An Integrated Solution to Provide Privacy, Confidentiality, Integrity and Reliability Protection for Sensor Data Management

传感器网络广泛应用于军事和民用领域，已成为国家网络基础设施不可或缺的组成部分。在传感器网络中，传感器节点不断地感知并生成数据来描述环境;一旦数据生成，网络的基本使命是管理传感器数据，以便安全地存储有用的数据，并且授权用户可以访问他们感兴趣的数据。同时，传感器节点通常部署在无人值守甚至恶劣的环境中，并且它们通常缺乏抗篡改能力。因此，传感器数据管理容易受到各种安全攻击。虽然已经提出了一些针对特定攻击的方案，但其局限性也很突出：缺乏对新兴传感器数据管理方法的保护，破坏正常的数据管理操作，开销高，缺乏平衡安全级别和系统开销的适应性，并且没有系统的解决方案来同时对抗多种类型的攻击。为了解决这些问题，本项目旨在设计一个集成的解决方案，为传感器数据管理提供新的隐私性，机密性，完整性和可靠性保护。它包括四个组成部分：位置隐私保护、数据机密性保护、数据完整性保护和数据可靠性保护。这些组件将通过精心设计的分层和模块化软件结构集成在一起，并通过传感器网络测试平台上的模型检查，仿真和实施相结合进行评估。该项目将有助于开发保护传感器网络的创新解决方案，培训无线网络和安全领域的年轻科学家、学生和专业人员，最重要的是加强网络基础设施安全。

Widely deployed for military and civilian applications, sensor networks have become an indispensable segment of national cyber infrastructure. In sensor networks, sensor nodes sense continuously and generate data to describe the environment; once data have been generated, an essential mission of the network is to manage sensor data such that useful data are stored safely and authorized users can have access to data of their interest. Meanwhile, sensor nodes are usually deployed in unattended even hostile environments, and they typically lack tamper resistance. As such, sensor data management is susceptible to various security attacks. Although a few schemes have been proposed against selected attacks, the limitations are also salient: lacking protection for emerging sensor data management approaches, disrupting normal data management operations, high overhead, lack of adaptability to balance security level and system overhead, and no systematic solutions to counter multiple types of attacks at the same time. To address these issues, this project is to design an integrated solution to provide novel privacy, confidentiality, integrity and reliability protection for sensor data management. It includes four components: location privacy protection, data confidentiality protection, data integrity protection and data reliability protection. These components will be integrated together via a carefully-designed hierarchical and modular software structure, and to be evaluated through a combination of model checking, simulation, and implementation on a sensor network testbed. The project will contribute to the development of innovative solutions for protecting sensor networks, training of a diverse cadre of young scientists, students and professionals in wireless networking and security, and most importantly enhanced cyber infrastructure security.