Authors:
S. Smaoui
1
;
F. Zarai
1
;
M. S. Obaidat
2
;
K. F. Hsiao
3
and
L. Kamoun
1
Affiliations:
1
University of Sfax, Tunisia
;
2
Monmouth University, United States
;
3
Ming-Chuan University, Taiwan
Keyword(s):
IP Security, Simulation Analysis, Internet Key Exchange Version2, Host Identity Protocol, AVISPA, SPAN.
Related
Ontology
Subjects/Areas/Topics:
Application Domains
;
Simulation and Modeling
;
Telecommunication Systems and Networks
Abstract:
IKEv2 offers authentication, authorization and key agreement services to establish a security association between two peers bound to IP addresses, but it is still vulnerable to some security problems such as denial of service (Dos) and man-in-the-middle attack. Host Identity Protocol (HIP) is also a security protocol that defines host identifiers for naming the endpoints and performs authentication and creation of IPsec security associations between them bound to identifiers. The purpose of HIP is to support trust systems, enhance mobility and greatly reduce the Denial of Service (Dos) attacks. We focus on an extension to IKEv2 in order to enhance authentication, eliminate man-in-the-middle attack and guarantee denial of service to provide better security between the two peers. In this paper, we describe our proposal that consists of combining the IKEv2 with the HIP to set up a security association based on two parameters which are location and Identity. This combination can provide
better security properties than each protocol used alone. This scheme, named (HIP_IKEv2) couples location and identity to define a security association between two peers. We have used the Automated Validation of Internet Security Protocols and Applications (AVISPA) and its Security Protocol Animator (SPAN), and two powerful automated tools in order to formally specify and validate the HIP_IKEv2 protocol.
(More)