45546568
Multi-channel Attacks
We introduce multi-channel attacks, i.e., side-channel attacks which utilize multiple side-channels such as power and EM simultaneously. We propose an adversarial model which combines a CMOS leakage model and the maximum-likelihood principle for performing and analyzing such attacks. This model is essential for deriving the optimal and very often counter-intuitive techniques for channel selection and data analysis. We show that using multiple channels is better for template attacks by experimentally showing a three-fold reduction in the error probability. Developing sound countermeasures against multi-channel attacks requires a rigorous leakage assessment methodology. Under suitable assumptions and approximations, our model also yields a practical assessment methodology for net information leakage from the power and all available EM channels in constrained devices such as chip-cards. Classical DPA/DEMA style attacks assume an adversary weaker than that of our model. For this adversary, we apply the maximum-likelihood principle to such design new and more efficient single and multiple-channel DPA/DEMA attacks.
7357174
On the design and quantification of privacy preserving data mining algorithms
The increasing ability to track and collect large amounts of data with the use of current hardware technology has lead to an interest in the development of data mining algorithms which preserve user privacy. A recently proposed technique addresses the issue of privacy preservation by perturbing the data and reconstructing distributions at an aggregate level in order to perform the mining. This method is able to retain privacy while accessing the information implicit in the original attributes. The distribution reconstruction process naturally leads to some loss of information which is acceptable in many practical situations. This paper discusses an Expectation Maximization (EM) algorithm for distribution reconstruction which is more effective than the currently available method in terms of the level of information loss. Specifically, we prove that the EM algorithm converges to the maximum likelihood estimate of the original distribution based on the perturbed data. We show that when a large amount of data is available, the EM algorithm provides robust estimates of the original distribution. We propose metrics for quantification and measurement of privacy-preserving data mining algorithms. Thus, this paper provides the foundations for measurement of the effectiveness of privacy preserving data mining algorithms. Our privacy metrics illustrate some interesting results on the relative effectiveness of different perturbing distributions.
12715963
Multiple-antenna signal constellations for fading channels
In this correspondence, we show that the problem of designing efficient multiple-antenna signal constellations for fading channels can be related to the problem of finding packings with large minimum distance in the complex Grassmannian space. We describe a numerical optimization procedure for finding good packings in the complex Grassmannian space and report the best signal constellations found by this procedure. These constellations improve significantly upon previously known results.
11059176
Policy-based validation of SAN configuration
Historically, storage has been directly connected to servers for fast local access and easy configuration. In recent years, storage area networks (SANs) have defined an alternative storage paradigm that allows storage to be shared among servers using fast interconnects. One of the key challenges of SAN management is the large number of configuration problems that are encountered in a typical SAN deployment. These configuration problems can be addressed by SAN management software. However, hard-coding the SAN configuration rules into the management software is not a viable option since it is not possible to easily modify or replace old configuration rules and specify new policies and guidelines. In this paper, we propose a novel policy-based SAN configuration validation system that can be used to specify, store, and evaluate configuration policies for SANs. We also introduce five new operators for collection policies that are useful for evaluating a wide variety of practical SAN configuration policies found in practice. The policy-based SAN configuration checking approach proposed in this paper is discussed within the context of device interoperability constraints. However, this approach is extensible as it can also be used to enforce performance, reliability, and security-related configuration constraints.
43442738
The turbo decoding algorithm and its phase trajectories
This paper analyzes phase trajectories and fixed points of the turbo decoding algorithm as a function of the signal-to-noise ratio (SNR). By exploiting the large length of turbo codes, the turbo decoding algorithm is treated as a single-parameter dynamical system, parameterized (approximately) by the SNR. This parameterization, along "with" extensive simulations at practical SNRs and asymptotic analysis as SNR goes to zero and infinity, is used to subdivide the entire SNR range into three regions with the "waterfall region" in the middle. The turbo decoding algorithm has distinctive phase trajectories and convergence properties in these three SNR regions. This paper also investigates existence and properties of fixed points in these SNR regions. The main fixed points of the turbo decoding algorithm are classified into two categories. In a wide range of SNRs (corresponding to bit-error rates less than 10/sup -1/), the decoding algorithm has "unequivocal" fixed points which correspond to mostly correct decisions on the information bits. Within this range, toward the lower values of SNR, there is another fixed point which corresponds to many erroneous decision on the information bits. Fixed points of this type are referred to as "indecisive" fixed points. It turns out that the indecisive fixed points bifurcate and disappear for SNRs in the waterfall region. This paper associates the qualitative transition of phase trajectories in the waterfall region to the bifurcation of indecisive fixed points. These bifurcations also explain empirically observed quasi-periodic and periodic phase trajectories of the turbo decoding algorithm.
9570200
Templates as Master Keys
We introduce two new attacks: the single-bit template attack and the template-enhanced DPA attack. The single-bit template attack can be used very effectively to classify even single bits in a single side channel sample with a high probability of correctness. The template-enhanced DPA attack, combines traditional DPA with single-bit template attacks to show that if an adversary has access to a test card with even a slightly biased RNG, then he/she can break protected cryptographic implementations on a target card even if they have perfect RNGs. In support of our claim, we report results from experiments on breaking two implementations of DES and AES protected by the masking countermeasure running on smartcards of different manufacturers. 
 
In light of these results, the threat of template attacks, generally viewed as intrinsically difficult to mount, needs to be reconsidered.
8419098
On-demand reliable medium access in sensor networks
A wireless sensor network typically consists of a dense deployment of sensor nodes to achieve higher resolution and better network coverage. Having a dense network increases the fault-tolerance and robustness of the system. However, if not properly handled, it can lead to more collisions during transmission and also network congestion. Furthermore, wireless communication is inherently unpredictable and error-prone. Hence, it is imperative to design an efficient medium access control (MAC) protocol that facilitates guaranteed delivery of data over unreliable wireless links. In this paper, we have designed an on-demand reliable MAC (RMAC) protocol that enables timely delivery of data. We have demonstrated its superior performance over existing reliability-enforcing approaches in terms of reliability, latency, scalability and energy-efficiency
33855421
Improvement in QoS for Multimedia Traffic in Wireless LANs during Handoff
5450203
Guest Editors' Introduction: Challenges in Designing Fault-Tolerant Routing in Networks
+I INRE arc several means nf intercomiecting the compoT nents of a computer system. Components can be connccted through direct or indirect connections. In a direct network, channels directly connect each processor. Neighboring nodes communicate with each other by scnding messages across the channcls. In an indirect network, processors are cnnnccted through switches and/or buses. Depending on how components are connected, we have bus-based networks, router-based networks, switcli-bascd networks, and cluster-based (hybrid of the other thrce networks) nctworks. Nctworks can also be classified bascd on topologies, which cau be either replnr or irregulnr. Anothcr classification is based on applications-there are local arca networks (LANs), networks of workstations (NOWs), multiprocessors, and mobilc networks. In a computer network, the efficiency of a routing process is critical to the system performance. A routing process deals with moving data between processors in a given network. When a routing process involves oiic source and onc destination, it is called unicnst or poirit-lopoint communication. When such a proccss involves more than one source and/or one destination, it is called a collective comrnlrnicntion process. Examples of collective communication include iirulticnst (one-to-many, one source and many destinations), brundcnst (one-to-all), and gossip (all-to-all).
29269446
A Novel Optimal Channel Partitioning Algorithm for Integrated Wireless and Mobile Networks
How to efficiently support multi-class services is a very important issue in integrated wireless and mobile networks because each type of services has distinct characteristics and quality of service (QoS) requirements. This paper presents an efficient algorithm for near optimal channel allocation when different types of services are to be provided in the next generation integrated wireless and mobile networks. We specifically propose a preemptive priority scheme for an integrated wireless and mobile network by first dividing channels into three independent groups and classifying traffic into four different types. The proposed system is modeled by a multi-dimension Markov chain model. Then such a model is used to obtain a set of relations that correlate performances with various system parameters. A novel recursive algorithm is developed to determine the minimal number of channels in each channel group that would be necessary to satisfy the QoS requirements. We also investigate the impact of load ratio for different types of traffic on channel assignment. Finally, we discuss some limitations of our approach and indicate possible future work. We believe that the partitioning scheme proposed in this paper can become a starting point for analysis of future integrated wireless and mobile networks.
19483456
Performance evaluation for IEEE 802.11e enhanced distributed coordination function
The IEEE 802.11e working group aims to enhance the current 802.11 medium access control (MAC) to support integrated data and voice (or video) communications. Till now, a draft of the IEEE 802.11e enhanced distributed coordination function (EDCF) has been proposed. In the literature, there is very limited analysis about EDCF since it is a new protocol, and most related work are only confined to simulation or saturation state. In this paper, we evaluate the performance of EDCF by dividing the traffic into two groups, namely real-time packets and non-real-time packets, and use an analytical model to quantify the performance of both IFS priority and contention window (CW) priority in the EDCF. In our analysis, we assume that the traffic arrival is a Poisson process. We provide a queue model for EDCF. Since there are multiple stations contending for one channel in the system, the queue model for EDCF cannot be a regular M/G/1 model. We redefine the service time and the waiting time so that we can still use M/G/1 model in the analysis. To validate the accuracy of our analytical results, we have done extensive simulations and we observed that EDCF does provide service differentiation between different traffic categories. But due to the inherent contention characteristic of carrier sense multiple access with collision avoidance (CSMA/CA) MAC protocol, the delay cannot be guaranteed, even for the highest priority traffic. A lot more work needs to be done for the MAC protocol to effectively support service differentiation in the future. Copyright © 2004 John Wiley & Sons, Ltd.