Security Requirements in
Wireless and Mobile
Communications
Cont..
Security requirements in wireless and mobile
communication are critical due to the open
and dynamic nature of wireless networks,
which are more susceptible to various types of
attacks compared to wired networks.
Below are the key security
requirements in this domain:
1. Authentication
Ensures that users and devices are who they
claim to be.
Prevents unauthorized access.
Methods: SIM-based authentication (GSM,
LTE), certificates, two-factor authentication.
Cont..
2. Confidentiality
Protects data from being accessed by
unauthorized parties.
Achieved through encryption of data (e.g.,
AES, TLS, IPsec).
Ensures secure communication over the air.
Cont..
3. Integrity
Ensures that data has not been altered during
transmission.
Uses message authentication codes (MACs) or
hash functions (e.g., SHA-256).
Prevents tampering or modification of
messages.
Cont..
4. Availability
Ensures that services are accessible when
needed.
Protects against Denial of Service (DoS) and
Distributed DoS (DDoS) attacks.
Requires redundancy, traffic filtering, and
network resilience mechanisms.
Cont..
5. Non-repudiation
Ensures that a sender cannot deny having
sent a message.
Important for legal and forensic purposes.
Implemented through digital signatures and
secure logging.
Cont..
6. Anonymity and Privacy
Protects user identity and location information.
Critical in mobile communications due to
tracking risks.
Uses techniques like pseudonyms, temporary
identifiers, and private authentication.
Cont..
7. Access Control
Restricts access to network resources based
on user identity and role.
Involves authorization mechanisms.
Often implemented through AAA frameworks
(Authentication, Authorization, Accounting).
Cont..
8. Secure Handover
Ensures secure transitions between network
cells (e.g., during roaming).
Critical in mobile environments to prevent
session hijacking.
Cont..
9. Key Management
Secure generation, distribution, and storage of
cryptographic keys.
Must be scalable and efficient in mobile environments.
10. Physical Security
Protects mobile devices from theft or unauthorized
physical access.
Involves biometric locks, hardware encryption, and
secure boot.
Class work: Describe who is
responsible for each
requirement