Type Flaw Attacks and Prevention in Security Protocols

A type flaw attack on a security protocol is an attack where a field that was originally intended to have one type is subsequently interpreted as having another type. In the paper, we describe some typical examples of type flaw attack and give a type flaw attack that was found on the GDOI protocol. We then analyze the limitations of recent tagging technique of preventing type flaw attack. Finally, a method against type flaw attack by checking the length of message is proposed.