gmail.com>
From: Pars Mutaf <pars.mutaf@gmail.com>
To: Julien Laganier <julien.ietf@gmail.com>
Content-Type: multipart/alternative; boundary=20cf300faf75a32814049f0e7720
Cc: mext@ietf.org
Subject: Re: [MEXT] Energy consumption attacks
X-BeenThere: mext@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Mobile IPv6 EXTensions WG <mext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/mext>, <mailto:mext-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/mext>
List-Post: <mailto:mext@ietf.org>
List-Help: <mailto:mext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mext>, <mailto:mext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 22 Mar 2011 08:58:21 -0000

Hi Julien,

MIPv6 is mostly about battery powered mobile hosts, so I think this topic
should be of interest to Mobile IPv6 community. Secondly, when you think
about solutions, you may realize that it is an IP layer problem. Any upper
layer host identifier (FQDN or SIP URI etc) would be resolved to the "fixed"
home address of the mobile host and once the attacker has learned it, the
attack is possible. The attacker can remotely consume the victim's energy.
Application layer solutions like spam filtering would be useless because the
attacker is simply sending bogus packets, not even opening sessions.

In fact, we may expand the problem space since there may be other problems
due to having a fixed MIPv6 home address. But I think the remote energy
consumption attack is the most serious one. Serious design efforts are being
made at MAC layer to enable energy conserving sleep mode. The attack would
not only foil these efforts, but also consume energy by "forcing" the victim
to reply to frequent malicious packets purportedly coming from random IP
addresses.

Thanks,

Pars

On Tue, Mar 22, 2011 at 5:27 AM, Julien Laganier <julien.ietf@gmail.com>wrote;wrote:

> Pars -
>
> How is this attack related to MIPv6?
>
> --julien
>
> On Mon, Mar 21, 2011 at 2:43 AM, Pars Mutaf <pars.mutaf@gmail.com> wrote:
> > Hello,
> >
> > I was wondering if solutions to energy consumption attacks on battery
> > powered mobile hosts would be of interest to IETF Mobile IPv6 community.
> >
> > The attack consists of sending frequent request packets e.g. SIP INVITE
> or
> > TCP SYN to a victim's home address.
> >
> > For example, experiments showed that the battery of a mobile phone with
> > 802.11 access can be remotely consumed in 3 hours (full battery). Attacks
> on
> > phones using an outdoor technology would result in more energy
> consumption
> > because of the longer distance to the base station.
> >
> > The victim becomes unusable.
> >
> > Regards,
> >
> > Pars
> >
> > _______________________________________________
> > MEXT mailing list
> > MEXT@ietf.org
> > https://www.ietf.org/mailman/listinfo/mext
> >
> >
>

v2.8.7 | Report a Bug | By Email