Secure Data Communications in Wireless Networks Using Multi-Path Avoidance Routing
Secure Data Communications in Wireless Networks Using Multi-Path Avoidance Routing
复制标题
DOI：
10.1109/twc.2019.2928801
复制
发表时间：
2019-07
影响因子：
10.4
通讯作者：
Kazuya Sakai;Min-Te Sun;Wei-Shinn Ku;Jie Wu;T. Lai
中科院分区：
文献类型：
--
作者：
Kazuya Sakai;Min-Te Sun;Wei-Shinn Ku;Jie Wu;T. Lai
由于软件实现失败和密码学的滥用，数据加密不再被视为安全攻击的保障。因此，具有沿着路由路径窃听能力的对手可能会危及数据隐私。此外，如果对手是路径中的中间中继节点之一，她可以拒绝数据转发以断开端到端通信。一种解决方案是避免通过某些不安全区域（如恶意国家或可能受损的节点）进行消息路由。为此，提出了一种基于单路径的回避路由。然而，这种基于单路径的协议依赖于安全路径的可用性，即，没有对手在整个路径附近，这很难实现，因此限制了路由机会。为了解决这个问题，我们提出了一个避免路由框架，即基于定时器的多路径避免路由（TMPAR）。在我们的方法中，源节点首先将消息编码成$k$个不同的片段，每个片段通过不同的路径发送。在路径发现阶段，使用定时器来有效地发现更好的路径集。目的地可以很容易地组装原始消息。在没有对手获得所有的消息的$k$块的条件下，建议TMPAR可以安全地将消息传递到其目的地，尽管窃听。广泛的ns-2仿真结果表明，我们的TMPAR达到了设计目标。
Due to software implementation failure and misuse of cryptography, data encryption can no longer be considered a safeguard from security attacks. As a result, adversaries with eavesdropping capability along a routing path can compromise data privacy. In addition, should an adversary be one of the intermediate relay nodes in a path, she can deny data forwarding to disconnect the end-to-end communications. One solution is to avoid message routing through certain insecure areas, such as malicious countries or likely-compromised nodes. To this end, an avoidance routing based on the single path has been proposed. However, this single-path-based protocol relies on the availability of a safe path, i.e., no adversary is in the proximity of the whole path, which is difficult to achieve and therefore limits the routing opportunity. To tackle this issue, we propose an avoidance routing framework, namely timer-based multi-path avoidance routing (TMPAR). In our approach, a source node first encodes a message into $k$ different pieces, and each piece is sent via a different path. During its path discovery phase, a timer is used to efficiently discover a better set of paths. The destination can assemble the original message easily. Under the condition that no adversary obtains all the $k$ pieces of the message, the proposed TMPAR can securely deliver a message to its destination in spite of eavesdropping. The extensive ns-2 simulation results demonstrate that our TMPAR achieves its design goals.