MS-PTP: Protecting Network Timing from Byzantine Attacks
MS-PTP: Protecting Network Timing from Byzantine Attacks
复制标题
MS-PTP：保护网络时序免受拜占庭攻击
DOI：
10.1145/3558482.3590184
复制
发表时间：
2023
期刊：
影响因子：
--
通讯作者：
Lou, Wenjing
中科院分区：
文献类型：
--
作者：
Shi, Shanghao;Xiao, Yang;Du, Changlai;Shahriar, Md Hasan;Li, Ao;Zhang, Ning;Hou, Y. Thomas;Lou, Wenjing
5G、物联网等时间敏感型应用对网络时间同步的安全性和可靠性要求越来越高。精确时间协议（PTP）是实现高精度时间同步的实际解决方案。它被许多行业广泛采用。现有的保护PTP的努力集中在保护通信渠道上，但很少关注恶意内部人员的威胁。在本文中，我们首先介绍了PTP的安全漏洞，并讨论了为什么当前的防御机制无法对抗拜占庭内部人员。我们演示了恶意内部人员如何欺骗时间源以任意改变IoT测试平台上受害节点的系统时间。我们进一步展示了攻击在真实的Turtlebot3机器人平台上造成的有害后果，因为机器人无法定位自己并遵循错误的轨迹。作为对策，我们提出了多源PTP，简称MS-PTP，一种基于时间众包的拜占庭弹性网络时间同步机制。MS-PTP将当前PTP的单源层次结构改变为多源客户机-服务器体系结构，在该体系结构中，PTP客户机接收来自多个时间服务器的响应，并应用一种新颖的安全聚合方案来消除来自不可靠源的恶意响应的影响。当客户端使用的时间源总数n满足n>=3f+1时，MS-PTP能够对抗f拜占庭故障。我们为其非参数精度保证提供了严格的证明-无论拜占庭人口如何实现有界误差。我们在物联网测试平台上实现了MS-PTP的原型，结果显示其对拜占庭内部人员的弹性，同时保持了高同步精度。
Time-sensitive applications, such as 5G and IoT, are imposing increasingly stringent security and reliability requirements on network time synchronization. Precision time protocol (PTP) is a de facto solution to achieve high precision time synchronization. It is widely adopted by many industries. Existing efforts in securing the PTP focus on the protection of communication channels, but little attention has been given to the threat of malicious insiders. In this paper, we first present the security vulnerabilities of PTP and discuss why the current defense mechanisms are unable to counter Byzantine insiders. We demonstrate how a malicious insider can spoof a time source to arbitrarily shift the system time of a victim node on an IoT testbed. We further demonstrate the harmful consequence of the attack on a real Turtlebot3 robotic platform as the robot fails to locate itself and follows a false trajectory. As a countermeasure, we propose multi-source PTP, in short, MS-PTP, a Byzantine-resilient network time synchronization mechanism that relies on time crowdsourcing. MS-PTP changes the current PTP's single source hierarchy to a multi-source client-server architecture, in which PTP clients take responses from multiple time servers and apply a novel secure aggregation scheme to eliminate the effect of malicious responses from unreliable sources. MS-PTP is able to counter f Byzantine failures when the total number of time sources n used by a client satisfies n>=3f+1. We provide rigorous proof for its non-parametric accuracy guarantee---achieving bounded error regardless of the Byzantine population. We implemented a prototype of MS-PTP on our IoT testbed and the results show its resilience against Byzantine insiders while maintaining high synchronization accuracy.
网络时间安全
DOI：
--
发表时间：
2016
期刊：
影响因子：
--
作者：
D. Franke
通讯作者：
D. Franke
IEEE 1588：标准及其应用的更新
DOI：
--
发表时间：
2006
期刊：
影响因子：
--
作者：
J. Eidson
通讯作者：
J. Eidson