安全有效的无线传感器网络溯源数据方法
|
摘要
为了在不增加额外存储和计算负担的情况下,尽可能多地在一个数据包中嵌入更多节点的溯源数据,提出一种基于正交码和消息鉴别码链的安全溯源数据传输方案(orthogonal code-based provenance scheme,OP)。OP方案只需要一个数据包就能恢复出数据包的传输路径,并且溯源数据的大小与路径的长度无关。安全分析表明OP方案不仅能抵抗单个恶意节点修改或伪造溯源数据攻击,还能抵抗多个恶意节点合谋发起的删除、插入溯源数据等攻击,并能定位到发起攻击的恶意节点。性能分析及实验仿真表明,与现有的方案相比,随着路径长度的增加,方案在存储空间、能量消耗等方面具有明显优势。
In order to add more nodes' provenances to the data packet, but not increase additional storage and computation burden, based on orthogonal code and message authentication code chain, this paper proposes a secure and effective provenance scheme(orthogonal code-based provenance scheme, OP) for wireless sensor network. The OP scheme can recover the transmission path of the data packet only using one packet, and the size of the provenance is independent of the path length. The security analysis shows that the OP scheme not only can resist the forgery provenance attack launched by single malicious node, but also can resist the deleting and inserting provenance attacks launched by multiple malicious nodes collusion, and it can locate the position of the malicious nodes. The performance analysis and simulation results show that compared with the existing schemes, the OP scheme has obvious advantages in storage space and energy consumption with the increase of path length.
In order to add more nodes' provenances to the data packet, but not increase additional storage and computation burden, based on orthogonal code and message authentication code chain, this paper proposes a secure and effective provenance scheme(orthogonal code-based provenance scheme, OP) for wireless sensor network. The OP scheme can recover the transmission path of the data packet only using one packet, and the size of the provenance is independent of the path length. The security analysis shows that the OP scheme not only can resist the forgery provenance attack launched by single malicious node, but also can resist the deleting and inserting provenance attacks launched by multiple malicious nodes collusion, and it can locate the position of the malicious nodes. The performance analysis and simulation results show that compared with the existing schemes, the OP scheme has obvious advantages in storage space and energy consumption with the increase of path length.
引文
[1]Cui L,Ju H L,Miao Y,et al.Overview of wireless sensor networks[J].Journal of Computer Research and Development,2005,42(1):163-174.
[2]Lim H S,Moon Y S,Bertino E.Provenance-based trustworthiness assessment in sensor networks[C]//Proceedings of the 7th International Workshop on Data Management for Sensor Networks,Singapore,Sep 13,2010.New York:ACM,2010:2-7.
[3]Sultana S,Ghinita G,Bertino E,et al.A lightweight secure provenance scheme for wireless sensor networks[C]//Proceedings of the 18th International Conference on Parallel and Distributed Systems,Singapore,Dec 17-19,2012.Washington:IEEE Computer Society,2012:101-108.
[4]Hasan R,Sion R,Winslett M.The case of the fakepicasso:preventing history forgery with secure provenance[C]//Proceedings of the 7th Conference on File and Storage Technologies,San Francisco,Feb 24-27,2009.Berkeley:USENIX Association,2009:1-14.
[5]Alam S M I,Fahmy S.An energy-efficient approach for provenance transmission in wireless sensor networks[C]//Proceedings of the 9th Annual IEEE Communications Society Conference on Sensor,Mesh and Ad Hoc Communications and Networks,Seoul,Jun 18-21,2012.Piscataway:IEEE,2012:130-138.
[6]Sultana S,Ghinita G,Bertino E,et al.A lightweight secure scheme for detecting provenance forgery and packet dropattacks in wireless sensor networks[J].IEEE Transactions on Dependable and Secure Computing,2015,12(3):256-269.
[7]Hussain S R,Wang C D,Sultana S,et al.Secure data provenance compression using arithmetic coding in wireless sensor networks[C]//Proceedings of the IEEE 33rd International Performance Computing and Communications Conference,Austin,Dec 5-7,2014.Washington:IEEE Computer Society,2014:1-10.
[8]Wang C D,Hussain S R,Bertino E.Dictionary based secure provenance compression for wireless sensor networks[J].IEEE Transactions on Parallel and Distributed Systems,2016,27(2):405-418.
[9]Wang C D,Bertino E.Sensor network provenance compression using dynamic Bayesian networks[J].ACM Transactions on Sensor Networks,2017,13(1):5.
[10]Alam S M I,Fahmy S.A practical approach for provenance transmission in wireless sensor networks[J].Ad Hoc Networks,2014,16(4):28-45.
[11]Wang P,Hu A Q,Pei W J.The design of anti-collision mechanism of UHF RFID system based on CDMA[C]//Proceedings of the IEEE Asia Pacific Conference on Circuits and Systems,Singapore,Dec 4-7,2006.Piscataway:IEEE,2006:1703-1708.
[12]Wuu L C,Chen Y J,Hung C H,et al.Zero-collision RFIDtags identification based on CDMA[C]//Proceedings of the5th International Conference on Information Assurance and Security,Xi’an,Aug 18-20,2009.Washington:IEEE Computer Society,2009:1236-1240.
[13]Fan C X,Cao L N.The principle of communication[M].6th ed.Beijing:National Defense Industry Press,2009.
[14]Zhang Z M,Wu F Y,Jiang C G.An efficient detection scheme of node replication attacks for wireless sensor networks[J].International Journal of Security and Networks,2015,10(4):228-238.
[15]Xu X B,Zhang G W,Sun Q B,et al.Precision configurable data aggregation algorithm in WSNs[J].Acta Electronica Sinica,2014,42(6):1205-1209.
[16]Yu X W,Fan F S,Zhou L X,et al.Adaptive forecast weighting data fusion algorithm for wireless sensor network[J].Chinese Journal of Sensors and Actuators,2017,30(5):772-776.
[17]Liu A,Ning P.TinyECC:a configurable library for elliptic curve cryptography in wireless sensor networks[C]//Proceedings of the 7th International Conference on Information Processing in Sensor Networks,St.Louis,Apr 22-24,2008.Washington:IEEE Computer Society,2008:245-256.
[18]Karlof C,Sastry N,Wagner D A.Tiny Sec:a link layer security architecture for wireless sensor networks[C]//Proceedings of the 2nd International Conference on Embedded Networked Sensor Systems,Baltimore,Nov 3-5,2004.New York:ACM,2004:162-175.
[1]崔莉,鞠海玲,苗勇,等.无线传感器网络研究进展[J].计算机研究与发展, 2005, 42(1):163-174.
[13]樊昌信,曹丽娜.通信原理[M]. 6版.北京:国防工业出版社, 2009.
[15]徐晓斌,张光卫,孙其博,等.一种误差可控传输均衡的WSN数据融合算法[J].电子学报, 2014, 42(6):1205-1209.
[16]余修武,范飞生,周利兴,等.无线传感器网络自适应预测加权数据融合算法[J].传感技术学报, 2017, 30(5):772-776.
[2]Lim H S,Moon Y S,Bertino E.Provenance-based trustworthiness assessment in sensor networks[C]//Proceedings of the 7th International Workshop on Data Management for Sensor Networks,Singapore,Sep 13,2010.New York:ACM,2010:2-7.
[3]Sultana S,Ghinita G,Bertino E,et al.A lightweight secure provenance scheme for wireless sensor networks[C]//Proceedings of the 18th International Conference on Parallel and Distributed Systems,Singapore,Dec 17-19,2012.Washington:IEEE Computer Society,2012:101-108.
[4]Hasan R,Sion R,Winslett M.The case of the fakepicasso:preventing history forgery with secure provenance[C]//Proceedings of the 7th Conference on File and Storage Technologies,San Francisco,Feb 24-27,2009.Berkeley:USENIX Association,2009:1-14.
[5]Alam S M I,Fahmy S.An energy-efficient approach for provenance transmission in wireless sensor networks[C]//Proceedings of the 9th Annual IEEE Communications Society Conference on Sensor,Mesh and Ad Hoc Communications and Networks,Seoul,Jun 18-21,2012.Piscataway:IEEE,2012:130-138.
[6]Sultana S,Ghinita G,Bertino E,et al.A lightweight secure scheme for detecting provenance forgery and packet dropattacks in wireless sensor networks[J].IEEE Transactions on Dependable and Secure Computing,2015,12(3):256-269.
[7]Hussain S R,Wang C D,Sultana S,et al.Secure data provenance compression using arithmetic coding in wireless sensor networks[C]//Proceedings of the IEEE 33rd International Performance Computing and Communications Conference,Austin,Dec 5-7,2014.Washington:IEEE Computer Society,2014:1-10.
[8]Wang C D,Hussain S R,Bertino E.Dictionary based secure provenance compression for wireless sensor networks[J].IEEE Transactions on Parallel and Distributed Systems,2016,27(2):405-418.
[9]Wang C D,Bertino E.Sensor network provenance compression using dynamic Bayesian networks[J].ACM Transactions on Sensor Networks,2017,13(1):5.
[10]Alam S M I,Fahmy S.A practical approach for provenance transmission in wireless sensor networks[J].Ad Hoc Networks,2014,16(4):28-45.
[11]Wang P,Hu A Q,Pei W J.The design of anti-collision mechanism of UHF RFID system based on CDMA[C]//Proceedings of the IEEE Asia Pacific Conference on Circuits and Systems,Singapore,Dec 4-7,2006.Piscataway:IEEE,2006:1703-1708.
[12]Wuu L C,Chen Y J,Hung C H,et al.Zero-collision RFIDtags identification based on CDMA[C]//Proceedings of the5th International Conference on Information Assurance and Security,Xi’an,Aug 18-20,2009.Washington:IEEE Computer Society,2009:1236-1240.
[13]Fan C X,Cao L N.The principle of communication[M].6th ed.Beijing:National Defense Industry Press,2009.
[14]Zhang Z M,Wu F Y,Jiang C G.An efficient detection scheme of node replication attacks for wireless sensor networks[J].International Journal of Security and Networks,2015,10(4):228-238.
[15]Xu X B,Zhang G W,Sun Q B,et al.Precision configurable data aggregation algorithm in WSNs[J].Acta Electronica Sinica,2014,42(6):1205-1209.
[16]Yu X W,Fan F S,Zhou L X,et al.Adaptive forecast weighting data fusion algorithm for wireless sensor network[J].Chinese Journal of Sensors and Actuators,2017,30(5):772-776.
[17]Liu A,Ning P.TinyECC:a configurable library for elliptic curve cryptography in wireless sensor networks[C]//Proceedings of the 7th International Conference on Information Processing in Sensor Networks,St.Louis,Apr 22-24,2008.Washington:IEEE Computer Society,2008:245-256.
[18]Karlof C,Sastry N,Wagner D A.Tiny Sec:a link layer security architecture for wireless sensor networks[C]//Proceedings of the 2nd International Conference on Embedded Networked Sensor Systems,Baltimore,Nov 3-5,2004.New York:ACM,2004:162-175.
[1]崔莉,鞠海玲,苗勇,等.无线传感器网络研究进展[J].计算机研究与发展, 2005, 42(1):163-174.
[13]樊昌信,曹丽娜.通信原理[M]. 6版.北京:国防工业出版社, 2009.
[15]徐晓斌,张光卫,孙其博,等.一种误差可控传输均衡的WSN数据融合算法[J].电子学报, 2014, 42(6):1205-1209.
[16]余修武,范飞生,周利兴,等.无线传感器网络自适应预测加权数据融合算法[J].传感技术学报, 2017, 30(5):772-776.