Browse
Submit Data
Databases
API
Help

Dataset Information

0 Views

0 Connections

0 Citations

0 Reanalyses

0 Downloads

Omics score: 0

SlowITe, a Novel Denial of Service Attack Affecting MQTT.

ABSTRACT: Security of the Internet of Things is a crucial topic, due to the criticality of the networks and the sensitivity of exchanged data. In this paper, we target the Message Queue Telemetry Transport (MQTT) protocol used in IoT environments for communication between IoT devices. We exploit a specific weakness of MQTT which was identified during our research, allowing the client to configure the behavior of the server. In order to validate the possibility to exploit such vulnerability, we propose SlowITe, a novel low-rate denial of service attack aimed to target MQTT through low-rate techniques. We validate SlowITe against real MQTT services, considering both plain text and encrypted communications and comparing the effects of the threat when targeting different daemons. Results show that the attack is successful and it is able to exploit the identified vulnerability to lead a DoS on the victim with limited attack resources.

SUBMITTER: Vaccari I

PROVIDER: S-EPMC7285273 | biostudies-literature | 2020 May

REPOSITORIES: biostudies-literature

ACCESS DATA

Json Xml

Publications

SlowITe, a Novel Denial of Service Attack Affecting MQTT.

Vaccari Ivan I Aiello Maurizio M Cambiaso Enrico E

Sensors (Basel, Switzerland) 20200521 10

Security of the Internet of Things is a crucial topic, due to the criticality of the networks and the sensitivity of exchanged data. In this paper, we target the Message Queue Telemetry Transport (MQTT) protocol used in IoT environments for communication between IoT devices. We exploit a specific weakness of MQTT which was identified during our research, allowing the client to configure the behavior of the server. In order to validate the possibility to exploit such vulnerability, we propose Slo ...[more]

PMID: 32455752

Similar Datasets

A Novel Protective Framework for Defeating HTTP-Based Denial of Service and Distributed Denial of Service Attacks.

Project description:The growth of web technology has brought convenience to our life, since it has become the most important communication channel. However, now this merit is threatened by complicated network-based attacks, such as denial of service (DoS) and distributed denial of service (DDoS) attacks. Despite many researchers' efforts, no optimal solution that addresses all sorts of HTTP DoS/DDoS attacks is on offer. Therefore, this research aims to fix this gap by designing an alternative solution called a flexible, collaborative, multilayer, DDoS prevention framework (FCMDPF). The innovative design of the FCMDPF framework handles all aspects of HTTP-based DoS/DDoS attacks through the following three subsequent framework's schemes (layers). Firstly, an outer blocking (OB) scheme blocks attacking IP source if it is listed on the black list table. Secondly, the service traceback oriented architecture (STBOA) scheme is to validate whether the incoming request is launched by a human or by an automated tool. Then, it traces back the true attacking IP source. Thirdly, the flexible advanced entropy based (FAEB) scheme is to eliminate high rate DDoS (HR-DDoS) and flash crowd (FC) attacks. Compared to the previous researches, our framework's design provides an efficient protection for web applications against all sorts of DoS/DDoS attacks.

| S-EPMC4433694 | biostudies-other

Bogazici University distributed denial of service dataset.

Project description:Distributed Denial of Service (DDoS) attacks is one of the most troublesome intrusions for online services on the internet. In general DDoS attacks are divided into two categories as bandwidth depletion and resource depletion attacks. We generate resource depletion-type DDoS attacks on the campus network of Boğaziçi University and recorded the ongoing traffic from the backbone router's mirrored port. We generate TCP SYN, and UDP flooding packets using Hping3 traffic generator software by flooding. This dataset includes attack-free user traffic and attack traffic, which is suitable for evaluating network-based DDoS detection methods. Attacks are towards one victim server connected to the backbone router of the campus. Attack packets have randomly generated spoofed source IP addresses. We removed payloads of packets and anonymized the source IP addresses of legitimate users for the confidentiality of legitimate users.

| S-EPMC7452651 | biostudies-literature

FSM-F: Finite State Machine Based Framework for Denial of Service and Intrusion Detection in MANET.

Project description:Due to the continuous advancements in wireless communication in terms of quality of communication and affordability of the technology, the application area of Mobile Adhoc Networks (MANETs) significantly growing particularly in military and disaster management. Considering the sensitivity of the application areas, security in terms of detection of Denial of Service (DoS) and intrusion has become prime concern in research and development in the area. The security systems suggested in the past has state recognition problem where the system is not able to accurately identify the actual state of the network nodes due to the absence of clear definition of states of the nodes. In this context, this paper proposes a framework based on Finite State Machine (FSM) for denial of service and intrusion detection in MANETs. In particular, an Interruption Detection system for Adhoc On-demand Distance Vector (ID-AODV) protocol is presented based on finite state machine. The packet dropping and sequence number attacks are closely investigated and detection systems for both types of attacks are designed. The major functional modules of ID-AODV includes network monitoring system, finite state machine and attack detection model. Simulations are carried out in network simulator NS-2 to evaluate the performance of the proposed framework. A comparative evaluation of the performance is also performed with the state-of-the-art techniques: RIDAN and AODV. The performance evaluations attest the benefits of proposed framework in terms of providing better security for denial of service and intrusion detection attacks.

| S-EPMC4902226 | biostudies-literature

Aftermath of bustamante attack on genomic beacon service.

Project description:With the enormous need for federated eco-system for holding global genomic and clinical data, Global Alliance for Genomic and Health (GA4GH) has created an international website called beacon service which allows a researcher to find out whether a specific dataset can be utilized to his or her research beforehand. This simple webservice is quite useful as it allows queries like whether a certain position of a target chromosome has a specific nucleotide. However, the increased integration of individuals genomic data into clinical practice and research raised serious privacy concern. Though the answer of such queries are yes or no in Bacon network, it results in serious privacy implication as demonstrated in a recent work from Shringarpure and Bustamante. In their attack model, the authors demonstrated that with a limited number of queries, presence of an individual in any dataset can be determined.We propose two lightweight algorithms (based on randomized response) which captures the efficacy while preserving the privacy of the participants in a genomic beacon service. We also elaborate the strength and weakness of the attack by explaining some of their statistical and mathematical models using real world genomic database. We extend their experimental simulations for different adversarial assumptions and parameters.We experimentally evaluated the solutions on the original attack model with different parameters for better understanding of the privacy and utility tradeoffs provided by these two methods. Also, the statistical analysis further elaborates the different aspects of the prior attack which leads to a better risk management for the participants in a beacon service.The differentially private and lightweight solutions discussed here will make the attack much difficult to succeed while maintaining the fundamental motivation of beacon database network.

| S-EPMC5547468 | biostudies-other

Denial of service to same-sex and interracial couples: Evidence from a national survey experiment.

Project description:Legislatures and courts are debating whether businesses can deny services to same-sex couples for religious reasons. Yet, little is known about public views on this issue. In a national survey experiment, Americans (n = 2035) responded to an experimental vignette describing a gay or interracial couple refused service. Vignettes varied the reason for refusal (religion/nonreligious) and by business type (individual/corporation). Results confirm greater support of service refusal by the self-employed than by corporations and to gay couples than to interracial couples. However, religious reasons for refusal to gay couples elicit no more support than do nonreligious reasons. In the first national study to experimentally analyze views on service refusal to sexual minorities, we demonstrate that views vary by several factors but not by whether the refusal was for religious reasons.

| S-EPMC5744463 | biostudies-other

Novel emaravirus affecting ash

Project description:Characterization of a novel emaravirus affecting ash species (Fraxinus spp.) in Europe

| PRJEB46740 | ENA

Factors Affecting Dental Service Utilisation in Indonesia: A Population-Based Multilevel Analysis.

Project description:This study aimed to examine the prevalence of dental service utilisation in Indonesia and its association with social determinants at individual and community levels. Cross-sectional data from the 2014 Indonesian Family Life Survey (IFLS-5) was analysed. Individual independent variables included age, sex, marital status, educational attainment, economic status, health insurance, dental pain, self-reported mouth ulcers, self-rated health status, unmet healthcare needs and smoking status, while community independent variables included cognitive, structural social capital and residential area. Multilevel logistic regressions were performed to explore the associations between independent variables at different levels and the outcome of dental service utilisation. Of the total sample of 16,860 adults aged 15 years or older in our study, around 86.4% never visited a dentist. Dental service utilisation was associated with older age, female, currently not married, higher education level and economic status, health insurance, dental pain, self-reported mouth ulcers, met healthcare needs, never smoking, living in urban areas and communities with high structural social capital. Both individual and broader social determinants influenced dental service utilisation in Indonesia. These factors should be considered in the formulation of oral health policies and programmes aiming to improve dental service utilisation in the country.

| S-EPMC7432444 | biostudies-literature

Denial and Empathy: Partners in Employee Trust Repair?

Project description:Prior research on trust repair has focused primarily on investigating verbal responses to breaches of trust. Although consistently implicated in violations, the role of affect in the repair process has been mostly ignored. Using a scenario-based paradigm, we conducted an experimental study to examine the value of mistrusted party's empathy, specific responses to an integrity-based violation (apology vs. denial), and nature of consequences (personal vs. organizational), as well as their interactive effects, on trust repair. Consequently, we sought to merge work on verbal responses with affect. Major findings indicated that presence of mistrusted party's empathy functioned to repair trust better than its absence and, when coupled with a denial of culpability, produced markedly increased perceptions of violator's integrity. These findings contribute to our understanding of how leaders influence followers through affect, informing both emotion and trust theory.

| S-EPMC6349725 | biostudies-literature

Climate denial in Canada and the United States.

Project description:One type of climate change denial is the belief that climate change is naturally occurring instead of human caused; this form of denial is known as attribution skepticism or soft denial. While considerable research has addressed outright climate change denial, little research has focused specifically on soft denial and its complex and politicized relationship with science. We examine this form of denial using original survey data collected in 2017 in the United States (n = 1510) and in 2019 in Canada (n = 1545). Contrary to expectations about the United States being more divided by political ideology on the topic of climate change, we find that - after accounting for trust in political leaders - Canadians' views are driven more by ideological position than those of Americans. In the United States, climate denial is related to trust in President Trump as a source of information about climate change. The study of soft denial is important as it undermines the rationale for climate change solutions.

| S-EPMC9539953 | biostudies-literature

Obstetric gaslighting and the denial of mothers' realities.

Project description:Gaslighting is a type of abuse aimed at making victims question their sanity as well as the veracity and legitimacy of their own perspectives and feelings. In this article, we show how gaslighting can operate as a key, yet underexamined strategy of obstetric violence, or the institutional and interpersonal violation of women's rights during pregnancy, childbirth, and postpartum. We draw on forty-six in-depth, semi-structured interviews with mothers who experienced a traumatic childbirth to examine how obstetric providers gaslight mothers before, during and after childbirth when they deny - and thereby destabilize - mothers' realities. We identify and examine four core types of denials: denials of 1) mothers' humanity, 2) mothers' knowledge as valid, 3) mothers' judgements as rational and 4) mothers' feelings as legitimate. All four denials work to render mothers noncredible and their claims illegible within clinical encounters. In explicitly naming, theorizing, and examining obstetric gaslighting, our aims are threefold: 1) to uncover and theorize an underexamined mechanism of obstetric violence through a sociological lens, 2) to offer a typology of obstetric gaslighting's manifestations to aid scholars and practitioners in recognizing when obstetric gaslighting is occurring and 3) to advance a growing research program on gaslighting in medicine.

| S-EPMC9167791 | biostudies-literature

OmicsDI is part of the ELIXIR infrastructure

OmicsDI is an Elixir interoperability service. Learn more ›

Tweets

OmicsDI Databases

PRIDE
PeptideAtlas
MassIVE
JPOST Repository
Physiome Model Repository

EGA
EVA
ENA
LINCS
PAXDB
Cell Collective

MetaboLights
Metabolomics Workbench
MetabolomeExpress
GNPS
BioModels
FAIRDOMHub

ArrayExpress
dbGaP
ExpressionAtlas
GEO
NODE

Information

Databases
Help
API
Contact us
Code on GitHub
Terms of use
Submit Data