Confronting a mobile adversary in unattended sensor networks

ABSTRACT

Unattended sensor networks operating in hostile environments might collect data that represents a high-value target for the adversary. The unattended sensor's inability to off-load -- in real time -- sensitive data to a safe external entity makes it easy for the adversary to mount a focused attack aimed at eliminating or modifying certain offending data. In order to facilitate data survival, sensors must collectively attempt to confuse the adversary by changing the location and the representation of the data. Unfortunately, since the network is unattended most of the time, the adversary (even if it is limited in scale/scope of simultaneous compromise) has free reign and can move freely among sensors, compromising them at will.

A very similar "mobile adversary" model is quite well-known in cryptography, having spawned an entire line of research, called "proactive cryptography". However, the mobile adversary model has not been embraced by the security research community. This talk will address several flavors of the mobile adversary in the context of unattended sensor networks, discuss some viable and simple counter-measures (with varying degrees of effectiveness) and outline open problems and challenges.

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.3 Network Operations

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)
      C.2.1 Network Architecture and Design
          Subjects: Wireless communication

  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)

General Terms:
Design, Management, Security, Theory