NDLI: Mitigating DoS attacks against broadcast authentication in wireless sensor networks

Please wait, while we are loading the content...

Mitigating DoS attacks against broadcast authentication in wireless sensor networks

Content Provider	ACM Digital Library
Author	Liu, An Du, Wenliang Ning, Peng
Copyright Year	2008
Abstract	Broadcast authentication is a critical security service in wireless sensor networks. There are two general approaches for broadcast authentication in wireless sensor networks: digital signatures and μTESLA-based techniques. However, both signature-based and μTESLA-based broadcast authentication are vulnerable to Denial of Services (DoS) attacks: An attacker can inject bogus broadcast packets to force sensor nodes to perform expensive signature verifications (in case of signature-based broadcast authentication) or packet forwarding (in case of μTESLA-based broadcast authentication), thus exhausting their limited battery power. This paper presents an efficient mechanism called message-specific puzzle to mitigate such DoS attacks. In addition to signature-based or μTESLA-based broadcast authentication, this approach adds a weak authenticator in each broadcast packet, which can be efficiently verified by a regular sensor node, but takes a computationally powerful attacker a substantial amount of time to forge. Upon receiving a broadcast packet, each sensor node first verifies the weak authenticator, and performs the expensive signature verification (in signature-based broadcast authentication) or packet forwarding (in μTESLA-based broadcast authentication) only when the weak authenticator is valid. A weak authenticator cannot be precomputed without a non-reusable (or short-lived) key disclosed only in a valid packet. Even if an attacker has intensive computational resources to forge one or more weak authenticators, it is difficult to reuse these forged weak authenticators. Thus, this weak authentication mechanism substantially increases the difficulty of launching successful DoS attacks against signature-based or μTESLA-based broadcast authentication. A limitation of this approach is that it requires a powerful sender and introduces sender-side delay. This article also reports an implementation of the proposed techniques on TinyOS, as well as initial experimental evaluation in a network of MICAz motes.
Starting Page	1
Ending Page	35
Page Count	35
File Format	PDF
ISSN	15504859
e-ISSN	15504867
DOI	10.1145/1325651.1325652
Volume Number	4
Issue Number	1
Journal	ACM Transactions on Sensor Networks (TOSN)
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2008-02-11
Publisher Place	New York
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	DoS attacks Sensor networks Broadcast authentication Security
Content Type	Text
Resource Type	Article
Subject	Computer Networks and Communications

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Mitigating Resource-Draining DoS Attacks on Broadcast Source Authentication on Wireless Sensors Networks

Providing DoS resistance for signature-based broadcast authentication in sensor networks

Pre-authentication filters: providing dos resistance for signature-based broadcast authentication in sensor networks

Containing bogus packet insertion attacks for broadcast authentication in sensor networks

Multi-User Broadcast Authentication in Wireless Sensor Networks

Defending DoS Attacks on Broadcast Authentication in Wireless Sensor Networks

Mitigating dos attacks against broadcast authentication in wireless sensor networks

Mitigating DoS attacks against broadcast authentication in wireless sensor networks (2008)

PKC-Based DoS Attacks-Resistant Scheme in Wireless Sensor Networks

Mitigating DoS attacks against broadcast authentication in wireless sensor networks

Similar Documents

Mitigating Resource-Draining DoS Attacks on Broadcast Source Authentication on Wireless Sensors Networks

Providing DoS resistance for signature-based broadcast authentication in sensor networks

Pre-authentication filters: providing dos resistance for signature-based broadcast authentication in sensor networks

Containing bogus packet insertion attacks for broadcast authentication in sensor networks

Multi-User Broadcast Authentication in Wireless Sensor Networks

Defending DoS Attacks on Broadcast Authentication in Wireless Sensor Networks

Mitigating dos attacks against broadcast authentication in wireless sensor networks

Mitigating DoS attacks against broadcast authentication in wireless sensor networks (2008)

PKC-Based DoS Attacks-Resistant Scheme in Wireless Sensor Networks

Mitigating DoS attacks against broadcast authentication in wireless sensor networks