Towards an Increased Detection Sensitivity of Time-Delay Attacks on Precision Time Protocol

Precision time protocol (PTP) is one of the most widely used protocols for clock synchronization in packet-switched networks, on which, among others, the transaction synchronization of the stock markets relies. PTP was not standardized with security as a core requirement and is therefore vulnerable...

Descripción completa

Guardado en:

Detalles Bibliográficos
Autores principales:	Lea Schonberger, Mohammad Hamad, Javier Velasquez Gomez, Sebastian Steinhorst, Selma Saidi
Formato:	article
Lenguaje:	EN
Publicado:	IEEE 2021
Materias:	Precision time protocol real-time response time analysis security time-delay attack Electrical engineering. Electronics. Nuclear engineering TK1-9971
Acceso en línea:	https://doaj.org/article/a053880e42ba4f7e9cda76e92dbc18b6
Etiquetas:	Agregar Etiqueta Sin Etiquetas, Sea el primero en etiquetar este registro!

id	oai:doaj.org-article:a053880e42ba4f7e9cda76e92dbc18b6
record_format	dspace
spelling	oai:doaj.org-article:a053880e42ba4f7e9cda76e92dbc18b62021-12-03T00:00:35ZTowards an Increased Detection Sensitivity of Time-Delay Attacks on Precision Time Protocol2169-353610.1109/ACCESS.2021.3127852https://doaj.org/article/a053880e42ba4f7e9cda76e92dbc18b62021-01-01T00:00:00Zhttps://ieeexplore.ieee.org/document/9612161/https://doaj.org/toc/2169-3536Precision time protocol (PTP) is one of the most widely used protocols for clock synchronization in packet-switched networks, on which, among others, the transaction synchronization of the stock markets relies. PTP was not standardized with security as a core requirement and is therefore vulnerable and attractive to manifold kinds of malicious attacks, such as time-delay attacks (TDAs). TDAs, in short, corrupt the exchange of timestamped messages and thus cause an incorrect synchronization process. The annex P of the IEEE 1588-2019 standard has defined a number of security mechanisms for clock synchronization, but, however, none of these can protect a PTP-based system completely against TDAs. In this work, we enhance existing approaches by introducing a so-called observation task and analytically deriving attack parameters of an ongoing TDA. Following the recommendation of the annex P of the IEEE 1588-2019 standard, these attack parameters can serve as an additional input for intrusion detection systems and allow for a more reliable and sensitive detection of TDAs. In a comprehensive evaluation, we experimentally investigate the impact different attack parameter combinations can have on a system.Lea SchonbergerMohammad HamadJavier Velasquez GomezSebastian SteinhorstSelma SaidiIEEEarticlePrecision time protocolreal-timeresponse time analysissecuritytime-delay attackElectrical engineering. Electronics. Nuclear engineeringTK1-9971ENIEEE Access, Vol 9, Pp 157398-157410 (2021)
institution	DOAJ
collection	DOAJ
language	EN
topic	Precision time protocol real-time response time analysis security time-delay attack Electrical engineering. Electronics. Nuclear engineering TK1-9971
spellingShingle	Precision time protocol real-time response time analysis security time-delay attack Electrical engineering. Electronics. Nuclear engineering TK1-9971 Lea Schonberger Mohammad Hamad Javier Velasquez Gomez Sebastian Steinhorst Selma Saidi Towards an Increased Detection Sensitivity of Time-Delay Attacks on Precision Time Protocol
description	Precision time protocol (PTP) is one of the most widely used protocols for clock synchronization in packet-switched networks, on which, among others, the transaction synchronization of the stock markets relies. PTP was not standardized with security as a core requirement and is therefore vulnerable and attractive to manifold kinds of malicious attacks, such as time-delay attacks (TDAs). TDAs, in short, corrupt the exchange of timestamped messages and thus cause an incorrect synchronization process. The annex P of the IEEE 1588-2019 standard has defined a number of security mechanisms for clock synchronization, but, however, none of these can protect a PTP-based system completely against TDAs. In this work, we enhance existing approaches by introducing a so-called observation task and analytically deriving attack parameters of an ongoing TDA. Following the recommendation of the annex P of the IEEE 1588-2019 standard, these attack parameters can serve as an additional input for intrusion detection systems and allow for a more reliable and sensitive detection of TDAs. In a comprehensive evaluation, we experimentally investigate the impact different attack parameter combinations can have on a system.
format	article
author	Lea Schonberger Mohammad Hamad Javier Velasquez Gomez Sebastian Steinhorst Selma Saidi
author_facet	Lea Schonberger Mohammad Hamad Javier Velasquez Gomez Sebastian Steinhorst Selma Saidi
author_sort	Lea Schonberger
title	Towards an Increased Detection Sensitivity of Time-Delay Attacks on Precision Time Protocol
title_short	Towards an Increased Detection Sensitivity of Time-Delay Attacks on Precision Time Protocol
title_full	Towards an Increased Detection Sensitivity of Time-Delay Attacks on Precision Time Protocol
title_fullStr	Towards an Increased Detection Sensitivity of Time-Delay Attacks on Precision Time Protocol
title_full_unstemmed	Towards an Increased Detection Sensitivity of Time-Delay Attacks on Precision Time Protocol
title_sort	towards an increased detection sensitivity of time-delay attacks on precision time protocol
publisher	IEEE
publishDate	2021
url	https://doaj.org/article/a053880e42ba4f7e9cda76e92dbc18b6
work_keys_str_mv	AT leaschonberger towardsanincreaseddetectionsensitivityoftimedelayattacksonprecisiontimeprotocol AT mohammadhamad towardsanincreaseddetectionsensitivityoftimedelayattacksonprecisiontimeprotocol AT javiervelasquezgomez towardsanincreaseddetectionsensitivityoftimedelayattacksonprecisiontimeprotocol AT sebastiansteinhorst towardsanincreaseddetectionsensitivityoftimedelayattacksonprecisiontimeprotocol AT selmasaidi towardsanincreaseddetectionsensitivityoftimedelayattacksonprecisiontimeprotocol
_version_	1718374004766539776

Towards an Increased Detection Sensitivity of Time-Delay Attacks on Precision Time Protocol

Ejemplares similares