Preprint

Hacking Health Level 7 Protocol: a man-in-the-middle proof of concept attack (Preprint)

April 2020

DOI:10.2196/preprints.19335

Authors:

University of Massachusetts Medical School - Baystate

Show all 5 authorsHide

Preprints and early-stage research may not have been peer reviewed yet.

UNSTRUCTURED Health Level 7 (HL7) is a ubiquitous protocol in healthcare infrastructure, used to interface a variety of systems. HL7 lacks encryption at the level of the protocol, and is thus vulnerable to attacks that modify message contents. We describe a sophisticated man-in-the-middle attack that injects misinformation into clinical workflow that can cause patient harm.

ResearchGate has not been able to resolve any citations for this publication.

ResearchGate has not been able to resolve any references for this publication.

Conference Paper

Full-text available

A Proof of Concept Attack against Norwegian Internet Banking Systems

January 2008 · Lecture Notes in Computer Science

The banking industry in Norway has developed a new security infrastructure for conducting commerce on the Internet. The initiative, called BankID, aims to become a national ID infrastructure supporting services such as authentication and digital signatures for the entire Norwegian population. This paper describes a practical man-in the- middle attack against online banking applications using ... [Show full abstract] BankID. The attack gives an adversary access to customer bank accounts in two different online banking systems. Proof of concept code has been developed and executed to demonstrate the seriousness of the problem.

Article

Full-text available

IC-MADS: IoT Enabled Cross Layer Man-in-Middle Attack Detection System for Smart Healthcare Applicat...

July 2020 · Wireless Personal Communications

Smart healthcare is one of the core applications of the Internet of Things (IoT) technology in which the body sensors capture the patient's periodic data and transmit seamlessly over the wireless communications to remote monitoring stations. Due to the open nature of wireless communications, privacy-preserving and security are the biggest concern for IoT enabled healthcare systems. Several ... [Show full abstract] trust-based and cryptography-based solutions proposed to achieve the privacy-preserving and data security, however, such layered solutions failed to address the cross-layer attacks such as Man-in-Middle Attack (MIMA). Thus we believe that cross-layer attack detection methods achieve effective protection against such attacks. This paper proposed the novel lightweight cross-layer trust computation algorithm for MIMA attacker detection called IC-MADS. The IC-MADS consists of two main contributions such as energy-efficient clustering and cross-layer attack detection. The clustering algorithm proposed for optimal Cluster Head (CH) selection using the probability computation and evaluation approach. Each sensor node probability is computed using the parameters like residual energy, distance to Base Station, and node degree parameters. The node with a higher probability value becomes the CH. This solves the energy imbalance and load balancing problems. The cross-layer trust evaluation approach introduced node evaluation to detect the MIMA attackers in the network. The trust computation of each node is performed by using the sensor nodes parameters across the different layers such as network, physical, and MAC layers. The aggregate trust value of each sensor node is then compared with the threshold value to check whether the node is an attacker. The simulation results prove that IC-MADS achieves better protection against MIMA attacks with minimum overhead and energy consumption.

Conference Paper

Full-text available

Man-In-Middle Attack/for a Free Scale Topology

January 2018

Article

Full-text available

Improved Authentication in Secured Multicast Wireless Sensor Network (MWSN) Using Opposition Frog Le...

March 2022 · Wireless Personal Communications

Wireless Sensor Networks (WSNs) in modern times enables security techniques to secure the information transmitted via the interconnected network. The poor security services in WSN environment erupts to more attacks and misbehavior of nodes. Hence, it requires an effective security mechanism that should avoid the degradation of network performance with security flaws. In these regards, the sensor ... [Show full abstract] node authentication becomes critical with increased attacks and threats, and with increasing communication between the sensor nodes. Hence, the complexity associated with security protocols increases and that enables the networks to misbehave. In this paper, we design a light-weight authentication mechanism using a dual topology in multicast WSNs. It is the authentication is improved using EdDS Algorithm (EdDSA) with an XOR functionality. Finally, the uncertainty in choosing the misbehaving nodes for further communication is optimally found by a theoretical game model. This avoids the illegitimate access of non-malicious nodes in multicast environment, while it ensures fastest authentication. In this way, the authentication of the nodes in the network is tested and validated against man-in-middle attack. The simulation results show that the proposed EdDSA-XOR functionality has 0.13% and 0.07% of reduced time consumption and reduced energy consumption, respectively than other methods.

Last Updated: 09 Dec 2024