On the security of group communication schemes

Issue title: Special Issue on Security of Ad-hoc and Sensor Networks

Guest editors: Peng Ning and Wenliang Du

Article type: Research Article

Authors: Xu, Shouhuai^{; *}

Affiliations: Department of Computer Science, University of Texas at San Antonio, USA. E-mail: shxu@cs.utsa.edu

Note: [*] An extended abstract of this paper appeared as [29].

Abstract: Secure group communications are a mechanism facilitating protected transmission of messages from a sender to multiple receivers, and many emerging applications in both wired and wireless networks need the support of such a mechanism. There have been many secure group communication schemes in wired networks, which can be directly adopted in, or appropriately adapted to, wireless networks such as mobile ad hoc networks (MANETs) and sensor networks. In this paper we show that the popular group communication schemes that we have examined are vulnerable to the following attack: An outside adversary who compromises a certain legitimate group member could obtain all past and present group keys (and thus all the messages protected by them); this is in sharp contrast to the widely-accepted belief that a such adversary can only obtain the present group key (and thus the messages protected by it). In order to understand and deal with the attack, we formalize two security models for stateful and stateless group communication schemes. We show that some practical methods can make a subclass of existing group communication schemes immune to the attack.

Keywords: Security, key management, group communication, multicast

DOI: 10.3233/JCS-2007-15106

Journal: Journal of Computer Security, vol. 15, no. 1, pp. 129-169, 2007