MULTICAST AND GROUP SECURITY
CONTENTS INTRODUCTION MOTIVATION FOR MULTICAST SECURITY MULTICAST CONTENT PROTECTION PROBLEM AREA 1: SECURE MULTICAST DATA HANDLING PROBLEM AREA 2: MANAGEMENT OF KEYING MATERIAL PROBLEM AREA 3: MULTICAST SECURITY POLICIES INFRASTRUCTURE PROTECTION APPLICATIONS OF SECURE MULTICASTING ROAD MAP REFERENCES FRAMEWORK FOR MULTICAST AND GROUP SECURITY THE PROBLEM SCOPE OF MULTICAST SECURITY FUNDAMENTAL ISSUES ROUTING INFRASTRUCTURE PROTECTION CONTROLLED ACCESS TO THE MULTICAST DISTRIBUTION TREE MANAGEMENT OF KEYING MATERIAL TRANSPORT AND APPLICATIONS ISSUES SECURITY OF RELIABLE MULTICAST PROTOCOLS APPLICATIONS REQUIREMENTS AND OTHER ISSUES THE IETF PROBLEM SCOPE FOR MULTICAST AND GROUP SECURITY A BRIEF HISTORY OF MULTICAST SECURITY EFFORTS IN THE IETF THE IETF MULTICAST SECURITY REFERENCE FRAMEWORK ELEMENTS OF THE REFERENCE FRAMEWORK THREE PROBLEM AREAS IN THE MANAGEMENT OF KEYING MATERIAL PROBLEM AREA 1: MULTICAST DATA HANDLING THE BUILDING BLOCKS APPROACH MOTIVATION FOR BUILDING BLOCKS FUNCTIONAL BUILDING BLOCKS SUMMARY MULTICAST DATA AUTHENTICATION ISSUES IN MULTICAST DATA AUTHENTICATION PROVIDING GROUP AUTHENTICATION PROVIDING SOURCE AUTHENTICATION DIGITAL SIGNATURES FOR SOURCE AUTHENTICATION BLOCK SIGNATURES AND INDIVIDUAL PACKET AUTHENTICATION HASH CHAINING TO AUTHENTICATE STREAMING DATA GRAPH REPRESENTATION OF HASH CHAINING EF?CIENT MULTICHAINED STREAM SIGNATURE AUGMENTED CHAINING PIGGYBACKING DISCUSSION ON HASH CHAINING FOR AUTHENTICATION MAC-BASED SOURCE AUTHENTICATION OF UNRELIABLE STREAMS TESLA INITIALIZATION MAC-BASED AUTHENTICATION OF PACKETS BY THE SENDER PACKET PROCESSING AT THE RECEIVERS IN TESLA ENHANCEMENTS TO TESLA APPLICABILITY ANALYSIS OF TESLA IPSEC ESP AND MESP INTRODUCTION TO GROUP KEY MANAGEMENT A MODEL FOR GROUP KEY MANAGEMENT REQUIREMENTS IN GROUP KEY MANAGEMENT SECURITY REQUIREMENTS OF UNICAST KEY MANAGEMENT SECURITY REQUIREMENTS OF GROUP KEY MANAGEMENT GSA MANAGEMENT THE GSA MODEL DE?NITION OF GSA CLASSI?CATION OF THE GROUP KEY MANAGEMENT PROBLEM ARCHITECTURES AND PROTOCOLS FOR GROUP KEY MANAGEMENT ARCHITECTURAL ISSUES AND MOTIVATIONS IKAM DOMAINS, AREAS, AND KEY DISTRIBUTORS MULTICAST GROUPS FOR DATA AND CONTROL KEYS: MULTICAST GROUPS AND CONTROL MULTICAST GROUPS CONTROL MULTICAST GROUPS: ADDRESS ALLOCATION ARRANGEMENT OF KEYS IN THE DOMAIN IOLUS HIERARCHICAL SUBGROUPING SUBGROUP KEY MANAGEMENT SECURE GROUP COMMUNICATION IN IOLUS LIMITATIONS OF IOLUS ARCHITECTURE KEY DISTRIBUTION PROTOCOLS GKMP GSAKMP GDOI GROUP KEY MANAGEMENT ALGORITHMS BATCH AND PERIODIC REKEYING TRADE-OFFS IN BATCH REKEYING MARKS LKH INITIALIZING AN LKH ADDING A MEMBER TO A KEY TREE JOIN REKEYING IN LKH EF?CIENT JOIN REKEYING USING LKH+ LEAVE REKEYING IN LKH EF?CIENT LEAVE REKEYING USING OFCS OFT INITIALIZING AN OFT JOIN REKEYING IN OFT LEAVE REKEYING IN OFT BATCH PROCESSING OF MEMBERSHIP CHANGES IN KEY TREES RELIABLE TRANSPORT OF REKEY MESSAGES REPEATED RETRANSMISSION OF REKEY MESSAGE FEC FOR RELIABILITY WEIGHTED KEY ASSIGNMENT FOR RELIABLE TRANSPORT STATELESS KEY REVOCATION ALGORITHMS STR FOR MEMBERSHIP REVOCATION SDR FOR MEMBERSHIP REVOCATION GROUP SECURITY POLICY GROUP SECURITY POLICY FRAMEWORK CLASSI?CATION OF GROUP SECURITY POLICY ANNOUNCEMENT POLICY MEMBERSHIP POLICY ACCESS CONTROL OR AUTHORIZATION POLICY DATA PROTECTION POLICY GROUP MANAGEMENT DELEGATION POLICY KEY DISTRIBUTION POLICY COMPROMISE RECOVERY POLICY GROUP SECURITY POLICY SPECI?CATION ISMENE POLICY SPECI?CATION CCNT GSPT DISCUSSION ON POLICY SPECI?CATION LANGUAGES POLICY NEGOTIATION AND RECONCILIATION ISMENE POLICY RECONCILIATION POLICY NEGOTIATION IN DCCM GROUP SECURITY POLICY ENFORCEMENT POLICY DISTRIBUTION AND ENFORCEMENT IN GDOI ANTIGONE POLICY FRAMEWORK GSAKMP POLICY DISTRIBUTION AND ENFORCEMENT SECURING MULTICAST ROUTING PROTOCOLS THE THREE COMPONENTS OF MULTICAST SECURITY GENERAL TYPES OF ATTACKS IN MULTICAST ROUTING MULTICAST ROUTING AND SECURITY OVERVIEW OF MULTICAST ROUTING CLASSI?CATION OF MULTICAST ROUTING PROTOCOLS DVMRP PIM-SM IGMP SSM SECURITY REQUIREMENTS IN UNICAST AND MULTICAST ROUTING PIM-SM SECURITY BACKGROUND PIM AUTHENTICATION SKMP FOR PIMV2 REVISED PIM-SM: SECURITY ISSUES REVISED PIM-SM: POSSIBLE SOLUTIONS MSDP SECURITY IGMP SECURITY MEMBERSHIP AUTHORIZATION AND AUTHENTICATION ISSUES MEMBERSHIP AUTHORIZATION APPROACHES MESSAGE AUTHENTICATION APPROACHES OPEN ISSUES SECURITY IN OTHER ROUTING PROTOCOLS SECURE CBT MULTICASTING: SMKD KHIP SECURITY IN RELIABLE MULTICAST PROTOCOLS CLASSI?CATION OF RM PROTOCOLS GOOD THROUGHPUT STRATEGIES NETWORK ENTITY PARTICIPATION AND SUPPORT GENERIC SECURITY REQUIREMENTS FOR RM PROTOCOLS SECURITY OF TRACK PROTOCOLS MODEL OF TRACK RMTP-II TRAM SECURITY OF NORM PROTOCOLS MODEL OF NORM PGM SECURITY OF FEC-BASED PROTOCOLS APPLICATIONS OF MULTICAST AND THEIR SECURITY STOCK MARKET DATA DISTRIBUTION NETWORK TOPOLOGY SECURITY REQUIREMENTS AND POSSIBLE APPROACHES LOCAL AREA IP TELEVISION NONREAL-TIME MULTICAST DISTRIBUTION MFTP SECURITY REQUIREMENTS OF MFTP APPLICATIONS SECURITY SOLUTIONS FOR MFTP SECUREGROUPS PROJECT IMPACT OF MOBILITY ON GROUP KEY MANAGEMENT CONCLUSION AND FUTURE WORK IETF MULTICAST SECURITY FRAMEWORK SECURE MULTICAST DATA TRANSMISSION GROUP AUTHENTICATION SOURCE AUTHENTICATION GROUP KEY DISTRIBUTION SECURE MULTICAST GROUP MANAGEMENT DISTRIBUTED GROUP KEY MANAGEMENT SECURE GROUP COMMUNICATION BETWEEN MOBILE MEMBERS IN WIRELESS ENVIRONMENTS POLICY FUTURE DIRECTION AND ?NAL WORDS INTRODUCTION S ATELLITE TV DISTRIBUTION, SOFTWARE DISTRIBUTION, STOCK QUOTE STREAMING, WEB CACHING, AND MULTIMEDIA CONFERENCING ARE EXAMPLES OF APPLICATIONS THAT REQUIRE ONE-TO-MANY OR MANY-TO- MANY GROUP COMMUNICATION MULTICAST ENABLES EF?CIENT GROUP COMMUNICATION BY ALLOWING THE SENDER TO TRANSMIT A SINGLE COPY OF DATA, WITH NETWORK ELEMENTS SUCH AS ROUTERS AND SWITCHES MAKING COPIES AS NECESSARY FOR THE RECEIVERS THUS MULTICAST REDUCES THE COMPUTATIONAL LOAD AT THE SENDER, AS WELL AS THE NUMBER OF COPIES OF DATA ON THE NETWORK UNFORTUNATELY, DESPITE THE VAST AMOUNT OF RESEARCH AND DEVELOPMENT OF MULTICAST PROTOCOLS IN THE PAST DECADE, DEPLOY- MENT OF MULTICAST APPLICATIONS HAS BEEN SLOW WHILE SOME ATTRI- BUTE THIS TO NO ‘‘KILLER APPLICATIONS,’’ THE MAJOR FACTOR IS, IN FACT, THAT MULTICAST SERVICES LACK SUPPORT FOR TRAF?C MANAGEMENT, ACCOUNTING AND BILLING, RELIABILITY, AND SECURITY WE IDENTIFY MULTICAST SECURITY AS ONE OF THE IMPORTANT PROB- LEMS TO SOLVE FOR THE SUCCESSFUL DEPLOYMENT OF GROUP COMMUNICA- TION APPLICATIONS FOR EXAMPLE, INVESTORS WOULD LIKE A GUARANTEE THAT THE STOCK QUOTES BEING DELIVERED VIA MULTICAST ARE INDEED AUTHENTIC SIMILARLY, PROVIDERS WOULD LIKE TO LIMIT CONTENT DIS- TRIBUTION TO SUBSCRIBERS WHO PAID FOR THE SERVICE FINALLY, ANOTHER ASPECT OF SECURITY, CON?DENTIALITY, IS A REQUIREMENT OF APPLICATIONS SUCH AS CONFERENCING, AS WELL AS CORPORATE AND MILITARY COM- MUNICATIONSVIA THEINTERNET INSUMMARY, POPULARAPPLICATIONS OF MULTICAST REQUIRE DATA INTEGRITY, ACCESS CONTROL, AND PRIVACY IP MULTICAST SCALES WELL DUE ITS OPEN MODEL RECEIVERS CAN JOIN AND SENDERS CAN TRANSMIT DATA TO A MULTICAST GROUP, WITHOUT C H A P T E R