Emergent properties: detection of the node-capture attack in mobile wireless sensor networks

ABSTRACT

One of the most vexing problems in wireless sensor network security is the node capture attack. An adversary can capture a node from the network as the first step for further different types of attacks. For example, the adversary can collect all the cryptographic material stored in the node. Also, the node can be reprogrammed and re-deployed in the network in order to perform malicious activities. To the best of our knowledge no distributed solution has been proposed to detect a node capture in a mobile wireless sensor network. In this paper we propose an efficient and distributed solution to this problem leveraging emergent properties of mobile wireless sensor networks. In particular, we introduce two solutions: SDD, that does not require explicit information exchange between the nodes during the local detection, and CCD, a more sophisticated protocol that uses local node cooperation in addition to mobility to greatly improve performance. We also introduce a benchmark to compare these solutions with. Experimental results demonstrate the feasibility of our proposal. For instance, while the benchmark requires about 9,000 seconds to detect node captures, CDD requires less than 2,000 seconds. These results support our intuition that node mobility, in conjunction with a limited amount of local cooperation, can be used to detect emergent global properties.

REFERENCES

• 1: I. F. Akyildiz , W. Su , Y. Sankarasubramaniam , E. Cayirci, Wireless sensor networks: a survey, Computer Networks: The International Journal of Computer and Telecommunications Networking, v.38 n.4, p.393-422, 15 March 2002 [doi>10.1016/S1389-1286(01)00302-4 ]
• 2: Josh Broch , David A. Maltz , David B. Johnson , Yih-Chun Hu , Jorjeta Jetcheva, A performance comparison of multi-hop wireless ad hoc network routing protocols, Proceedings of the 4th annual ACM/IEEE international conference on Mobile computing and networking, p.85-97, October 25-30, 1998, Dallas, Texas, United States [doi>10.1145/288235.288256]
• 3: J. Burgess, B. Gallagher, D. Jensen, and B. N. Levine. MaxProp: Routing for Vehicle-Based Disruption-Tolerant Networking. In INFOCOM '06, 2006.
• 4: Srdjan Čapkun , Jean-Pierre Hubaux , Levente Buttyán, Mobility helps security in ad hoc networks, Proceedings of the 4th ACM international symposium on Mobile ad hoc networking & computing, June 01-03, 2003, Annapolis, Maryland, USA [doi>10.1145/778415.778422]
• 5: Haowen Chan , Adrian Perrig , Dawn Song, Random Key Predistribution Schemes for Sensor Networks, Proceedings of the 2003 IEEE Symposium on Security and Privacy, p.197, May 11-14, 2003
• 6: M. Conti, R. Di Pietro, and L. V. Mancini. ECCE: Enhanced cooperative channel establishment for secure pair-wise communication in wireless sensor networks. Ad Hoc Networks, 5(1):49--62, 2007.
• 7: Mauro Conti , Roberto Di Pietro , Luigi Vincenzo Mancini , Alessandro Mei, A randomized, efficient, and distributed protocol for the detection of node replication attacks in wireless sensor networks, Proceedings of the 8th ACM international symposium on Mobile ad hoc networking and computing, September 09-14, 2007, Montreal, Quebec, Canada [doi>10.1145/1288107.1288119]
• 8: Reza Curtmola , Seny Kamara, A Mechanism for Communication-Efficient Broadcast Encryption over Wireless Ad Hoc Networks, Electronic Notes in Theoretical Computer Science (ENTCS), v.171 n.1, p.57-69, April, 2007 [doi>10.1016/j.entcs.2006.11.009]
• 9: Murat Demirbas , Youngwhan Song, An RSSI-based Scheme for Sybil Attack Detection in Wireless Sensor Networks, Proceedings of the 2006 International Symposium on on World of Wireless, Mobile and Multimedia Networks, p.564-570, June 26-29, 2006 [doi>10.1109/WOWMOM.2006.27]
• 10: Roberto Di Pietro , Luigi V. Mancini , Alessandro Mei, Random key-assignment for secure Wireless Sensor Networks, Proceedings of the 1st ACM workshop on Security of ad hoc and sensor networks, October 31, 2003, Fairfax, Virginia [doi>10.1145/986858.986868]
• 11: Roberto Di Pietro , Luigi V. Mancini , Alessandro Mei, Energy efficient node-to-node authentication and communication confidentiality in wireless sensor networks, Wireless Networks, v.12 n.6, p.709-721, November 2006 [doi>10.1007/s11276-006-6530-5]
• 12: John R. Douceur, The Sybil Attack, Revised Papers from the First International Workshop on Peer-to-Peer Systems, p.251-260, March 07-08, 2002
• 13: Laurent Eschenauer , Virgil D. Gligor, A key-management scheme for distributed sensor networks, Proceedings of the 9th ACM conference on Computer and communications security, November 18-22, 2002, Washington, DC, USA [doi>10.1145/586110.586117]
• 14: Saurabh Ganeriwal , Srdjan Čapkun , Chih-Chieh Han , Mani B. Srivastava, Secure time synchronization service for sensor networks, Proceedings of the 4th ACM workshop on Wireless security, September 02-02, 2005, Cologne, Germany [doi>10.1145/1080793.1080809]
• 15: M. Grossglauser and M. Vetterli. Locating nodes with EASE: last encounter routing in ad hoc networks through mobility diffusion. In INFOCOM 2003, volume 3, pages 1954--1964 vol.3, 2003.
• 16: J. Luo and J.-P. Hubaux. Joint mobility and routing for lifetime elongation in wireless sensor networks. In INFOCOM '05, pages 1735--1746, 2005.
• 17: James Newsome , Elaine Shi , Dawn Song , Adrian Perrig, The sybil attack in sensor networks: analysis & defenses, Proceedings of the third international symposium on Information processing in sensor networks, April 26-27, 2004, Berkeley, California, USA [doi>10.1145/984622.984660]
• 18: Bryan Parno , Adrian Perrig , Virgil Gligor, Distributed Detection of Node Replication Attacks in Sensor Networks, Proceedings of the 2005 IEEE Symposium on Security and Privacy, p.49-63, May 08-11, 2005 [doi>10.1109/SP.2005.8]
• 19: A. Perrig, R. Canetti, D. Tygar, and D. Song. The TESLA broadcast authentication protocol. CryptoBytes - RSA Labs, 5(2):2--13, 2002.
• 20: Adrian Perrig , John Stankovic , David Wagner, Security in wireless sensor networks, Communications of the ACM, v.47 n.6, June 2004 [doi>10.1145/990680.990707]
• 21: C. Piro, C. Shields, and B. N. Levine. Detecting the sybil attack in mobile ad hoc networks. In SecureComm '06, pages 1--11, 2006.
• 22: Kun Sun , Peng Ning , Cliff Wang, Fault-Tolerant Cluster-Wise Clock Synchronization for Wireless Sensor Networks, IEEE Transactions on Dependable and Secure Computing, v.2 n.3, p.177-189, July 2005 [doi>10.1109/TDSC.2005.36]
• 23: Arvinderpal S. Wander , Nils Gura , Hans Eberle , Vipul Gupta , Sheueling Chang Shantz, Energy Analysis of Public-Key Cryptography for Wireless Sensor Networks, Proceedings of the Third IEEE International Conference on Pervasive Computing and Communications, p.324-328, March 08-12, 2005 [doi>10.1109/PERCOM.2005.18]
• 24: J. Yoon, M. Liu, and B. Noble. Random waypoint considered harmful. In INFOCOM '03, pages 1312--1321, 2003.

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.1 Network Architecture and Design
          Subjects: Wireless communication
      C.2.4 Distributed Systems

General Terms:
Performance, Security

Keywords:
distributed protocol, efficiency, node capture attack detection, node revocation, resilience, wireless sensor network security