Collaborative authentication in unattended WSNs

ABSTRACT

An unattended wireless sensor network (UWSN) might collect valuable data representing an attractive target for the adversary. Since a sink visits the network infrequently, unattended sensors cannot immediately off-load data to some safe external entity. With sufficient time between sink visits, a powerful mobile adversary can easily compromise sensor-collected data.

In this paper, we propose two schemes (CoMAC and ExCo) that leverage sensor co-operation to achieve data authentication. These schemes use standard (and inexpensive) symmetric cryptographic primitives coupled with key evolution and few messages exchange. We provide security analysis for proposed schemes and assess their effectiveness via simulations. We show that proposed schemes cope well with real WSN issues, such as message loss and sensor failure. We also compare the two schemes with respect to robustness and overhead, which allows network designers to carefully select the right scheme and tune appropriate system parameters.

REFERENCES

• 1: K. Akkaya and M. F. Younis. A survey on routing protocols for wireless sensor networks. Ad Hoc Networks, 3(3):325--349, 2005.
• 2: Mihir Bellare , Sara K. Miner, A Forward-Secure Digital Signature Scheme, Proceedings of the 19th Annual International Cryptology Conference on Advances in Cryptology, p.431-448, August 15-19, 1999
• 3: M. Bellare and B. Yee. Forward Integrity for Secure Audit Logs. UCSD CSE Dept. Technical Report 23, 1997.
• 4: Mathias Bohge , Wade Trappe, An authentication framework for hierarchical ad hoc sensor networks, Proceedings of the 2nd ACM workshop on Wireless security, September 19-19, 2003, San Diego, CA, USA [doi>10.1145/941311.941324]
• 5: Roberto Di Pietro , Di Ma , Claudio Soriente , Gene Tsudik, POSH: Proactive co-Operative Self-Healing in Unattended Wireless Sensor Networks, Proceedings of the 2008 Symposium on Reliable Distributed Systems, p.185-194, October 06-08, 2008 [doi>10.1109/SRDS.2008.23]
• 6: Roberto Di Pietro , Luigi V. Mancini , Claudio Soriente , Angelo Spognardi , Gene Tsudik, Catch Me (If You Can): Data Survival in Unattended Sensor Networks, Proceedings of the 2008 Sixth Annual IEEE International Conference on Pervasive Computing and Communications, p.185-194, March 17-21, 2008 [doi>10.1109/PERCOM.2008.31]
• 7: R. Di Pietro, L. Mancini, C. Soriente, A. Spognardi, and G. Tsudik. Playing hide-and-seek with a focused mobile adversary. Cryptology ePrint Archive, Report 2008/293, 2008.
• 8: Y. Dodis, M. Franklin, J. Katz, A. Miyaji, and M. Yung. A generic construction for intrusion-resilient public key encryption. In CT-RSA, 2004.
• 9: Yevgeniy Dodis , Jonathan Katz , Shouhuai Xu , Moti Yung, Key-Insulated Public Key Cryptosystems, Proceedings of the International Conference on the Theory and Applications of Cryptographic Techniques: Advances in Cryptology, p.65-82, May 02, 2002
• 10: Yevgeniy Dodis , Jonathan Katz , Shouhuai Xu , Moti Yung, Strong Key-Insulated Signature Schemes, Proceedings of the 6th International Workshop on Theory and Practice in Public Key Cryptography: Public Key Cryptography, p.130-144, January 06-08, 2003
• 11: Saurabh Ganeriwal , Srdjan Čapkun , Chih-Chieh Han , Mani B. Srivastava, Secure time synchronization service for sensor networks, Proceedings of the 4th ACM workshop on Wireless security, September 02-02, 2005, Cologne, Germany [doi>10.1145/1080793.1080809]
• 12: G. Itkis. Intrusion-resilient signatures: Generic constructions. In SCN, 2002.
• 13: Gene Itkis , Leonid Reyzin, SiBIR: Signer-Base Intrusion-Resilient Signatures, Proceedings of the 22nd Annual International Cryptology Conference on Advances in Cryptology, p.499-514, August 18-22, 2002
• 14: Donggang Liu , Peng Ning , Sencun Zhu , Sushil Jajodia, Practical Broadcast Authentication in Sensor Networks, Proceedings of the The Second Annual International Conference on Mobile and Ubiquitous Systems: Networking and Services, p.118-132, July 17-21, 2005 [doi>10.1109/MOBIQUITOUS.2005.49]
• 15: Di Ma , Gene Tsudik, Extended Abstract: Forward-Secure Sequential Aggregate Authentication, Proceedings of the 2007 IEEE Symposium on Security and Privacy, p.86-91, May 20-23, 2007 [doi>10.1109/SP.2007.18]
• 16: Di Ma , Gene Tsudik, DISH: Distributed Self-Healing, Proceedings of the 10th International Symposium on Stabilization, Safety, and Security of Distributed Systems, November 21-23, 2008, Detroit, MI [doi>10.1007/978-3-540-89335-6_7]
• 17: Adrian Perrig , Robert Szewczyk , Victor Wen , David Culler , J. D. Tygar, SPINS: security protocols for sensor networks, Proceedings of the 7th annual international conference on Mobile computing and networking, p.189-199, July 2001, Rome, Italy [doi>10.1145/381677.381696]
• 18: Hao Yang , Fan Ye , Yuan Yuan , Songwu Lu , William Arbaugh, Toward resilient security in wireless sensor networks, Proceedings of the 6th ACM international symposium on Mobile ad hoc networking and computing, May 25-27, 2005, Urbana-Champaign, IL, USA [doi>10.1145/1062689.1062696]
• 19: F. Ye, H. Luo, S. Lu, and L. Zhang. Statistical en-route filtering of injected false data in sensor networks. In IEEE INFOCOM, 2004.
• 20: W. Zhang and G. Cao. Group rekeying for filtering false data in sensor networks: a predistribution and local collaboration-based approach. In IEEE INFOCOM, 2005.
• 21: Y. Zhang, J. Yang, and H. T. Vu. The interleaved authentication for filtering false reports in multipath routing based sensor networks. In IPDPS, 2006.
• 22: Sencun Zhu , Sanjeev Setia , Sushil Jajodia , Peng Ning, Interleaved hop-by-hop authentication against false data injection attacks in sensor networks, ACM Transactions on Sensor Networks (TOSN), v.3 n.3, p.14-es, August 2007 [doi>10.1145/1267060.1267062]

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.1 Network Architecture and Design
          Subjects: Wireless communication

  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)
          Subjects: Authentication

General Terms:
Performance, Security

Keywords:
authentication, mobile adversary, wireless sensor networks