DMCA
Distributed detection of node replication attacks in sensor networks (2005)
Cached
Download Links
| Venue: | PROCEEDINGS OF THE IEEE SYMPOSIUM ON SECURITY AND PRIVACY |
| Citations: | 206 - 3 self |
BibTeX
@INPROCEEDINGS{Parno05distributeddetection,
author = {Bryan Parno and Adrian Perrig and Virgil Gligor},
title = {Distributed detection of node replication attacks in sensor networks},
booktitle = {PROCEEDINGS OF THE IEEE SYMPOSIUM ON SECURITY AND PRIVACY},
year = {2005},
pages = {49--63},
publisher = {IEEE}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
The low-cost, off-the-shelf hardware components in unshielded sensor-network nodes leave them vulnerable to compromise. With little effort, an adversary may capture nodes, analyze and replicate them, and surreptitiously insert these replicas at strategic locations within the network. Such attacks may have severe consequences; they may allow the adversary to corrupt network data or even disconnect significant parts of the network. Previous node replication detection schemes depend primarily on centralized mechanisms with single points of failure, or on neighborhood voting protocols that fail to detect distributed replications. To address these fundamental limitations, we propose two new algorithms based on emergent properties [17], i.e., properties that arise only through the collective action of multiple nodes. Randomized Multicast distributes node location information to randomly-selected witnesses, exploiting the birthday paradox to detect replicated nodes, while Line-Selected Multicast uses the topology of the network to detect replication. Both algorithms provide globally-aware, distributed node-replica detection, and Line-Selected Multicast displays particularly strong performance characteristics. We show that emergent algorithms represent a promising new approach to sensor network security; moreover, our results naturally extend to other classes of networks in which nodes can be captured, replicated and re-inserted by an adversary.
Keyphrases
sensor network node replication attack network security replicated node emergent property new approach algorithm provide globally-aware node-replica detection centralized mechanism previous node replication detection scheme randomly-selected witness line-selected multicast display severe consequence disconnect significant part neighborhood voting protocol node location information fundamental limitation off-the-shelf hardware component single point distributed replication network data strong performance characteristic strategic location birthday paradox unshielded sensor-network node line-selected multicast collective action new algorithm emergent algorithm represent little effort multiple node
