无线传感器网络节点复制攻击和女巫攻击防御机制研究

doi:10.3969/j.issn.0372-2112.2015.04.017

电子学报 ›› 2015, Vol. 43 ›› Issue (4): 743-752.DOI: 10.3969/j.issn.0372-2112.2015.04.017

无线传感器网络节点复制攻击和女巫攻击防御机制研究

胡蓉华, 董晓梅, 王大玲

东北大学信息科学与工程学院, 辽宁沈阳 110819

收稿日期:2013-05-12 修回日期:2014-09-16 出版日期:2015-04-25
- 作者简介:
- 胡蓉华男,1985年5月出生,湖北荆州人.2010年获东北大学计算机软件与理论专业工学硕士学位.现为东北大学博士生,主要研究方向:无线传感器网络安全、信息隐藏等.董晓梅女,1970年5月出生,河南开封人.东北大学副教授,主要研究方向为网络与信息安全、信息隐藏、计算机取证等.E-mail:dongxiaomei@ise.neu.edu.cn;王大玲 女,1962年6月出生,辽宁新民人.东北大学教授、博士生导师,主要研究方向为据挖掘、机器学习、信息检索等.
- 基金资助:
- 国家自然科学基金 (No.60873199)

Defense Mechanism Against Node Replication Attacks and Sybil Attacks in Wireless Sensor Networks

HU Rong-hua, DONG Xiao-mei, WANG Da-ling

School of Information Science & Engineering, Northeastern University, Shenyang, Liaoning 110819, China

Received:2013-05-12 Revised:2014-09-16 Online:2015-04-25 Published:2015-04-25
- Supported by:
- National Natural Science Foundation of China (No.60873199)

摘要/Abstract

摘要：

在无线传感器网络(WSNs)中,节点复制攻击和女巫攻击可扰乱数据融合和阈值选举等网络操作.发起这两种攻击需先通过邻居发现认证过程.考虑到在WSNs中发起邻居认证是不频繁的,提出了一种基于单向密钥链的ID认证防御机制(OKCIDA),降低攻击者在任何时间段发起这两种攻击的可能性.然后基于椭圆曲线离散对数问题,构造对称参数,并组合OKCIDA和利用节点邻居关系,提出了一种无需位置的邻居认证协议(LFNA),以阻止复制节点和女巫节点成功加入网络.最后给出了安全性证明和分析,并在安全和开销方面将LFNA与已有典型防御方案进行了比较,结果表明该方案具有一定的优势.

关键词: 无线传感器网络, 节点复制攻击, 女巫攻击, 认证, 单向密钥链

Abstract:

In wireless sensor networks (WSNs),node replication attacks and Sybil attacks can disrupt the network's operations such as data aggregation and threshold voting schemes.To launch these attacks,it is necessary to go through the neighbor discovery verification process firstly,which is not frequent in WSNs.Considering the above observations,a one-way key chain ID authentication (OKCIDA) defense mechanism was presented to decrease the probability for attackers to mount such attacks at any time.Moreover,the symmetric parameters was constructed based on the elliptic curve discrete logarithm problem;then combines with OKCIDA and utilizes node neighbor relationship,a location-free neighborhood authentication protocol (LFNA) was introduced to stop replica nodes and Sybil nodes from successfully joining into the network.Finally,the security of LFNA was proved and analyzed.Compared with several existing important mechanisms,the proposed method is superior in security and cost.

Key words: wireless sensor network, node replication attack, Sybil attack, authentication, one-way key chain

中图分类号:

TP393

胡蓉华, 董晓梅, 王大玲. 无线传感器网络节点复制攻击和女巫攻击防御机制研究[J]. 电子学报, 2015, 43(4): 743-752.

HU Rong-hua, DONG Xiao-mei, WANG Da-ling . Defense Mechanism Against Node Replication Attacks and Sybil Attacks in Wireless Sensor Networks[J]. Acta Electronica Sinica, 2015, 43(4): 743-752.

参考文献

[1] 任秀丽,杨威,薛建生,等.基于分区的无线传感器网节点复制攻击检测方法[J].电子学报,2010,38(9):2095-2100. Ren Xiu-li,Yang Wei,Xue Jian-sheng,et al.Method of detecting the replication attack based on zoning in wireless sensor networks[J].Acta Electronica Sinica,2010,38(9):2095-2100.(in Chinese)
[2] Newsome J,Shi E,Song D,et al.The Sybil attack in sensor networks:Analysis & defenses[A].Proceedings of the 3rd International Symposium on Information Processing in Sensor Networks[C].New York:ACM,2004.259-268.
[3] Manjula V,Chellappan C.The replication attacks in wireless sensor networks:Analysis and defenses[A].Proceedings of the 1st International Conference on Computer Science and Information Technology[C].Heidelberg:Springer Verlag,2011.169-178.
[4] Zhu W T,Zhou J Y,Deng R H,et al.Detecting node replication attacks in wireless sensor networks:A survey[J].Journal of Network and Computer Applications,2012,35(3):1022-1034.
[5] Parno B,Perrig A,Gligor V.Distributed detection of node replication attacks in sensor networks[A].Proceedings of the 2005 IEEE Symposium on Security and Privacy[C].New Jersey:IEEE,2005.49-63.
[6] Ho J W,Liu D G,Wright M,et al.Distributed detection of replica node attacks with group deployment knowledge in wireless sensor networks[J].Ad hoc Networks,2009,7(8):1476-1488.
[7] Ho J W,Liu D G,Wright M,et al.Distributed detection of replicas with deployment knowledge in wireless sensor networks[A].Proceedings of the 7th Annual IEEE International Conference on Pervasive Computing and Communications[C].New Jersey:IEEE CS,2009.1-6.
[8] Demirbas M,Song Y.An RSSI-based scheme for Sybil attack detection in wireless sensor networks[A].Proceedings of the International Symposium on a World of Wireless,Mobile and Multimedia Networks[C].New Jersey:IEEE CS,2006.564-568.
[9] Wang J T,Yang G,Sun Y,et al.Sybil attack detection based on RSSI for wireless sensor network[A].Proceedings of the International Conference on Wireless Communications,Networking and Mobile Computing[C].New Jersey:IEEE CS,2007.2684-2687.
[10] Wang W T,Ssu K F,Chang W C.Defending Sybil attacks based on neighboring relations in wireless sensor networks[J].Security and Communication Networks,2010,3(5):408-420.
[11] Zhang Y C,Liu W,Lou W J,et al.Securing sensor networks with location-based keys[A].Proceedings of the 2005 IEEE Wireless Communications and Networking[C].New Jersey:IEEE,2005.1909-1914.
[12] Zhang Y C,Liu W,Lou W J,et al.Location-based compromise-tolerant security mechanisms for wireless sensor networks[J].IEEE Journal on Selected Areas in Communications,2006,24(2):247-260.
[13] Duan M J,Xu J.An efficient location-based compromise-tolerant key management scheme for sensor networks[J].Information Processing Letters,2011,111(11):503-507.
[14] Bekara C,Laurent-Maknavicjus M.A new protocol for securing wireless sensor networks against nodes replication attacks[A].Proceedings of the 3rd IEEE International Conference on Wireless and Mobile Computing,Networking and Communications[C].New Jersey:IEEE CS,2007.1-7.
[15] Zhang Q H,Wang P,Reeves D S,et al.Defending against Sybil attacks in sensor networks[A].Proceedings of the 25th IEEE International Conference on Distributed Computing Systems Workshops[C].New Jersey:IEEE CS,2005.185-191.
[16] Yin J,Madria S K.Sybil attack detection in a hierarchical sensor network[A].Proceedings of the 3rd International Conference on Security and Privacy in Communication Networks[C].New Jersey:IEEE CS,2007.494-503.
[17] Shokri R,Poturalski M,Ravot G,et al.A practical secure neighbor verification protocol for wireless sensor networks[A].Proceedings of the 2nd ACM Conference on Wireless Network Security[C].New York:ACM,2009.193-200.
[18] 杨峰,周学海,张起元,等.无线传感器网络恶意节点溯源追踪方法研究[J].电子学报,2009,37(1):202-206. Yang Feng,Zhou Xue-hai,Zhang Qi-yuan,et al.A practical traceback mechanism in wireless sensor networks[J].Acta Electronica Sinica,2009,37(1):202-206.(in Chinese)
[19] 杨庚,王江涛,程宏兵,等.基于身份加密的无线传感器网络密钥分配方法[J].电子学报,2007,35(1):180-184. Yang Geng,Wang Jiang-tao,Cheng Hong-bing,et al.A key establish scheme for WSN based on IBE and Diffie-Hellman algorithms[J].Acta Electronica Sinica,2007,35(1):180-184.(in Chinese)
[20] Barreto P,Lynn B,Scott M.On the selection of pairing-friendly groups[A].Proceedings of the 10th Annual International Workshop on Selected Areas in Cryptography[C].Heidelberg:Springer-Verlag,2003.17-25.

无线传感器网络节点复制攻击和女巫攻击防御机制研究

Defense Mechanism Against Node Replication Attacks and Sybil Attacks in Wireless Sensor Networks

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

[1]	陈嘉兴, 程杰, 董云玲, 刘志华. 基于弯曲声线和测距修正的水下节点定位算法[J]. 电子学报, 2022, 50(7): 1567-1572.
[2]	姜奇, 文悦, 张瑞杰, 魏福山, 马建峰. 面向智能手机的自适应触屏持续认证方案[J]. 电子学报, 2022, 50(5): 1131-1139.
[3]	陈书仪, 刘亚丽, 林昌露, 李涛, 董永权. 面向物联网的轻量级可验证群组认证方案[J]. 电子学报, 2022, 50(4): 990-1001.
[4]	杨坤伟, 杨波, 周彦伟. 群智网络中基于区块链的有序聚合签名认证方案[J]. 电子学报, 2022, 50(2): 358-365.
[5]	王义君, 陈忠野, 缪瑞新, 宋忠炎. 基于三角剖分的WSNs元胞感知覆盖算法[J]. 电子学报, 2022, 50(10): 2443-2451.
[6]	汪成亮, 赵凯, 刘嘉敏. 智能环境下基于边缘设备规则推理的数据预部署研究[J]. 电子学报, 2022, 50(10): 2347-2360.
[7]	吴志军, 杨一鸣, 张云. 基于身份签名的北斗二代民用D2导航电文认证协议[J]. 电子学报, 2021, 49(9): 1790-1798.
[8]	苏志刚, 武瑞, 郝敬堂. 面向无源定位的直达波传感器识别算法[J]. 电子学报, 2021, 49(6): 1178-1186.
[9]	李子臣, 谢婷, 张卷美. 基于RLWE问题的后量子口令认证密钥交换协议[J]. 电子学报, 2021, 49(2): 260-267.
[10]	张文芳, 雷丽婷, 王小敏, 王宇. 面向云服务的安全高效无证书聚合签名车联网认证密钥协商协议[J]. 电子学报, 2020, 48(9): 1814-1823.
[11]	王海东, 刘云敬, 康琳, 武迎春. 射频能量捕获传感网移动能量源的布置策略研究[J]. 电子学报, 2020, 48(12): 2367-2375.
[12]	程杰, 董云玲, 陈嘉兴, 刘志华. 一种具有连续跳数值的三维DV-Hop改进算法[J]. 电子学报, 2020, 48(11): 2122-2130.
[13]	黄美根, 郁滨. 软件定义WSN规则一致更新研究[J]. 电子学报, 2019, 47(9): 1965-1971.
[14]	王頲, 白桦, 唐晓铭, 黄庆卿. 分布式全局精确时钟同步状态追踪:能观测性观测器分析[J]. 电子学报, 2019, 47(9): 1855-1862.
[15]	王宏, 李建华, 赖成喆, 曲宁. 基于纠错码理论的群组认证[J]. 电子学报, 2019, 47(7): 1393-1400.