Alibi Framework for Identifying Reactive Jamming Nodes in Wireless LAN
Alibi Framework for Identifying Reactive Jamming Nodes in Wireless LAN
复制标题
用于识别无线局域网中的反应性干扰节点的 Alibi 框架
DOI：
--
复制
发表时间：
2011
期刊：
影响因子：
--
通讯作者：
K. Nahrstedt
中科院分区：
文献类型：
--
作者：
Hoang Nguyen;Thadpong Pongthawornkamol;K. Nahrstedt
反应性干扰节点是网络中被攻破的节点，是干扰攻击源。他们假定知道网络中使用的任何共享秘密和协议。因此，它们可以非常有效地进行干扰，并且非常隐蔽。提出了一种识别无线局域网中反应性干扰节点的新框架。我们依靠节点的半双工特性：它们不能同时发送和接收。因此，如果受危害的节点阻塞了分组，则它无法猜测阻塞的分组的内容。更重要的是，如果诚实的节点收到拥塞的分组，它可以通过显示分组的内容来证明它不可能是阻塞分组的那个节点。这种数据包堵塞的证据被称为“不在场证明”--这是我们方法的关键概念。本文提出了一种应对无线局域网中反应性干扰节点的ALIBI框架。我们提出了不在场证明安全拓扑的概念，并在此基础上证明了我们提出的识别算法能够正确地识别攻击者。在此基础上，我们进一步提出了一个实用的协议来实现该识别算法。该协议包括一个基于BBC的定时信道，用于在拥塞情况下进行信息交换，并采用相似散列技术来减少存储和网络开销。该框架在一个真实的TOSSIM仿真中进行了评估，其中仿真特征和参数是基于我们的小型MICAz试验台上的真实轨迹。结果表明，在密度合理的网络中，ALIBI框架能够准确识别非合谋和合谋的反应性干扰节点。
Reactive jamming nodes are the nodes of the network that get compromised and become the source of jamming attacks. They assume to know any shared secrets and protocols used in the networks. Thus, they can jam very effectively and are very stealthy. We propose a novel framework for identifying the reactive jamming nodes in wireless LAN (WLAN). We rely on the half-duplex nature of nodes: they cannot transmit and receive at the same time. Thus, if a compromised node jams a packet, it cannot guess the content of the jammed packet. More importantly, if an honest node receives a jammed packet, it can prove that it cannot be the one jamming the packet by showing the content of the packet. Such proofs of jammed packets are called "alibis" - the key concept of our approach. In this paper, we present an alibi framework to deal with reactive jamming nodes in WLAN. We propose a concept of alibi-safe topologies on which our proposed identification algorithms are proved to correctly identify the attackers. We further propose a realistic protocol to implement the identification algorithm. The protocol includes a BBC-based timing channel for information exchange under the jamming situation and a similarity hashing technique to reduce the storage and network overhead. The framework is evaluated in a realistic TOSSIM simulation where the simulation characteristics and parameters are based on real traces on our small-scale MICAz test-bed. The results show that in reasonable dense networks, the alibi framework can accurately identify both non-colluding and colluding reactive jamming nodes.