SENSORS: Soft Tamper-Proofing with Program Integrity Verification in Wireless Sensor Networks

Shin abstract小型低成本传感器设备，每个都配备有限的资源，联网并用于各种关键应用。这些应用程序的性质可能要求底层传感器网络是安全的，即使它通常部署在恶劣的，有时是敌对的，无监督的环境中，因此，容易被捕获，逆向工程和操纵。现有的防篡改技术要么是基于硬件的，要么是用于具有足够计算和通信资源的环境，但它们不能用于低成本（因此资源有限）的传感器设备。该项目侧重于程序完整性验证（PIV）协议的开发和评估，该协议间歇性地验证传感器设备的程序代码的完整性，例如，每当它加入网络或经历长时间的服务阻塞时。PIV协议增强了传感器设备，使其可用于需要高级安全性的应用程序。PIV使用随机散列函数，在需要验证代码时，可以随机生成程序码码上的散列计算算法。通过应用该算法，PIV协议将提供防止操纵/逆向工程/传感器重新编程的保护；提供基于软件的保护，无需防篡改硬件；利用不频繁触发验证，从而不强调或干扰正常的传感器功能；并确保加密安全。该项目包括以下四个密切相关的任务：程序完整性验证、密钥管理、自适应入侵检测和实验与验证。该项目的目标是基于软件的防篡改技术的根本进步。新兴传感器网络预计将产生更广泛的影响，这些传感器网络将在安全关键和国土安全应用中发挥关键作用，例如对物理基础设施的监视，包括建筑物和桥梁、交通系统、供水系统、发电和配电系统。

Shin abstractSmall low-cost sensor devices, each equipped with limited resources,are networked and used for various critical applications.The nature of these applications may require the underlying sensornetwork to be secure even though it is usually deployed ina harsh, sometimes hostile, and unsupervised environment,and hence, is subject to capture, reverse-engineeringand manipulation.Existing tamper resistance techniques are either hardware-based or intended forenvironments with sufficient computation and communicationresources, but they cannot be used for low-cost (thus resource-limited)sensor devices. This project focuses on the development and evaluation ofa Program-Integrity Verification (PIV) protocol that intermittently verifies integrity of the program code of a sensor device, e.g., wheneverit joins a network or has experienced a long service blockage.The PIV protocol augments sensor devices to make themusable for applications that require high-level security.PIV uses a randomized hash function,by which the algorithm for hash computation on the program codecan be randomly generated whenever the code needs to be verified.By applying this algorithm, the PIV protocol will offer protectionagainst manipulation/reverse-engineering/reprogramming of sensors;provide software-based protection without requiring tamper-resistant hardware;exploit infrequent triggering of verification, thereby notstressing or interfering with normal sensor functions; and assure cryptographic security. The project consists of the following fourclosely-related tasks, Program-Integrity Verification, Key Management, Adaptive Intrusion Detection, and Experimentation and Validation.The goal of the project is the fundamentaladvancement of software-based tamper-resistance techniques.Broader impact is epxected in emergingsensor networks that will play key roles in safety-criticaland homeland security applications such as surveillanceof the physical infrastructure, including buildings and bridges,transportation systems, water supply systems, and power generationand distribution systems.