Skip to main content
SpringerLink
Log in
Book cover

International Conference on Computational Science and Its Applications

ICCSA 2008: Computational Science and Its Applications – ICCSA 2008 pp 484–499Cite as

The Design and Message Complexity of Secure Socket SCTP

  • Conference paper

Part of the book series: Lecture Notes in Computer Science ((LNTCS,volume 5073))

Abstract

This paper describes the design of secure socket SCTP (SS-SCTP). SS-SCTP is a new end-to-end security solution that uses the AUTH extension for integrity protection of messages and TLS for mutual authentication and key negotiation. Data confidentiality is in SS-SCTP provided through encryption at the socket layer. SS-SCTP aims to offer a high degree of security differentiation based on features in the base SCTP protocol as well as in standardized extensions. The flexible message concept provided in the base protocol plays a central role in the design of SS-SCTP. In the paper, a comparison of the message complexity produced by SS-SCTP, SCTP over IPsec, and TLS over SCTP is also presented. The main conclusion that can be drawn from the comparison is that, depending on the traffic pattern, SS-SCTP produces either less or similar message overhead compared to the standardized solutions when transferring user data.

This is a preview of subscription content, log in via an institution.

Chapter
USD   29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD   129.00
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD   169.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Learn about institutional subscriptions

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. Bellovin, S., Ioannidis, J., Keromytis, A., Stewart, R.: RFC 3554: On the use of stream control transmission protocol (SCTP) with IPsec (July 2003)

    Google Scholar 

  2. Chernick, C.M., Edington III, C., Fanto, M.J., Rosenthal, R.: Guidelines for the selection and use of transport layer security (TLS) implementations. National Institute of Standards and Technology (NIST) (June 2005)

    Google Scholar 

  3. Chown, P.: RFC 3268: Advanced encryption standard (AES) ciphersuites for transport layer security (TLS) (June 2002)

    Google Scholar 

  4. Dierks, T., Rescorla, E.: RFC 4346: The transport layer security (TLS) protocol version 1.1 (April 2006)

    Google Scholar 

  5. Eronen, P., Tschofenig, H.: RFC 4279: Pre-shared key ciphersuites for transport layer security (TLS) (December 2005)

    Google Scholar 

  6. Hohendorf, C., Rathgeb, E.P., Unurkhaan, E., Tüxen, M.: Secure end-to-end transport over SCTP. Journal of Computers 2(4), 31–40 (2007)

    Article  Google Scholar 

  7. Institute of Electrical and Electronic Engineers (IEEE). Amendment 6: Medium access control (MAC) security enhancements. IEEE Std 802.11i, July 23 (2004)

    Google Scholar 

  8. Jungmair, A., Rescorla, E., Tuexen, M.: RFC 3436: Transport layer security over stream control transmission protocol (December 2002)

    Google Scholar 

  9. Kaufman, C.: RFC4306: Internet key exchange (IKEv2) protocol (December 2005)

    Google Scholar 

  10. Kent, S.: RFC4302: IP authentication header (December 2005)

    Google Scholar 

  11. Kent, S.: RFC4303: IP encapsulating security payload (ESP) (December 2005)

    Google Scholar 

  12. Kent, S., Seo, K.: RFC 4301: Security architecture for the Internet protocol (December 2005)

    Google Scholar 

  13. Lindskog, S., Brunstrom, A.: An end-to-end security solution for SCTP. In: Proceedings of the Third International Conference on Availability, Reliability and Security (ARES 2008), Barcelona, Spain, March 4–7, 2008, pp. 526–531 (2008)

    Google Scholar 

  14. Medvinsky, A., Hur, M.: RFC 2712: Addition of Kerberos cipher suites to transport layer security (TLS) (October 1999)

    Google Scholar 

  15. National Institute of Standards and Technology (NIST). Secure hash standard (August 1, 2002), http://csrc.nist.gov/publications/fips/fips180-2/fips180-2.pdf

  16. OpenSSL homepage (November 30, 2007), http://www.openssl.org/

  17. Rescorla, E., Modadugu, N.: RFC 4347: Datagram transport layer security (April 2006)

    Google Scholar 

  18. Stewart, R.: RFC 4960: Stream control transmission protocol (September 2007)

    Google Scholar 

  19. Stewart, R., Ramalho, M., Xie, Q., Tuexen, M., Conrad, P.: RFC 3578: Stream control transmission protocol (SCTP) partial reliability extension (May 2004)

    Google Scholar 

  20. Stewart, R., Tuexen, M., Camarillo, G.: RFC 5062: Security attacks found against the stream control transmission protocol (SCTP) and current countermeasures (September 2007)

    Google Scholar 

  21. Stewart, R., Xie, Q., Tuexen, M., Maruyama, S., Kozuka, M.: RFC 5061: Stream control transmission protocol (SCTP) dynamic address reconfiguration (September 2007)

    Google Scholar 

  22. Stewart, R., Xie, Q., Yarroll, L., Poon, K., Tuexen, M.: Sockets API extensions for stream control transmission protocol (SCTP), draft-ietf-tsvwg-sctpsocket-15.txt (work in progress). Expires (January 10, 2008)

    Google Scholar 

  23. Tuexen, M., Stewart, R., Lei, P.: RFC 4820: Padding chunk and parameter for the stream control transmission protocol (SCTP) (March 2007)

    Google Scholar 

  24. Tuexen, M., Stewart, R., Lei, P., Rescorla, E.: RFC 4895: Authenticated chunks for stream control transmission protocol (SCTP) (August 2007)

    Google Scholar 

  25. Unurkhaan, E., Rathgeb, E.P., Jungmair, A.: Secure SCTP: A versatile secure transport protocol. Telecommunication Systems 27(2–4), 273–296 (2004)

    Article  Google Scholar 

Download references

Author information

Authors and Affiliations

  1. Centre for Quantifiable Quality of Service in Communication Systems, Norwegian University of Science and Technology, Trondheim, Norway

    Stefan Lindskog

  2. Department of Computer Science, Karlstad University, Sweden

    Anna Brunstrom

Authors
  1. Stefan Lindskog
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Anna Brunstrom
    View author publications

    You can also search for this author in PubMed Google Scholar

Editor information

Osvaldo Gervasi Beniamino Murgante Antonio Laganà David Taniar Youngsong Mun Marina L. Gavrilova

Rights and permissions

Reprints and permissions

Copyright information

© 2008 Springer-Verlag Berlin Heidelberg

About this paper

Cite this paper

Lindskog, S., Brunstrom, A. (2008). The Design and Message Complexity of Secure Socket SCTP. In: Gervasi, O., Murgante, B., Laganà, A., Taniar, D., Mun, Y., Gavrilova, M.L. (eds) Computational Science and Its Applications – ICCSA 2008. ICCSA 2008. Lecture Notes in Computer Science, vol 5073. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-69848-7_40

Download citation

  • DOI: https://doi.org/10.1007/978-3-540-69848-7_40

  • Publisher Name: Springer, Berlin, Heidelberg

  • Print ISBN: 978-3-540-69840-1

  • Online ISBN: 978-3-540-69848-7

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics

Search

Navigation