Abstract:Secure communications in wireless ad hoc networks require setting up end-to-end secret keys for communicating node pairs. It is widely believed that although being more complex, a probabilistic key predistribution scheme is much more resilient against node capture than a deterministic one in lightweight wireless ad hoc networks. Supported by the surprisingly large successful attack probabilities (SAPs) computed in this chapter, we show that the probabilistic approaches have only limited performance advantages over deterministic ones. We first consider a static network scenario as originally considered in the seminal paper by Eschenauer and Gligor [9], where any node capture happens after the establishment of all pair-wise links. In this scenario, we show that the deterministic approach can achieve a performance as good as the probabilistic one. In a mobile network scenario, however, the probabilistic key management as described in [9] can lead to a SAP of one order of magnitude larger than the one in a static network due to node fabrication attacks.The above analysis motivates us to propose two low-cost secure-architecture-based techniques to improve the security against such attacks. Our new architectures, specifically targeted at the sensor-node platform, protect long-term keys using a root of trust embedded in the hardware System-on-a-Chip (SoC). This prevents an adversary from extracting these protected long-term keys from a captured node to fabricate new nodes. The extensive simulation results show that the proposed architecture can significantly decrease the SAP and increase the security level of key management for mobile ad hoc networks.Finally, we develop an analytical framework for the on-demand key establishment approach. We propose a novel security metric, the REM resilience vector, to quantify the resilience of any key establishment schemes against Revealing, Erasure, and Modification (REM) attacks. Our analysis shows that previous key establishment schemes are vulnerable under REM attacks. Relying on the new security metric, we prove a universal bound on achievable REM resilience vectors for any on-demand key establishment scheme. This bound that characterizes the optimal security performance analytically is shown to be tight, as we propose a REM-resilient key establishment scheme which achieves any vector within this bound. In addition, we develop a class of low-complexity key establishment schemes which achieve nearly optimal REM attack resilience.

A Continuous Secure Scheme in Static Heterogeneous Sensor Networks

An Efficient and DoS-resistant User Authentication Scheme for Two-Tiered Wireless Sensor Networks

New Secure and Efficient Distributed Data Storage Approaches for Unattended Wireless Sensor Network

A Routing-Driven Key Management Scheme for Heterogeneous Sensor Networks.

Lightweight and Secure Data Transmission Scheme Against Malicious Nodes in Heterogeneous Wireless Sensor Networks

An Efficient Hybrid Cryptographic Scheme for Wireless Sensor Network with Network Coding

A Secure Scheme for Distributed Consensus Estimation Against Data Falsification in Heterogeneous Wireless Sensor Networks

Exploiting Unidirectional Links for Key Establishment Protocols in Heterogeneous Sensor Networks

An Asymmetric Encryption-Based Key Distribution Method for Wireless Sensor Networks

Key Management In Sensor Networks

Strengthen Security of Wireless Sensor Networks Through Sensor Diversity

A framework for a distributed key management scheme in heterogeneous wireless sensor networks

Security Improvement on an Efficient Key Distribution Mechanism for Large-Scale Wireless Sensor Network

A key predistribution scheme with matrix decomposition for secure wireless sensor networks

A Hybrid Key Management Scheme for Ad-Hoc Wireless Sensor Networks to Improvesecure Link Establishment

Flexible Security Quantitative Analysis of Key Predistribution Schemes in WSN

An Efficient Key Predistribution Scheme in Wireless Sensor Networks.

Hierarchical Hypercube-Based Pairwise Key Establishment Schemes for Sensor Networks

New Hybrid Key-Management Scheme for Wireless Sensor Networks

A Hierarchical Shared Key Algorithm in Wireless Sensor Networks.

Reliable Key Establishment Scheme Exploiting Unidirectional Links in Wireless Sensor Networks