Secure time synchronization service for sensor networks”, (2005)

by S Ganeriwal, S Capkun, C-C Han, M B Srivastava
Venue:In Proceedings of the 4th ACM Workshop on Wireless Security,
Add To MetaCart
Results 1 - 10 of 74

MiniSec: a secure sensor network communication architecture

by Mark Luk, Ghita Mezzour, Adrian Perrig, Virgil Gligor - IN PROC. OF THE 6TH INT’L CONF. ON INFORMATION PROCESSING IN SENSOR NETWORKS , 2007
"... Secure sensor network communication protocols need to provide three basic properties: data secrecy, authentication, and replay protection. Secure sensor network link layer protocols such as Tiny-Sec [13] and ZigBee [28] enjoy significant attention in the community. However, TinySec achieves low ener ..."
Abstract - Cited by 78 (1 self) - Add to MetaCart
Secure sensor network communication protocols need to provide three basic properties: data secrecy, authentication, and replay protection. Secure sensor network link layer protocols such as Tiny-Sec [13] and ZigBee [28] enjoy significant attention in the community. However, TinySec achieves low energy consumption by reducing the level of security provided. In contrast, ZigBee enjoys high security, but suffers from high energy consumption. MiniSec is a secure network layer that obtains the best of both worlds: low energy consumption and high security. MiniSec has two operating modes, one tailored for single-source communication, and another tailored for multi-source broadcast communication. The latter does not require per-sender state for replay protection and thus scales to large networks. We present a publicly available implementation of MiniSec for the Telos platform, and experimental results demonstrate our low energy utilization.

Least privilege and privilege deprivation: Towards tolerating mobile sink compromises in wireless sensor networks

by Hui Song, Sencun Zhu, Wensheng Zhang, Guohong Cao - in Proceedings of ACM Mobihoc , 2005
"... Mobile sinks are needed in many sensor network applications for efficient data collection, data querying, localized sensor reprogramming, identifying, and revoking compromised sensors, and other network maintenance. Employing mobile sinks however raises a new security challenge: if a mobile sink is ..."
Abstract - Cited by 46 (3 self) - Add to MetaCart
Mobile sinks are needed in many sensor network applications for efficient data collection, data querying, localized sensor reprogramming, identifying, and revoking compromised sensors, and other network maintenance. Employing mobile sinks however raises a new security challenge: if a mobile sink is given too many privileges, it will become very attractive for attack and compromise. Using a compromised mobile sink, an adversary may easily bring down or even take over the sensor network. Thus, security mechanisms that can tolerate mobile sink compromises are essential. In this article, based on the principle of least privilege, we first propose an efficient scheme to restrict the privilege of a mobile sink without impeding its ability to carry out any authorized operations for an assigned task. In addition, we present an extension to allow conditional trajectory change due to unexpected events. To further reduce the possible damage caused by a compromised mobile sink, we propose efficient message forwarding schemes for deleting the privilege assigned to a compromised mobile sink immediately after its compromise has been detected. Through detailed

Applying intrusion detection systems to wireless sensor networks

by Rodrigo Roman - in CCNC 2006: Proceeding of the 3rd IEEE Consumer Communications and Networking Conference , 2006
"... is a mature area in wired networks, and has also attracted many attentions in wireless ad hoc networks recently. Nevertheless, there is no previous work reported in the literature about IDS architectures in wireless sensor networks. In this paper, we discuss the general guidelines for applying IDS t ..."
Abstract - Cited by 37 (2 self) - Add to MetaCart
is a mature area in wired networks, and has also attracted many attentions in wireless ad hoc networks recently. Nevertheless, there is no previous work reported in the literature about IDS architectures in wireless sensor networks. In this paper, we discuss the general guidelines for applying IDS to static sensor networks, and introduce a novel technique to optimally watch over the communications of the sensors ’ neighborhood on certain scenarios.
(Show Context)

Secure and resilient clock synchronization in wireless sensor networks

by Kun Sun, Peng Ning, Cliff Wang - In IEEE J. Selected Area Comm
"... Abstract—Wireless sensor networks have received a lot of attention recently due to its wide applications. An accurate and synchronized clock time is crucial in many sensor network applications. Several clock synchronization schemes have been proposed for wireless sensor networks recently to address ..."
Abstract - Cited by 35 (1 self) - Add to MetaCart
Abstract—Wireless sensor networks have received a lot of attention recently due to its wide applications. An accurate and synchronized clock time is crucial in many sensor network applications. Several clock synchronization schemes have been proposed for wireless sensor networks recently to address the resource constraints in such networks. However, most of these techniques assume benign environments, but cannot survive malicious attacks in hostile environments, especially when there are compromised nodes. As an exception, a recent work attempts to detect malicious attacks against clock synchronization, and aborts when an attack is detected. Though this approach can prevent incorrect clock synchronization due to attacks, it will lead to denial of clock synchronization in such situations. This paper adopts a model where all the sensor nodes synchronize their clocks to a common source, which is assumed to be well
(Show Context)

Time synchronization attacks in sensor networks

by Tanya Roosta, Mike Manzo, Shankar Sastry - in SASN ’05: Proceedings of the 3rd ACM workshop on Security of , 2005
"... In this chapter, we review time synchronization attacks in wireless sensor networks. We will first consider three of the main time synchronization protocols in sensor network in sections. In section we discuss applications of time synchronization in sensor networks. In section we analyze possible se ..."
Abstract - Cited by 35 (3 self) - Add to MetaCart
In this chapter, we review time synchronization attacks in wireless sensor networks. We will first consider three of the main time synchronization protocols in sensor network in sections. In section we discuss applications of time synchronization in sensor networks. In section we analyze possible security attacks on the existing time synchronization protocols. In section we examine how different sensor network applications are affected by time synchronization attacks. Finally in section we propose possible countermeasures to secure the time synchronization protocols. 1
(Show Context)

Detecting selective forwarding attacks in wireless sensor networks

by Bo Yu, Bin Xiao - in Parallel and Distributed Processing Symposium, 2006. IPDPS 2006. 20th International , 2006
"... Selective forwarding attacks may corrupt some missioncritical applications such as military surveillance and forest fire monitoring. In these attacks, malicious nodes behave like normal nodes in most time but selectively drop sensitive packets, such as a packet reporting the movement of the opposing ..."
Abstract - Cited by 28 (0 self) - Add to MetaCart
Selective forwarding attacks may corrupt some missioncritical applications such as military surveillance and forest fire monitoring. In these attacks, malicious nodes behave like normal nodes in most time but selectively drop sensitive packets, such as a packet reporting the movement of the opposing forces. Such selective dropping is hard to detect. In this paper, we propose a lightweight security scheme for detecting selective forwarding attacks. The detection scheme uses a multi-hop acknowledgement technique to launch alarms by obtaining responses from intermediate nodes. This scheme is efficient and reliable in the sense that an intermediate node will report any abnormal packet loss and suspect nodes to both the base station and the source node. To the best of our knowledge, this is the first paper that presents a detailed scheme for detecting selective forwarding attacks in the environment of sensor networks. The simulation results show that even when the channel error rate is 15%, simulating very harsh radio conditions, the detection accuracy of the proposed scheme is over 95%. 1.
(Show Context)

SecNav: Secure Broadcast Localization and Time Synchronization in Wireless Networks (Extended Abstract)

by Srdjan Capkun, Kasper Bonne, Mario Cagalj - IN PROCEEDINGS OF THE ACM/IEEE INTERNATIONAL CONFERENCE ON MOBILE COMPUTING AND NETWORKING (MOBICOM , 2007
"... We propose SecNav, a new protocol for securing wireless navigation systems. This protocol secures localization and time-synchronization in wireless networks by relying on devices’ awareness of presence in the power-range (coverage area) of navigation stations. We perform a detailed security analysis ..."
Abstract - Cited by 24 (5 self) - Add to MetaCart
We propose SecNav, a new protocol for securing wireless navigation systems. This protocol secures localization and time-synchronization in wireless networks by relying on devices’ awareness of presence in the power-range (coverage area) of navigation stations. We perform a detailed security analysis of SecNav and we show that, compared to existing secure navigation approaches, it prevents the widest range of attacks on navigation.
(Show Context)

PANEL: Position-based Aggregator Node Election in Wireless Sensor Networks

by Levente Buttyán, et al.
"... In this paper, we introduce PANEL, a position-based aggregator node election protocol for wireless sensor networks. The novelty of PANEL with respect to other aggregator node election protocols is that it supports asynchronous sensor network applications where the sensor readings are fetched by the ..."
Abstract - Cited by 20 (2 self) - Add to MetaCart
In this paper, we introduce PANEL, a position-based aggregator node election protocol for wireless sensor networks. The novelty of PANEL with respect to other aggregator node election protocols is that it supports asynchronous sensor network applications where the sensor readings are fetched by the base stations after some delay. In particular, the motivation for the design of PANEL was to support reliable and persistent data storage applications, such as TinyPEDS [13]. PANEL ensures load balancing, and it supports intraand inter-cluster routing allowing sensor to aggregator, aggregator to aggregator, base station to aggregator, and aggregator to base station communications. We also compare PANEL with HEED [42] in the simulation environment provided by TOSSIM, and show that, on the one hand, PANEL creates more cohesive clusters than HEED, and, on the other hand, that PANEL is more energy efficient than HEED.

Emergent properties: detection of the node-capture attack in mobile wireless sensor networks

by Mauro Conti, Roberto Di Pietro, Luigi V. Mancini, Alessandro Mei - in 1st ACM Conference on Wireless Network Security (WISEC’08
"... One of the most vexing problems in wireless sensor network security is the node capture attack. An adversary can cap-ture a node from the network as the first step for further different types of attacks. For example, the adversary can collect all the cryptographic material stored in the node. Also, ..."
Abstract - Cited by 20 (6 self) - Add to MetaCart
One of the most vexing problems in wireless sensor network security is the node capture attack. An adversary can cap-ture a node from the network as the first step for further different types of attacks. For example, the adversary can collect all the cryptographic material stored in the node. Also, the node can be reprogrammed and re-deployed in the network in order to perform malicious activities. To the best of our knowledge no distributed solution has been proposed to detect a node capture in a mobile wireless sensor net-work. In this paper we propose an efficient and distributed solution to this problem leveraging emergent properties of mobile wireless sensor networks. In particular, we introduce two solutions: SDD, that does not require explicit informa-tion exchange between the nodes during the local detection,
(Show Context)

Towards intrusion detection in wireless sensor networks

by Ioannis Krontiris, Tassos Dimitriou, Felix C. Freiling - IN PROC. OF THE 13TH EUROPEAN WIRELESS CONFERENCE , 2007
"... Abstract — In this work we study the problem of Intrusion Detection is sensor networks and we propose a lightweight scheme that can be applied to such networks. Its basic characteristic is that nodes monitor their neighborhood and collaborate with their nearest neighbors to bring the network back to ..."
Abstract - Cited by 17 (2 self) - Add to MetaCart
Abstract — In this work we study the problem of Intrusion Detection is sensor networks and we propose a lightweight scheme that can be applied to such networks. Its basic characteristic is that nodes monitor their neighborhood and collaborate with their nearest neighbors to bring the network back to its normal operational condition. We emphasize in a distributed approach in which, even though nodes don’t have a global view, they can still detect an intrusion and produce an alert. We apply our design principles for the blackhole and selective forwarding attacks by defining appropriate rules that characterize malicious behavior. We also experimentally evaluate our scheme to demonstrate its effectiveness in detecting the afore-mentioned attacks. I.