Title page for ETD etd-04252001-234145


Type of Document Dissertation
Author Lough, Daniel Lowry
Author's Email Address daniel@lough.org
URN etd-04252001-234145
Title A Taxonomy of Computer Attacks with Applications to Wireless Networks
Degree PhD
Department Electrical and Computer Engineering
Advisory Committee
Advisor Name Title
Davis, Nathaniel J. IV Committee Chair
Brown, Ezra A. Committee Member
Jones, Mark T. Committee Member
Marchany, Randolph C. Committee Member
Midkiff, Scott F. Committee Member
Nunnally, Charles E. Committee Member
Keywords
  • computer attack taxonomy
  • computer security
  • integrity flaws
  • wireless security
  • VERDICT
  • IEEE 802.11
Date of Defense 2001-03-26
Availability unrestricted
Abstract
The majority of attacks made upon modern computers have been successful due to the exploitation of the same errors and weaknesses that have plagued computer systems for the last thirty years. Because the industry has not learned from these mistakes, new protocols and systems are not designed with the aspect of security in mind; and security that is present is typically added as an afterthought. What makes these systems so vulnerable is that the security design process is based upon assumptions that have been made in the past; assumptions which now have become obsolete or irrelevant. In addition, fundamental errors in the design and implementation of systems repeatedly occur, which lead to failures.

This research presents a comprehensive analysis of the types of attacks that are being leveled upon computer systems and the construction of a general taxonomy and methodologies that will facilitate design of secure protocols. To develop a comprehensive taxonomy, existing lists, charts, and taxonomies of host and network attacks published over the last thirty years are examined and combined, revealing common denominators among them. These common denominators, as well as new information, are assimilated to produce a broadly applicable, simpler, and more complete taxonomy. It is shown that all computer attacks can be broken into a taxonomy consisting of improper conditions: Validation Exposure Randomness Deallocation Improper Conditions Taxonomy; hence described by the acronym VERDICT.

The developed methodologies are applicable to both wired and wireless systems, and they are applied to some existing Internet attacks to show how they can be classified under VERDICT. The methodologies are applied to the IEEE 802.11 wireless local area network protocol and numerous vulnerabilities are found. Finally, an extensive annotated bibliography is included.

Files
  Filename       Size       Approximate Download Time (Hours:Minutes:Seconds) 
 
 28.8 Modem   56K Modem   ISDN (64 Kb)   ISDN (128 Kb)   Higher-speed Access 
  lough.dissertation.pdf 2.02 Mb 00:09:20 00:04:48 00:04:12 00:02:06 00:00:10

Browse All Available ETDs by ( Author | Department )

dla home
etds imagebase journals news ereserve special collections
virgnia tech home contact dla university libraries

If you have questions or technical problems, please Contact DLA.