Improving sensor network immunity under worm attacks: a software diversity approach
Improving sensor network immunity under worm attacks: a software diversity approach
复制标题
DOI：
10.1145/1374618.1374640
复制
发表时间：
2008-05
期刊：
影响因子：
4.8
通讯作者：
Yi Yang;Sencun Zhu;G. Cao
中科院分区：
文献类型：
--
作者：
Yi Yang;Sencun Zhu;G. Cao
由于成本和资源的限制，传感器节点没有复杂的硬件架构或操作系统来保护程序安全。因此，臭名昭著的缓冲区溢出漏洞，导致许多互联网蠕虫攻击也可以利用攻击传感器网络。我们将利用传感器程序中的缓冲区溢出漏洞的恶意代码称为传感器蠕虫。显然，传感器蠕虫将是一个严重的威胁，如果不是最危险的一个，当攻击者可以简单地发送一个单一的数据包，危及整个传感器网络。尽管它的重要性，到目前为止，很少有工作集中在传感器蠕虫。在这项工作中，我们首先说明了发射传感器蠕虫的可行性，通过真实的实验Mica2微尘。受异质性生存性哲学的启发，我们探索了软件多样性技术来对抗传感器蠕虫。在软件版本有限的情况下，我们设计了一个有效的算法来为每个传感器分配合适的软件版本，从而抑制传感器蠕虫的传播。我们还研究了传感器节点部署错误对蠕虫传播的影响，这指导了我们的系统参数的选择基于渗流理论。最后，广泛的分析和仿真结果证实了我们的计划在包含传感器蠕虫的有效性。
Because of cost and resource constraints, sensor nodes do not have a complicated hardware architecture or operating system to protect program safety. Hence, the notorious buffer-overflow vulnerability that has caused numerous Internet worm attacks could also be exploited to attack sensor networks. We call the malicious code that exploits a buffer-overflow vulnerability in a sensor program sensor worm. Clearly, sensor worm will be a serious threat, if not the most dangerous one, when an attacker could simply send a single packet to compromise the entire sensor network. Despite its importance, so far little work has been focused on sensor worms. In this work, we first illustrate the feasibility of launching sensor worms through real experiments on Mica2 motes. Inspired by the survivability through heterogeneity philosophy, we then explore the technique of software diversity to combat sensor worms. Given a limited number of software versions, we design an efficient algorithm to assign the appropriate version of software to each sensor, so that sensor worms are restrained from propagation. We also examine the impact of sensor node deployment errors on worm propagation, which directs the selection of our system parameters based on percolation theory. Finally, extensive analytical and simulation results confirm the effectiveness of our scheme in containing sensor worms.