Citation Context

.... We do not require the presence of any remote code update protocols, such as Deluge. However, if such a protocol is available, we assume that it is secure, i.e., the updated images are authenticated =-=[9, 17, 18, 19]-=-. Otherwise, the code update mechanism could be trivially exploited by an attacker to perform code injection. 3. ON THE DIFFICULTY OF EXPLOITING A SENSOR NODE Traditional buffer overflow attacks usual...

Citation Context

... by using Merkle hash trees and hash chains to authenticate the code distribution [4]. By leveraging authenticated streams, Dutta et al. secured Deluge, the de facto TinyOS network programming system =-=[7]-=-. However, these protocols only solve one half of the secure code update problem: how can the receiver authenticate code updates from the base station. In this paper, we solve the other half: how can ...

Citation Context

...ntegrity since attackers can easily change the update in ways that are undetectable by the CRC mechanism. The developers of Deluge have recently and independently proposed an approach similar to ours =-=[4]-=-. Both approaches allow for the incremental verification of updates through the use of digital signatures and hash-chains. The primary difference is the granularity of the chaining mechanism. While we...

Citation Context

...odes to verify and/or forward them, thus exhausting their limited battery power. 1.1 Related Work Several recent works have attempted to provide secure code dissemination for wireless sensor networks =-=[8,10,17]-=-. All these approaches are extensions to Deluge [13]. Lanigan et al. proposed a protocol named Sluice [17] to integrate signature and cryptographic hash functions to provide efficient authentication f...

Citation Context

...ocols [13] enable application users to program and reprogram WSNs easily, it also opens the door for unauthorized users to implant malicious code into the WSN. Dutta et al. attempt to secure the MOAP =-=[7]-=- by introducing program authenticity and integrity with a cut-down version of software-based RSA PKC similar to TinyPK [22]. As in TinyPK, the security levels of RSA cryptography will be compromised b...

Citation Context

...cipher. This key is generated on the development computer, which is assumed to have a good random number generator. This may lead to problems with large scale code distribution systems such as deluge =-=[5]-=-: all nodes will be remotely programmed with the same initial state. Therefore, before deployment of such a large scale network, a seeding phase is performed with a dedicated program image. This image...

Citation Context

...d of packets sent and received by the motes. Moreover, due to memory constrains in the motes, these values need to be stored and loaded from the EEPROM, which is a very energy consuming operation. In =-=[4]-=- the use of a reverse hash chain computed over the program pages is also used, as in [2] and in our scheme. However the authors use the RSA digital signature scheme for signature verification at the m...

Citation Context

...f their state (e.g., location and available hardware sensors) to facilitate better planning of tasks. Earlier research on “retasking” static sensor networks has netted secure solutions such as Deluge =-=[15]-=- and Sluice [35]. It is unclear, however, if these solutions are applicable under the mobile paradigm where sensors are owned and operated by many different parties. How can the sensor be sure that th...

Citation Context

...r mobile-agent middleware [18] can be employed. Code authenticity and integrity can be ensured at a minimal energy cost incurred by the nodes using a finite-stream signing technique, adopted for WSNs =-=[19]-=-. To patch a bug in the application, a secure highthroughput network reprogramming protocol [20,19] can be employed. Here, we concentrate on a core aspect — the architectural support for extending an ...