Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I understand what a replay attack is, but I keep reading about a pre-play attack. What is it? Is it when someone intercepts an unused message and blocks the sender so they can't finish using it, and then the interceptor tries to "play" the message as if they were the original sender?

edit:

sorry, for some reason it was cut off.

share|improve this question
    
Question is unfinished. –  sdanelson Dec 10 '10 at 2:47
    
oops, thanks for noticing, it had gotten cut off. –  Google Dec 10 '10 at 2:57
    
You're welcome. –  sdanelson Dec 10 '10 at 3:00
add comment

2 Answers

up vote 8 down vote accepted

Computer-Related Risks by Peter G. Neumann classes preplay attacks as part of the "Playback attacks" category of risks and defines it as "preplay of a not-yet used message", to help understand this a little more I have included two real world examples.

Web Application example; I would argue that a CSFR (Cross-site request forgery) attack is a form of preplay as you do not have to capture the user’s traffic, but instead are using their own session to play a valid sequence of activity.

Kerberos example; An example of this would be if the attacker were able to compute a valid response to a kerberos challenge and send the expected reply before the real user. This could result in the attacker gaining access to the server within the context of the valid user’s rights.

So a pre-play attack is where an attacker is able to guess or compute a valid response to and send the reply before the valid user can. It is different to a replay attack, where the attacker would capture the whole challenge and be able to replay at a later stage.

share|improve this answer
    
Thanks, that makes sense. –  Google Dec 10 '10 at 19:29
add comment

You can look for some information about preplay in book Protocols for Authentication and Key Establishment (page with preplay mentioned here). One example of preplay is Burmester triangle attack - unfortunately I didn't find much information about that.

Edit - quote from the book:

Preplay might be regarded as a natural extension of replay, although it is not clear that this is really an attack that can be useful on its own. An interesting example of an attack that employs preplay is so-called triangle attack of Burmester which will be presented in Chap. 5

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.