Specification-based intrusion detection system for WiBro

Abstract

WiBro (Wireless Broadband), the service based on the IEEE 802.16e (mobile WiMAX) standard, is a wireless broadband Internet technology developed by the South Korean telecommunications industry. In this paper, we analyze security vulnerabilities of the WiBro standard, focusing on the initial authentication phase and propose a specification-based intrusion detection system that can detect those vulnerabilities. We first derive specifications from the normal operational process of the initial authentication based on PKMv2 EAP-AKA and formalize the derived specifications as a state transition diagram. The proposed system executes the intrusion detection based on those specifications and the state transition diagram. In this paper, to verify the detection capability of the proposed system, we construct an experimental network and execute scenario-based tests. © 2011 Springer-Verlag.