Abstract:Wireless sensor networks have recently emerged as a promising computing model for many civilian and military applications. Sensor nodes in such a network are subject to varying forms of attacks since they are left unattended after deployment. Compromised nodes can, for example, tamper with legitimate reports or inject false reports in order to either distract the user from reaching the right decision or deplete the precious energy of relay nodes. Most of the current designs take the en-network detection approach: misbehaved nodes are detected by their neighboring watchdog nodes; false reports are detected and dropped by trusted en-route relay nodes, etc. However en-network designs are insufficient to defend collaborative attacks when many compromised nodes collude with each other in the network. In this paper we propose COOL, a COmpromised nOde Locator for detecting and locating compromised nodes once they misbehave in the network. It is based on the observation that for a well-behaved sensor node, the set of outgoing messages should be equal to the set of incoming and locally generated or dropped messages. However, comparing the message sets for different nodes is not enough to identify attacks as their sanity is unknown. We exploit a proven collision-resilient hashing scheme, termed incremental hashing, to sign the incoming, outgoing and locally generated/dropped message sets. The hash values are then sent to the sink for trusted comparisons. We discuss how to securely collect these hash values and then confidently locate compromised nodes. The scheme can also be combined with existing en-route false report filtering schemes to achieve both early false report dropping and accurate compromised nodes isolation. Through identifying and excluding compromised nodes, the COOL protocol prevents further damages from these nodes and forms a reliable and energy-conserving sensor network.

Authentication Of Sensor Network Flooding Based On Neighborhood Cooperation

Content-Aware Data Dissemination for Enhancing Privacy and Availability in Wireless Sensor Networks

An Efficient and DoS-resistant User Authentication Scheme for Two-Tiered Wireless Sensor Networks

A Design of Secure Community Healthcare Monitoring System Based on Wireless Sensor Networks

On Broadcast Authentication in Wireless Sensor Networks

Effective Multi-User Broadcast Authentication in Wireless Sensor Networks

An Authentication Scheme for Locating Compromised Sensor Nodes in WSNs

A Collaborative Network Security Management System in Metropolitan Area Network

A Novel Authentication Mechanism for Securing Underwater Wireless Sensors from Sybil Attack

An Efficient Hybrid Cryptographic Scheme for Wireless Sensor Network with Network Coding

Efficient and Secure Data Transmission and Sinkhole Detection in a Multi-Clustering Wireless Sensor Network Based on Homomorphic Encryption and Watermarking

Secure Data Transmission Protocol in Multi-Hop Sensor Networks

Data-Centric trust framework for high integrity wireless sensor networks

The Meeting of Acquaintances: A Cost-efficient Authentication Scheme for Light-weight Objects with Transient Trust Level and Plurality Approach

Distributed Flooding-based Storage Algorithms for Large-scale Sensor Networks

Optimal Byzantine Attack And Byzantine Identification In Distributed Sensor Networks

Distributed Node Authentication in Wireless Sensor Networks

A Proactive Data Security Framework for Mission-Critical Sensor Networks

A Secure Routing and Aggregation Protocol for Sensor Networks

A Temporal-Credential-based Mutual Authentication and Key Agreement Scheme for Wireless Sensor Networks

An Efficient Security Mechanism for High-Integrity Wireless Sensor Networks