Abstract
The Locator/ID Separation Protocol (LISP) is a routing architecture that provides new semantics for IP addressing. In order to simplify routing operations and improve scalability in future Internet, the LISP uses two different numbering spaces to separate the device identifier from its location. In other words, the LISP separates the ’where’ and the ’who’ in networking and uses a mapping system to couple the location and identifier. This paper analyses the security and functionality of the LISP mapping procedure using a formal methods approach based on Casper/FDR tool. The analysis points out several security issues in the protocol such as the lack of data confidentiality and mutual authentication. The paper addresses these issues and proposes changes that are compatible with the implementation of the LISP.
This is a preview of subscription content, log in via an institution.
Buying options
Tax calculation will be finalised at checkout
Purchases are for personal use only
Learn about institutional subscriptionsPreview
Unable to display preview. Download preview PDF.
References
Ishiyama, I., Uehara, K., Esaki, H., Teraoka, F.: LINA: A New Approach to Mobility in Wide Area Networks. IEICE Trans. Commun. E84-B(8) (August 2001)
Atkinson, R.J.: ILNP Concept of Operations, internet Draft (July 27, 2011)
Mapp, G., Aiash, M., Crestana Guardia, H., Crowcroft, J.: Exploring Multi-homing Issues in Heterogeneous Environments. In: 1st International Workshop on Protocols and Applications with Multi-Homing Support (PAMS 2011), Singapore (2010)
Aiash, M., Mapp, G., Lasebae, A., Phan, R., Augusto, M., Vanni, R., Moreira, E.: Enhancing Naming and Location Services to support Multi-homed Devices in Heterogeneous Environments. In: Proc. The CCSIE 2011, London, UK, July 25-27 (2011)
Cisco Nexus 7000 Series Switches, Cisco Nexus 7000 LISP Overview Video, http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6554/ps6599/ps10800/LISP_VDS.html (last accessed on January 13, 2013)
Locator/ID Separation Protocol (lisp) Working Group, http://datatracker.ietf.org/wg/lisp/charter/ (last accessed on January 13, 2013)
Cisco Locator/ID Separation Protocol Security At-A-Glance, http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6554/ps6599/ps10800/at_a_glance_c45-645204.pdf (last accessed on January 13, 2013)
Maino, F., Ermagan, V., Cabellos, A., Saucez, A., Bonaventure, O.: LISP-Security (LISP-SEC). Internet-Draft (September 12, 2012)
Cisco Locator/ID Separation Protocol Revolutionary Network Architecture to Power the Network, http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6554/ps6599/ps10800/aag_c45-635298.pdf (last accessed on January 13, 2013)
Farinacci, D., Fuller, V., Meyer, D., Lewis, D.: Locator/ID Separation Protocol (LISP). Internet-Draft (November 13, 2012)
Farinacci, D., Fuller, V.: LISP Map Server Interface. Internet-Draft (March 4, 2012)
Aiash, M., Al-Nemrat, A., Preston, D.: Securing Address Registration in Location/ID Split Protocol Using ID-Based Cryptography. In: Tsaoussidis, V., Kassler, A., Koucheryavy, Y., Mellouk, A. (eds.) WWIC 2013. LNCS, vol. 7889, pp. 129–139. Springer, Heidelberg (2013)
Goldsmith, M., Lowe, G., Roscoe, A.W., Ryan, P., Schneider, S.: The modelling and analysis of security protocols. Pearson Ltd. (2010)
Formal Systems, Failures-divergence refinement. FDR2 user manual and tutorial, Version 1.3 (June 1993)
Lowe, G., Broadfoot, P., Dilloway, C., Hui, M.L.: Casper: A compiler for the analysis of security protocols, 1.12 edn. (September 2009)
Aiash, M., Mapp, G., Lasebae, A., Phan, P., Loo, J.: Casper: A formally verified AKA protocol for vertical handover in heterogeneous environments using Casper/FDR. EURASIP Journal on Wireless Communications and Networking 2012, 57 (2012)
Aiash, M., Mapp, G., Lasebae, A., Phan, P., Loo, J.: A Formally Verified Device Authentication Protocol Using Casper/FDR. In: 11th IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), June 25-27 (2012)
Harkins, D., Carrel, D.: The Internet Key Exchange (IKE). Request for Comments: 2409 (November 1998)
Kent, S., Atkinson, R.: IP Encapsulating Security Payload (ESP). Request for Comments: 2406 (November 1998)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2013 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Aiash, M. (2013). A Novel Security Protocol for Resolving Addresses in the Location/ID Split Architecture. In: Lopez, J., Huang, X., Sandhu, R. (eds) Network and System Security. NSS 2013. Lecture Notes in Computer Science, vol 7873. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-38631-2_6
Download citation
DOI: https://doi.org/10.1007/978-3-642-38631-2_6
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-38630-5
Online ISBN: 978-3-642-38631-2
eBook Packages: Computer ScienceComputer Science (R0)