A practical secure neighbor verification protocol for wireless sensor networks

ABSTRACT

Wireless networking relies on a fundamental building block, neighbor discovery (ND). The nature of wireless communications, however, makes attacks against ND easy: An adversary can simply replay or relay (wormhole) packets across the network and mislead disconnected nodes into believing that they communicate directly. Such attacks can compromise the overlying protocols and applications. Proposed methods in the literature seek to secure ND, allowing nodes to verify they are neighbors. However, they either rely on specialized hardware or infrastructure, or offer limited security. In this paper, we address these problems, designing a practical and secure neighbor verification protocol for constrained Wireless Sensor networks (WSNs). Our scheme relies on estimated distance between nodes and simple geometric tests, and it is fully distributed. We prove our protocol is secure against the classic 2-end wormhole attack. Moreover, we provide a proof-of-concept implementation with off-the-shelf WSN equipment: Cricket motes.

REFERENCES

• 1: H. Alzaid, S. Abanmi, S. Kanhere, and C. T. Chou. Detecting wormhole attacks in wireless sensor networks. Technical Report, Computer Science and Engineering School -- UNSW, The Network Research Laboratory, 2006.
• 2: L. Buttyán, L. Dóra, and I. Vajda. Statistical wormhole detection in sensor networks. In R. Molva, G. Tsudik, and D. Westhoff, editors, ESAS, volume 3813 of Lecture Notes in Computer Science, pages 128--141. Springer, 2005.
• 3: Jakob Eriksson , Srikanth Krishnamurthy , Michalis Faloutsos, TrueLink: A Practical Countermeasure to the Wormhole Attack in Wireless Networks, Proceedings of the Proceedings of the 2006 IEEE International Conference on Network Protocols, p.75-84, November 12-15, 2006 [doi>10.1109/ICNP.2006.320200]
• 4: L. Hu and D. Evans. Using directional antennas to prevent wormhole attacks. In Symposium on Network and Distributed Systems Security (NDSS), 2004.
• 5: Y.-C. Hu, A. Perrig, and D. B. Johnson. Packet leashes: A defense against wormhole attacks in wireless ad hoc networks. In IEEE INFOCOM, 2003.
• 6: P. Levis, S. Madden, J. Polastre, R. Szewczyk, K. Whitehouse, A. Woo, D. Gay, J. Hill, M. Welsh, E. Brewer, and D. Culler. Tinyos: An operating system for sensor networks. In Ambient Intelligence. 2005.
• 7: R. Maheshwari, J. Gao, and S. R. Das. Detecting wormhole attacks in wireless networks using connectivity information. In IEEE Conference on Computer Communications INFOCOM, 2007.
• 8: Miklós Maróti , Branislav Kusy , Gyula Simon , Ákos Lédeczi, The flooding time synchronization protocol, Proceedings of the 2nd international conference on Embedded networked sensor systems, November 03-05, 2004, Baltimore, MD, USA [doi>10.1145/1031495.1031501]
• 9: F. Nait-Abdesselam, B. Bensaou, and T. Taleb. Detecting and avoiding wormhole attacks in wireless ad hoc networks. Communications Magazine, IEEE, 46(4), April 2008.
• 10: P. Papadimitratos and Z. Haas. Secure Data Communication in Mobile Ad Hoc Networks. IEEE JSAC, Special Issue on Security in Wireless Ad Hoc Networks, 24(2):343--356, 2006.
• 11: Radha Poovendran , Loukas Lazos, A graph theoretic framework for preventing the wormhole attack in wireless ad hoc networks, Wireless Networks, v.13 n.1, p.27-59, January 2007 [doi>10.1007/s11276-006-3723-x]
• 12: Marcin Poturalski , Panos Papadimitratos , Jean-Pierre Hubaux, Secure neighbor discovery in wireless networks: formal investigation of possibility, Proceedings of the 2008 ACM symposium on Information, computer and communications security, March 18-20, 2008, Tokyo, Japan [doi>10.1145/1368310.1368338]
• 13: K. B. Rasmussen and S. Čapkun. Implications of radio fingerprinting on the security of sensor networks. In International Conference on Security and Privacy for Emerging Areas in Communications Networks (SecureComm), 2007.
• 14: Naveen Sastry , Umesh Shankar , David Wagner, Secure verification of location claims, Proceedings of the 2nd ACM workshop on Wireless security, September 19-19, 2003, San Diego, CA, USA [doi>10.1145/941311.941313]
• 15: R. Shokri, M. Poturalski, G. Ravot, P. Papadimitratos, and J.-P. Hubaux. A Low-Cost Secure Neighbor Verification Protocol for Wireless Sensor Networks. Technical report, EPFL LCA-REPORT-2008-020, 2008.
• 16: A. Srinivasan and J. Wu. A Survey on Secure Localization in Wireless Sensor Networks. Encyclopedia of Wireless and Mobile Communications, 2008.
• 17: Srdjan Čapkun , Levente Buttyán , Jean-Pierre Hubaux, SECTOR: secure tracking of node encounters in multi-hop wireless networks, Proceedings of the 1st ACM workshop on Security of ad hoc and sensor networks, October 31, 2003, Fairfax, Virginia [doi>10.1145/986858.986862]
• 18: Weichao Wang , Bharat Bhargava, Visualization of wormholes in sensor networks, Proceedings of the 3rd ACM workshop on Wireless security, October 01-01, 2004, Philadelphia, PA, USA [doi>10.1145/1023646.1023657]
• 19: K. Whitehouse, F. Jiang, A. Woo, C. Karlof, and D. Culler. Sensor field localization: a deployment and empirical analysis. Technical Report UCB//CSD-04-1349, Univ. of California, Berkeley, 2004.
• 20: Gang Zhou , Tian He , Sudha Krishnamurthy , John A. Stankovic, Models and solutions for radio irregularity in wireless sensor networks, ACM Transactions on Sensor Networks (TOSN), v.2 n.2, p.221-262, May 2006 [doi>10.1145/1149283.1149287]
• 21: Sencun Zhu , Sanjeev Setia , Sushil Jajodia, LEAP: efficient security mechanisms for large-scale distributed sensor networks, Proceedings of the 10th ACM conference on Computer and communications security, October 27-30, 2003, Washington D.C., USA [doi>10.1145/948109.948120]

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.1 Network Architecture and Design
          Subjects: Wireless communication

General Terms:
Design, Experimentation, Security

Keywords:
secure neighbor verification, wireless sensor networks