Everything about Replay Attack totally explained
A
replay attack is a form of
network attack in which a valid data transmission is maliciously or fraudulently repeated or delayed. This is carried out either by the originator or by an
adversary who intercepts the data and retransmits it, possibly as part of a
masquerade attack by
IP packet substitution (such as
stream cipher attack).
Example
Suppose
Alice wants to prove her identity to Bob. Bob requests her password as proof of identity, which Alice dutifully provides (possibly after some transformation like a
hash function); meanwhile, Eve is eavesdropping the conversation and keeps the password. After the interchange is over, Eve connects to Bob posing as Alice; when asked for a proof of identity, Eve sends Alice's password read from the last session, which Bob must accept.
Countermeasures
A way to avoid replay attacks is using
session tokens: Bob sends a one-time token to Alice, which Alice uses to transform the password and send the result to Bob (for example computing a hash function of the session token appended to the password). On his side Bob performs the same computation; if and only if both values match, the login is successful. Now suppose Mallory has captured this value and tries to use it on another session; Bob sends a different session token, and when Mallory replies with the captured value it'll be different from Bob's computation.
Session tokens should be chosen by a (pseudo-)
random process. Otherwise Mallory may be able to guess some future token and convince Alice to use that token in her transformation. Mallory can then replay her reply at a later time, which Bob will accept.
Bob can also send
nonces but should then include a
Message authentication code (MAC), which Alice should check.
Timestamping is another way of preventing a replay attack.
Synchronization should be achieved using a secure protocol. For example Bob periodically broadcasts the time on his clock together with a MAC. When Alice wants to send Bob a message, she includes her best estimate of the time on his clock in her message, which is also authenticated. Bob only accepts messages for which the timestamp is within a reasonable tolerance. The advantage of this scheme is that Bob doesn't need to generate (pseudo-) random numbers.
Further Information
Get more info on 'Replay Attack'.
|
External Link Exchanges
Do you know how hard it is to get a link from a large encyclopaedia? Well we're different and will prove it. To get a link from us just add the following HTML to your site on a relevant page:
<a href="http://replay_attack.totallyexplained.com">Replay attack Totally Explained</a>
Then simply click through this link from your web page. Our crawlers will verify your link, extract the title of your web page and instantly add a link back to it. If you like you can remove the words Totally Explained and embed the link in article text.
As long as your link remains in place, we'll keep our link to you right here. Please play fair - our crawlers are watching. Your site must be closely related to this one's topic. Any kind of spamming, dubious practises or removing the link will result in your link from us being dropped and, potentially, your whole site being banned. |
