Least privilege and privilege deprivation: towards tolerating mobile sink compromises in wireless sensor networks
Least privilege and privilege deprivation: towards tolerating mobile sink compromises in wireless sensor networks
复制标题
DOI：
10.1145/1062689.1062737
复制
发表时间：
2005-05
期刊：
影响因子：
--
通讯作者：
Wensheng Zhang;Hui Song;Sencun Zhu;G. Cao
中科院分区：
文献类型：
--
作者：
Wensheng Zhang;Hui Song;Sencun Zhu;G. Cao
在许多传感器网络应用中，需要移动的接收器来进行有效的数据收集、数据查询、局部传感器重新编程、识别和撤销受损的传感器以及其他网络维护。然而，采用移动的接收器提出了新的安全挑战：如果移动的接收器被赋予太多的特权，则它将变得非常容易受到攻击和危害。使用受损的移动的信宿，对手可以很容易地使传感器网络瘫痪甚至接管传感器网络。因此，安全机制，可以容忍移动的汇妥协是必不可少的。在本文中，基于最小特权的原则，我们首先提出了几个有效的计划，限制移动的汇的特权，而不妨碍其能力进行任何授权的操作为指定的任务。为了进一步减少可能造成的损害受损的移动的汇，然后，我们提出了有效的消息转发方案剥夺特权分配给一个受损的移动的汇后，立即其妥协已被检测到。通过详细的分析和仿真，我们表明，我们的计划是安全和有效的，是非常实用的传感器网络组成的当前一代的传感器。
Mobile sinks are needed in many sensor network applications for efficient data collection, data querying, localized sensor reprogramming, identifying and revoking compromised sensors, and other network maintenance. Employing mobile sinks however raises a new security challenge: if a mobile sink is given too many privileges, it will become very attractive for attack and compromise. Using a compromised mobile sink, an adversary may easily bring down or even take over the sensor network. Thus, security mechanisms that can tolerate mobile sink compromises are essential. In this paper, based on the principle of least privilege, we first propose several efficient schemes to restrict the privilege of a mobile sink without impeding its capability of carrying out any authorized operations for an assigned task. To further reduce the possible damages caused by a compromised mobile sink, we then propose efficient message forwarding schemes for depriving the privilege assigned to a compromised mobile sink immediately after its compromise has been detected. Through detailed analysis and simulations, we show that our schemes are secure and efficient, and are highly practical for sensor networks consisting of the current generation of sensors.