NeTS-NOSS: Robust Sensor Network Architecture through Neighborhood Monitoring and Isolation

提案编号：0626830 PI：Saurabh Bagchi机构：Purdue UniversityTitle：NetTS-NOSS：通过邻居监测和隔离的鲁棒传感器网络体系结构摘要该项目提供了弹性的无线网络的移动的ad hoc和传感器（MAHAS）节点，这是容易受到广泛的安全攻击。这些攻击可能涉及窃听、消息篡改或身份欺骗，这些攻击已通过用于加密和身份验证的自定义加密原语来解决。或者，攻击可以针对无线网络中的控制或数据业务。由于网络是资源受限的（带宽、能量或处理），因此对此类攻击提供检测和对策通常比有线网络更具挑战性。该项目正在开发用于检测、诊断和缓解一类攻击的协议，即影响控制流量的攻击。控制流量的典型示例是路由、监视节点的活跃度和系统管理。保证控制流量的保真度至关重要，因为中断控制流量可能会妨碍数据流量。例如，如果恶意节点设法在两个合法节点之间建立的路由中隐藏自己，则它可以通过选择性地丢弃数据分组来中断数据流量。这种攻击通常难以检测，并且可以在不需要加密密钥的情况下启动。该研究提出了一种称为本地监控的技术，通过这种技术，节点可以监控进出其邻居节点的部分流量。该项目使邻居监控在资源受限的环境中可行，并通过隔离减轻恶意节点的影响，无论是本地或全球使用分布式协议。这项工作将使MAHAS网络的部署能够用于关键的安全应用。我们希望将结果应用于我们目前正在建设的两个环境监测试验台（水质和制药）。

Proposal Number: 0626830PI: Saurabh Bagchi Institution: Purdue UniversityTitle: NeTS-NOSS: Robust Sensor Network Architecture Through Neighborhood Monitoring and IsolationAbstractThe project provides resilience to wireless networks of mobile ad hoc and sensor (MAHAS) nodes, which are vulnerable to a wide range of security attacks. These attacks could involve eavesdropping, message tampering, or identity spoofing, that have been addressed by customized cryptographic primitives for encryption and authentication. Alternately, the attacks may be targeted to the control or the data traffic in wireless networks. Since the networks are resource constrained (bandwidth, energy, or processing), providing detection and countermeasures to such attacks often turn out to be more challenging than in wired networks. The project is developing protocols for detecting, diagnosing, and mitigating one class of attacks, namely, those that affect the control traffic. Typical examples of control traffic are routing, monitoring the liveness of nodes, and system management. It is critical to guarantee the fidelity of control traffic since disrupting it can hamper the data traffic. For example, if a malicious node manages to interpose itself in an established route between two legitimate nodes, it can disrupt the data traffic by selectively dropping the data packets. Such attacks are often difficult to detect and can be launched without the need for cryptographic keys. The research presents a technique called local monitoring whereby nodes oversee part of the traffic going in and out of its neighbor nodes. The project makes neighbor monitoring feasible in resource constrained environments and mitigates the effect of the malicious node through isolation, either locally or globally using a distributed protocol. The work will enable the deployment of MAHAS networks for critical secure applications. We expect application of the results to two testbeds for environment monitoring (water quality and pharmaceutical manufacturing) that we are currently building.