NeTS-NOSS: Robust Sensor Network Architecture through Neighborhood Monitoring and Isolation

NeTS-NOSS：通过邻域监控和隔离实现稳健的传感器网络架构

• 批准号: 0626830
• 负责人: Saurabh Bagchi
• 金额: --
• 依托单位: Purdue University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2006
• 资助国家: 美国
• 起止时间: 2006-09-15 至 2011-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0626830&HistoricalAwards=false
• 关键词: NeTS; NOSS; Robust; Sensor; Network

Proposal Number: 0626830PI: Saurabh Bagchi Institution: Purdue UniversityTitle: NeTS-NOSS: Robust Sensor Network Architecture Through Neighborhood Monitoring and IsolationAbstractThe project provides resilience to wireless networks of mobile ad hoc and sensor (MAHAS) nodes, which are vulnerable to a wide range of security attacks. These attacks could involve eavesdropping, message tampering, or identity spoofing, that have been addressed by customized cryptographic primitives for encryption and authentication. Alternately, the attacks may be targeted to the control or the data traffic in wireless networks. Since the networks are resource constrained (bandwidth, energy, or processing), providing detection and countermeasures to such attacks often turn out to be more challenging than in wired networks. The project is developing protocols for detecting, diagnosing, and mitigating one class of attacks, namely, those that affect the control traffic. Typical examples of control traffic are routing, monitoring the liveness of nodes, and system management. It is critical to guarantee the fidelity of control traffic since disrupting it can hamper the data traffic. For example, if a malicious node manages to interpose itself in an established route between two legitimate nodes, it can disrupt the data traffic by selectively dropping the data packets. Such attacks are often difficult to detect and can be launched without the need for cryptographic keys. The research presents a technique called local monitoring whereby nodes oversee part of the traffic going in and out of its neighbor nodes. The project makes neighbor monitoring feasible in resource constrained environments and mitigates the effect of the malicious node through isolation, either locally or globally using a distributed protocol. The work will enable the deployment of MAHAS networks for critical secure applications. We expect application of the results to two testbeds for environment monitoring (water quality and pharmaceutical manufacturing) that we are currently building.

提案编号：0626830PI: Saurabh Bagchi机构：Purdue university标题：NeTS-NOSS：通过邻居监测和隔离的鲁棒传感器网络架构摘要该项目为移动自组织和传感器（MAHAS）节点的无线网络提供弹性，这些节点容易受到各种安全攻击。这些攻击可能涉及窃听、消息篡改或身份欺骗，这些问题已经通过用于加密和身份验证的定制加密原语来解决。也可以针对无线网络中的控制流量或数据流量进行攻击。由于网络资源有限（带宽、能量或处理），因此对此类攻击提供检测和对策通常比有线网络更具挑战性。该项目正在开发用于检测、诊断和减轻一类攻击的协议，即那些影响控制流量的攻击。控制流量的典型示例包括路由、监视节点的活动和系统管理。控制流量的保真度是保证控制流量保真度的关键，因为控制流量的中断会影响数据流量。例如，如果一个恶意节点设法将自己插入两个合法节点之间已建立的路由中，它可以通过选择性地丢弃数据包来破坏数据流量。这种攻击通常很难检测到，而且不需要加密密钥就可以发起攻击。该研究提出了一种称为本地监控的技术，其中节点监督进出其邻居节点的部分流量。该项目使邻居监控在资源受限的环境中变得可行，并通过使用分布式协议在本地或全局隔离来减轻恶意节点的影响。该工作将为关键安全应用部署MAHAS网络。我们期望将结果应用于我们目前正在建设的两个环境监测试验台（水质和制药）。