# Evaluation of Resource Exhaustion Attacks against Wireless Mobile Devices
## 2 Related Work  
Nowadays development of battery-related technologies fails to keep up with rapidly improving communication/computing tools significantly. This fact as well as the expansion of various business functionalities consuming increasing energy resources determine the importance and critical nature of energy-based attacks [22] that modern mobile and autonomous electronic devices are exposed to. Moreover, attacks reducing energy can be performed, in particular, by forced activation of defenses against other types of attacks on devices, successfully preventing them by consuming additional energy. In this paper we focus mainly on attacks against personal mobile devices and nodes of autonomous sensor networks, while energy attacks against large-scale computing, in particular, cloud systems, when an intruder absorbs large megawatts [5] lie beyond the scope of this study. Along with traditionally regarded attacks on the violation of confidentiality, integrity, availability and their derivatives, energy resource exhaustion attacks are singled out as well. In [23] the results of efforts to discover the causes of improper use of the battery of mobile devices are presented. Specifically a method of revealing faulty process and decreasing the resource consumption of the battery by suspending or postponing doubtful actions is proposed. The tracking process is performed up to restoration of regular battery consumption. As a rule, the first step of energy exhaustion attacks is exploitation of some communication interface of the victim device. In particular, an intruder can mount energy exhaustion attacks by impacting transport layer protocols, which will make it impossible for the victim device to pass into a low power mode [6; 24]. Such an attack is called denial-of-sleep and is aimed at preventing the device from passing from a full-featured mode to a limited-mode operation of reduced power consumption (i.e., sleep mode) [7; 16; 20]. In contrast to the denial-of-service and quality of service (QoS) degradation attacks, [PERSON] and [PERSON] [16] justify the complexity and inefficiency of using traditional intrusion detection approaches and tools in relation to the tasks of identifying energy depletion attacks. Specifically, in [16] energy depletion attacks targeted on isolated sensors of wire-less sensor networks are regarded. In particular, [PERSON] and [PERSON] show the feasibility of this type of attacks as well as evaluate such attacks and ways to counter them in the scenario of flood attacks by using continuous time Markov chains. [PERSON], et al. [13] examine some ERE attacks on wireless interfaces of Wi-Fi and Bluetooth as well as some combined attacks to analyze their influence on the battery-life period. The consequences of attacks on the battery drain in mobile devices are analyzed, having simulated particular attacks accelerating the depletion of the battery to the maximum of 18.5%. [PERSON], et al. [14] propose a Battery-Sensing Intrusion Protection System (B-SIPS) against the depletion of batteries for mobile computers. The system warns about the change of power of detected attacks on small wireless devices, using the algorithm for dynamic threshold calculation. B-SIPS nodes are used as sensors in a wireless network and construct the basis of the intrusion detection system. B-SIPS implements the correlation of the power consumption of devices with widespread wireless interfaces. The papers [12; 25] address denial of sleep attacks. [PERSON], et al. [12] propose a mechanism to create an intermediate level for effective protection against attacks on the exhaustion of the battery at the crossing of the physical and data link layers [13]. In particular, they analyze the following types of attacks: sleep deprivation, barrage, replay, broadcast, collision and synchronization attacks. [PERSON], et al. [15] present the realization of a battery exhaustion effect by using vulnerabilities of multimedia messaging service (MMS) packets of mobile devices.