Multi-channel Security Through Data Fragmentation - Critical Infrastructure Protection XIV - ICCIP 2020 Access content directly
Conference Papers Year : 2020

Multi-channel Security Through Data Fragmentation

Abstract

This chapter presents a novel security framework developed for a multi-channel communications architecture that achieves security by distributing messages and their authentication codes across multiple channels at the bit level. This method of transmission provides protection from confidentiality and integrity attacks without relying on encryption. The two communicating parties utilize existing key exchange mechanisms to pass initialization information. The framework operates by assigning to each message bit a fragment identifier using a hardware-based stream cipher as a pseudorandom number generator, and transmitting specific message fragments across each channel. This prevents the entirety of a message from being transmitted over a single channel and spreads the authentication across the available channels, enabling the sender and receiver to identify a compromised channel even in the presence of a sophisticated man-in-the-middle attack where the adversary forces message acceptance at the destination, perhaps by altering the message error detecting code. Under some conditions, the receiver can recover the original message without retransmission. The holistic framework is attractive for critical infrastructure communications because it provides availability while defending against confidentiality and integrity attacks.
No file

Dates and versions

hal-03794644 , version 1 (03-10-2022)

Licence

Attribution

Identifiers

Cite

Micah Hayden, Scott Graham, Addison Betances, Robert Mills. Multi-channel Security Through Data Fragmentation. 14th International Conference on Critical Infrastructure Protection (ICCIP), Mar 2020, Arlington, VA, United States. pp.137-155, ⟨10.1007/978-3-030-62840-6_7⟩. ⟨hal-03794644⟩
12 View
0 Download

Altmetric

Share

Gmail Facebook X LinkedIn More