Abstract:In the past decades, the evolution of wireless technologies has brought significant changes in modern communication networks through its wireless extension of wired networks. Wireless communications offer organizations and users many benefits such as portability and flexibility, increased productivity, and lower installation costs. However, risks are inherent in any wireless network. As the technologies of next generation wireless networks are emerging, security has become a primary concern in order to provide dependable and secure communication between the wireless nodes in a hostile environment. The next generation wireless networks face many unique challenges in security such as open network architecture, shared wireless medium, limited resource constraints, and highly dynamic network topology. This special issue in Security and Communication Networks presents current research focusing on the standard or protocol related security, attacks and defense applications, security architecture and frameworks, and theories and methodologies in security in next generation wireless networks. In view of this, we selected eight papers on security in next generation wireless networks to this special issue. The papers are either selected from open submissions or the best paper in 2008 International Workshop on Network and System Security (NSS 2008), held on 18–19 October 2008, in Shanghai, China. All the papers were selected on the basis of their originality, technical quality, and significance. Each paper was under rigorous technical review by at least three international reviewers. The selected papers are summarized below. Routing security contexts via an IP network imposes new challenging requirements of secure cross-handover services and security context management. In the first paper, Kim and Shin present a context router that manages security contexts in an all-IP network, providing seamless and secure handover services for the mobile users that carry multimedia-access devices. The proposed predictive routing mechanism improves seamless and secure cross-handover services. Trust establishment and management are essential for any security framework of MANETs. In the second paper, Dahshan and Irvine propose a robust self-organized, public key management for MANETs. The proposed scheme relies on establishing a small number of trust relations between neighboring nodes during the network initialization phase. Simulation results show that the proposed scheme is robust and efficient in the mobility environment of MANET and against malicious node attacks. A mobile node in a MANET must be assigned a free IP address before it may participate in unicast communications. This is a fundamental and difficult problem in the practical application of any MANET. In the third paper, Zhou, Mutka, and Ni propose a secure autoconfiguration algorithm, namely secure prophet address allocation, to perform prophet address allocation while considering the requirements of communication overhead, latency, and scalability. It is demonstrated that the proposed approach is able to maintain uniqueness of address assignment in the presence of IP spoofing attacks, ‘state pollution’ attacks, and Sybil attacks. In the fourth paper, Babu and Venkataram present a security techniques selection scheme for mobile transactions, called the Transactions-Based Security Scheme (TBSS). The TBSS identifies a suitable level of security techniques from the repository, which consists of symmetric, and asymmetric types of security algorithms arranged in three complexity levels, covering various encryption/decryption techniques, digital signature schemes, and hashing techniques. Their results shows a considerable reduction in security cost compared to static schemes, which employ pre-fixed security techniques to secure the transactions data. Discriminating impersonating devices is an important problem in Wi-Fi networks. While legal and illegal nodes may have the same configuration, their locations are different, resulting in different RSSI measured by the sensors. In the fifth paper, Tao et al. proposed X-mode, a faster clustering algorithm, to process the data. X-mode differs from other clustering algorithms by dropping low RSSI values and treating data points with the same RSSI values as one point during computation. Many RFID authentication techniques require a form of synchronization between a tag and a reader. A de-synchronization could jeopardize security and privacy. In the sixth paper, Conti et al. proposed a hash-chain based scheme to resolve the de-synchronization problem in RFID systems. Their solution achieves mutual reader-tag authentication by utilizing hash traversal and Merkle tree techniques. Through extensive simulations, the authors show that the tag and the reader can easily recover from de-synchronization with negligible overhead. Improving wireless access security through various OSI PHY layer mechanisms is the focus of the seventh paper. Klein et al. investigated the exploitation of RF waveform features that are inherently unique to specific devices and could be use for reliable device classification. They introduce a Dual-Tree Complex Wavelet Transform (DT-CWT) denoising technique to augment and improve Variance Trajectory (VT) detection capability. Instantaneous amplitude responses from collected 802.11a signals are used to validate the efficacy of DT-CWT at varying SNR. Internet key exchange version 2(IKEv2) is the protocol used to set up a security association (SA) in the IPsec protocol suite. In the eighth paper, Faigl et al. evaluated the performance impacts of IKEv2 in the next-generation wireless networks. They conduct experiments on two different wireless authentication methods, pre-shared keys (PSK) and extensible authentication protocol (EAP). Their experimental results clearly demonstrate the practical costs involved for IKEv2 authentication. We sincerely hope that you will enjoy reading these eight papers and find them very useful. We thank all the international reviewers for their professional services. We deeply thank Professor Hsiao-Hwa Chen, the Editor-in-Chief, for providing this opportunity to publish this special issue. Without his continuous support, encouragement, and guidance throughout this publishing project, the success of this special issue is impossible. Hahnsang Kim and Kang Shin, On predictive routing of security contexts in an All-IP network. Hisham Dahshan and James Irvine, A robust self-organized public key management for mobile ad hoc networks. Hongbo Zhou, Matt W. Mutka, and Lionel M. Ni, Secure prophet address allocation for MANETs. Sathish Babu B. and Pallapa Venkataram, Random security scheme selection for mobile transactions. Tao et al., A data clustering approach to discriminating impersonating devices in Wi-Fi networks. Conti et al., eRIPP-FS: a novel authentication technique for RFID. Klein et al., Application of wavelet denoising to improve OFDM-based signal detection and classification. Faigl et al., Performance evaluation of IKEv2 authentication methods in next generation wireless networks.

Abstract:Internet of Things (IoT) is a fast-growing research area which spans various technological fields, including computer science, electronic engineering, mobile and wireless communications, embedded systems, etc. Many technologies serve as the building blocks of this new paradigm, such as wireless sensor networks, RFID, cloud services, machine-to-machine interfaces, and so on. IoT will allow billions of objects in the physical world as well as virtual environments to exchange data with each other in an autonomous way so as to create smart environments such as automotive, healthcare, logistics, environmental monitoring, and many others. However, IoT introduces new challenges for the security of systems and processes and the privacy of individuals. Protecting the information in IoT is a complex and difficult task. IoT requires global connectivity and accessibility, which means that anyone can access in anytime and anyway, and that the number of attack vectors available to malicious attackers might become staggering. Furthermore, the inherent complexity of the IoT, where multiple heterogeneous entities located in different contexts can exchange information with each other, further complicates the design and deployment of efficient, interoperable, and scalable security mechanisms. Ubiquitous and cloud computing also increase the urgency of the privacy leakage problem. As a result, there is an increasing demand for development of new security and privacy approaches to guarantee the security, privacy, integrity, and availability of resources in IoTs. Traditional security countermeasures cannot be directly used in IoTs because of the different standards and communication stacks involved. Moreover, the large number of interconnected devices in IoTs introduces scalability issues. Therefore, new and novel security and privacy methods, architectures, and solutions are needed to deal with security threats in IoTs. In this special issue, we are delighted to present a selection of nine papers, which, in our opinion, will contribute to the enhancement of knowledge in security and privacy research for IoTs. The collection of high-quality research papers provides a view on the latest research advances on security and privacy methods, architectures, and solutions in IoTs. The contributions of these papers are outlined in the succeeding text. In the first paper, A new authentication protocol for healthcare applications using wireless medical sensor networks with user anonymity, Xiong Li, Jianwei Niu, Saru Kumari, Junguo Liao, Wei Liang, and Muhammad Khurram Khan adopt the biometrics as the third authentication factor and propose a new authentication protocol to guarantee secure communication and protect the user privacy for healthcare application using WMSNs with user anonymity. In the proposed protocol, a wrong password detection mechanism is designed to reduce unnecessary computation and communication costs. In the second paper, Fusion: coalesced confidential storage and communication framework for the IoT, instead of developing independent security solutions, Ibrahim Ethem Bagci, Shahid Raza, Utz Roedig, and Thiemo Voigt present Fusion to address both the communication and storage security. The paper demonstrates that compared with performing traditional cryptographic operations separately, using the combined solution is much safer and more energy efficient. In the third paper, A changeable personal identification number-based keystroke dynamics authentication system on smart phones, Ting-Yi Chang, Cheng-Jung Tsai, Wang-Jui Tsai, Chun-Cheng Peng, and Han-Sing Wu propose a novel keystroke dynamics-based authentication (KDA) system to protect security of smart phones. Compared with the traditional KDA system, in the proposed new KDA system, the personal identification number codes of the subscribers can be well protected, and the users can change their personal identification number codes and passwords anytime without extra retraining. With the wide use of smart mobile devices, task collaborations among mobile devices are becoming ubiquitous and important. The security issues can be well guaranteed if the tasks can be effectively balanced. Therefore, in the fourth paper, SAFE-CROWD: secure task allocation for collaborative mobile social network, Xiaochen Fan, Panlong Yang, Qingyu Li, Dawei Liu, Chaocan Xiang, and Yonggang Zhao propose “SAFE-CROWD”, which is a secure task-allocation scheme. Using SAFE-CROWD, the tasks can be securely and collaboratively completed among mobile devices. In the fifth paper, ShoVAT: Shodan-based vulnerability assessment tool for Internet-facing services, Béla Genge and Cǎlin Enǎchescu propose a novel tool called Shodan-based vulnerability assessment tool (ShoVAT) to guarantee the automated vulnerability assessment of Internet-facing services. Based on the indexing capabilities of Shodan search engine, ShoVAT first finds services and then reconstructs key vulnerability identifiers. Finally, the vulnerabilities are obtained using National Vulnerability Database. The experiment results show that 3922 vulnerabilities are found on 1501 services in 12 different institutions. In the sixth paper, Distributed flood attack detection mechanism using artificial neural network in wireless mesh networks, Muhammad Altaf Khan, Shafiullah Khan, Bilal Shams, and Jaime Lloret propose an artificial neural network-based technique to detect distributed flooding attacks in multi-hop wireless mesh networks. The proposed scheme is named as the distributed flood attack detector. The distributed flood attack detector is designed to be implemented at mesh gateway in wireless mesh network. By using artificial neural networks, the network traffic can be divided into different categories, and thus, the flood attacks can be detected. In the seventh paper, Toward a flexible and fine-grained access control framework for infrastructure as a service clouds, Bo Li, Jianxin Li, Lu Liu, and Chao Zhou propose a flexible and fine-grained access control framework, named IaaS-oriented Hybrid Access Control (iHAC), to ensure that the resources cannot be illegally accessed or used. iHAC consists of three main parts: an IaaS-oriented Hybrid Access Control model, a VM-centric access control approach, and a VMM-enabled network access control mechanism. The simulation results show that iHAC can efficiently make correct access control decisions with acceptable performance overhead. In the eighth paper, An intrusion detection method for wireless sensor network based on mathematical morphology, Yanwen Wang, Xiaoling Wu, and Hainan Chen propose an innovative intrusion detection method called granulometric size distribution (GSD) method based on mathematical morphology to detect malicious attack in IoTs. If the number of active nodes in a wireless sensor network is fixed, the GSD curves are similar. Therefore, malicious nodes can be efficiently detected based on the abnormal GSD. In the last of the presented papers, A secure energy-efficient access control scheme for wireless sensor networks based on elliptic curve cryptography, Yuanyuan Zhang, Neeraj Kumar, Jianhua Chen, and Joel J. P. C. Rodrigues propose a secure energy-efficient access-control scheme for wireless sensor networks based on elliptic curve cryptography. The algorithm is explained in detail, and a variety of malicious attacks are simulated to evaluate the performance of the proposed algorithm. To summarize, we believe that this special issue will contribute to enhancing knowledge in security and privacy research in IoT in particular. In addition, we also hope that the presented results will stimulate further research in the important areas of information and network security. We also want to thank the editor-in-chief of the Security and Communication Networks journal, the leading researchers contributing to the special issue, and excellent reviewers for their great help and support that made this special issue possible.

Editorial: Special Issue on “recent Advanced in Ubiquitous Infrastructure Technology”

Wireless Monitoring and Control

Special Issue on UIT (ubiquitous Information Technology) for Multimedia Systems

Special Issue on “intelligent Systems and Services for Ubiquitous Computing”

Future RFID Technology and Applications: Visions and Challenges

Emerging Wireless and Mobile Technologies

Secure Communications and Data Management in Ubiquitous Services

Guest editorial: intelligent surfaces for 5g and beyond

Special Issue on ‘recent Advances in Network and Information Security’

Resource Management in LTE-U Systems: Past, Present, and Future

Cutting-Edge of RFID: Guest Editorial on Augmented RFID Sensing and Robot Navigation Systems

Guest Editorial Introduction to the Special Issue on Applications and Developments of Novel Technologies in Intelligent Transportation Infrastructure Systems

Editorial for Special Issue on Emerging AI Technologies for Smart Infrastructure

Guest Editorial - Special Issue on Internet of Things (IoT): Architecture, Protocols and Services

Security in Next Generation Wireless Networks

Guest Editors Introduction: Special Section on Recent Advances in Network Security Management

Preface of special issue: advanced topics on wireless sensor networks

Guest Editors’ Introduction: Special Issue on Latest Developments for Security Management of Networks and Services

Security and Privacy in Internet of Things: Methods, Architectures, and Solutions

Next-Generation Internet and Communication

Guest Editorial Special Issue on Information-Centric Wireless Sensor Networking (ICWSN) for IoT