NDLI: Simple port knocking method: Against TCP replay attack and port scanning

Content Provider	IEEE Xplore Digital Library
Author	Ali, F.H.M. Yunos, R. Alias, M.A.M.
Copyright Year	2012
Description	Author affiliation: Faculty of Computer and Mathematical Sciences, Universiti Teknologi MARA, Shah Alam, Malaysia (Ali, F.H.M.; Yunos, R.; Alias, M.A.M.)
Abstract	Port knocking is a first technique introduces to prevent attackers from discovering and exploiting potentially vulnerable service on a network host, while allowing authenticated users to access these services. Despite being potentially useful tool, it suffers various vulnerabilities such as TCP replay, port scanning and etc. This project proposes a new approach over the existing Port Knocking by employing the Source Port sequences that will simplify a technique for port knocking system. Source port is automatically generated by operating system and is pre-assigned to generate a sequence. A technique to control when certain service start and stop was introduced to mitigate problem with TCP replay attack and port scanning. The performance of the proposed method was evaluated by measuring the authentication time to knock the server. As a result, the proposed method worked faster than other methods like basic port knocking and Fwknop + SPA. This has shown that the proposed method was simple and at the same time against the TCP replay attack and port scanning.
Starting Page	247
Ending Page	252
File Size	598759
Page Count	6
File Format	PDF
ISBN	9781467314251
e-ISBN	9781467314268
DOI	10.1109/CyberSec.2012.6246118
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2012-06-26
Publisher Place	Malaysia
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Computers Fires Authentication TCP Replay Attack Port Scanning Port Knocking Servers Cryptography IP networks Source port sequences
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Extension of a port knocking client-server architecture with NTP synchronization

SPKT: Secure Port Knock-Tunneling, an enhanced port security authentication mechanism

Advanced port knocking authentication scheme with QRC using AES

DNSsec in Isabelle - Replay Attack and Origin Authentication

Address Knocking: An Undetectable Authentication Based on IPv6 Address

Hybrid Spread-Spectrum TCP for Combating Fraudulent Cyber Activities against Reconnaissance Attacks

Performance comparison of defense mechanisms against TCP SYN flood DDoS attack

A New Replay Attack Against Anonymous Communication Networks

Network security using firewall and cryptographic authentication (2012).

Simple port knocking method: Against TCP replay attack and port scanning

Similar Documents

Extension of a port knocking client-server architecture with NTP synchronization

SPKT: Secure Port Knock-Tunneling, an enhanced port security authentication mechanism

Advanced port knocking authentication scheme with QRC using AES

DNSsec in Isabelle - Replay Attack and Origin Authentication

Address Knocking: An Undetectable Authentication Based on IPv6 Address

Hybrid Spread-Spectrum TCP for Combating Fraudulent Cyber Activities against Reconnaissance Attacks

Performance comparison of defense mechanisms against TCP SYN flood DDoS attack

A New Replay Attack Against Anonymous Communication Networks

Network security using firewall and cryptographic authentication (2012).

Simple port knocking method: Against TCP replay attack and port scanning