Survey on Security Issues in Cognitive Radio Network <s> VI. COUNTERMEASURES & SOLUTIONS <s> Cognitive radio based IEEE 802.22 deploys the concept of maximum resource utilization through dynamic resource sharing. Inter base station resource sharing is dynamic process in IEEE 802.22 and is accomplished by exchange of control messages between the neighboring base stations. Insecure transmission of control channels open vulnerable holes for the denial of service attacks on base station. First the paper identifies the rogue base station and replay attacks during the resource sharing between the base stations that can snatch the resources from the renter base station. Then paper presents a hybrid approach of timestamp, nonce and digital signature to authenticate the sender and avoid the attacks. <s> BIB001 </s> Survey on Security Issues in Cognitive Radio Network <s> VI. COUNTERMEASURES & SOLUTIONS <s> Recent developments of wireless communication lead to the problem of growing spectrum shortage. Cognitive radio, as a novel technology, tends to solve this problem by dynamically utilizing the spectrum. Security in cognitive radio network becomes a challenging issue, since more chances are given to attackers by cognitive radio technology compared to general wireless network. These weaknesses are introduced by the nature of cognitive radio, and they may cause serious impact to the network quality of service. However, at present there are no specific secure protocols for cognitive radio networks. Motivated by this, the current state of art in security of cognitive radio network is reviewed in this paper. We focus on analyzing the security system at the macroscopic level, where both protection and detection are significant parts for ensuring security of the whole network. Special characteristics of cognitive radio network in different protocol layers are also investigated, such as physical layer, link layer, network layer, transport layer and application layer. <s> BIB002
The countermeasure of Rogue Base Station and the return attack. For succeed on those declared attacks, our research paper BIB001 proposed three constraints or strategies to secure the sharing of network; which are Digital Signature, Nonce and Timestamp. Time stamp help to prevent the replay attack. The mixture of data along with the time of dispatcher is the Time Stamp if these packets are newly generated then it is receive otherwise it is discarded. In nonce repeat packet is discarded so DoS and replay attacks can be eliminated. Digital Signatures are used to validate the dispatcher and for recognize the alternation of received packet. Applying DS built verification of the dispatcher is actual to escape the above mention attacks. In  author has proposed that LocDef arrangement authenticates either a given signal is that of an incumbent transmitter with the approximating of its position as well as detecting the signal features. LocDef could be helpful to remove or moderate some of the above-mentioned drawback. This scheme can eliminate the motivation of attacks. Malicious nodes could be thrown the undesirable packets on the channels to halt this undesirable packets  discuss the impression of flow control which could be initiated at MAC level with the inclusion of time limitation. Receiver describes the monitoring of Time Interval (TI) that is why the sender is unable to transmit the data regularly. If sender spreads the data on the high rate and receiver is receiving packet regularly its means that the mentioned TI and the receiver identify the misconduct by one point / node which spread the information about malicious node. The key point is to protecting beside IE threats is to develop any new technique which could able to handle these situations and for validating the genuineness of the incumbent signal. Paper  discusses the solution of IE attacks. One approach is a signature which is embedding in the incumbent signal. One more process is to work and verification procedure with incumbent transmitter and an authenticator. Two techniques are being used the first is DRT which is Distance Radio Test this use RSS which is received signal strength quantities gained from the location verifier (LV). Other technique is known as DDT which is distance difference test. This procedure is being used whenever the signals are being transmitted by a signal point to LVs, the virtual phase variance could be identified whenever the signal influences the two LVs because of opposing locations from the sender. Two prevent SSDF attack paper  proposed two level of defense. The first phase of all native spectrums deducting result must be validated from data collector. The main objective is to avoid the return attacks of untruthful data inoculation by the objects outside the networks. Second phase of protection is placement of data synthesis arrangement that is forceful with compare to attacks of SSDF. In case of policy attack paper  suggests that in cooperative policy can be freely exchanged and in non-cooperative nodes policy updates and renewals can require infrequent. Effective rules could be replaced freely and with selfassurance and kept for long time. It is difficult that attacker stops a CR even presence of some rules and regulations. Paper  elaborates that without the knowledge of policy attacker can use different funny and obvious techniques to suppose about policy. This comes into picture that the radio rule and regulations should be carefully check and validated to defend against the threats. To improvement against learning, parameters and spectrum management threats paper  present a solution robust sensory input and mitigation in Network. In vigorous sensory the data entry educating sensor, input can be considerably in helping in reduction of the acceptance of CR. In scattered situation the network of CR can fuses sensor data to increase throughput. All sensor contribution would consider noisy with or without the occurrence of attackers, statistic can sometimes incorrect. Author of the paper  defends against the common control channel use a robust coding of different spread spectrum. The schemes of the media access would be vigorous which could provide the fair access of data on the network. This fairness had to be brought around by the multiple layers and the simple access arrangements which should have focus on the control channels for which the need is preferable. In Key management infrastructure the security sub layer didn't resolve the issues of inter-cell key management. Whereas the sub layer comprises with PKM protocol, this protocol can handle the intra-cell solutions which didn't allow the rations to care the administration of inter-cell solutions. The workable method for planning of inter-cell solution is to operate the backhaul substructure which would be able to interconnect many WRANs. These are linked for ACR via backhaul stations. If a common backhaul infrastructure amongst cells is not available the scattered significant organization system is required over there. For these types of arrangements 802.22 BSs helpfully operate a disseminated algorithm for inter-cell managements. Key management scheme is in two types; one is contributory while the other is distributive. Contributory group is well-defined for incorporate scheme as an output of joint struggle of different points / nodes. The distributive group contains arrangements there all important invents by one nodes  . Paper  discusses related arrangements, not reliable third party who is accountable for the generation and circulation of the cryptographic keys. And in the scattered arrangements all the nodes produces a unique key and issues it to the others nodes of the network. In BIB002 author has proposed that Physical layer attacks. Jamming of signals can be prevented by spread spectrum scheme. Scrambling is another Physical layer attack that can be a countermeasure for monitoring and deducting of system anomalies. Second and secure is MAC layer that uses X.509 certificate for authentication mechanism between Mobile Station (MS) and BS. X.509 certificate holds the Public Key (PK) of MS. Another attack which has been identified is rogue BS. Its countermeasure is done by joint verification at user-network level. Mutual Authentication can be performed after scanning, achievement of channel explanation as well as reaching and competence concession which are built on EAP with specific authentication method as EAP-Transport Layer Security BIB002 .