Wireless sensor networks (WSNs) use small nodes with constrained capabilities to sense, collect, and disseminate information in many types of applications. As sensor networks become wide-spread, security issues become a central concern, especially in mission-critical tasks. In this paper, we identify the threats and vulnerabilities to WSNs and summarize the defense methods based on the networking protocol layer analysis first. Then we give a holistic overview of security issues. These issues are divided into seven categories: cryptography, key management, attack detections and preventions, secure routing, secure location security, secure data fusion, and other security issues. Along the way we analyze the advantages and disadvantages of current secure schemes in each category. In addition, we also summarize the techniques and methods used in these categories, and point out the open research issues and directions in each area.

/pdf/sensor-network-security-a-survey-2ko4ukoih7.pdf

Sensor network security: a survey

Recently, wireless sensor networks (WSNs) have been deployed for a wide variety of applications, including military sensing and tracking, patient status monitoring, traffic flow monitoring, where sensory devices often move between different locations Securing data and communications requires suitable encryption key protocols In this paper, we propose a certificateless-effective key management (CL-EKM) protocol for secure communication in dynamic WSNs characterized by node mobility The CL-EKM supports efficient key updates when a node leaves or joins a cluster and ensures forward and backward key secrecy The protocol also supports efficient key revocation for compromised nodes and minimizes the impact of a node compromise on the security of other communication links A security analysis of our scheme shows that our protocol is effective in defending against various attacks We implement CL-EKM in Contiki OS and simulate it using Cooja simulator to assess its time, energy, communication, and memory performance

Effective Key Management in Dynamic Wireless Sensor Networks

Review: Dynamic key management in wireless sensor networks: A survey

Prior work has shown entropy-based DDOS detection is suitable for detecting low-rate DOS. A key challenge in this approach is to determine the most suitable threshold for detecting DDOS attacks accurately. To address this challenge, we propose an advanced entropy-based (AEB) scheme, which divides variable rate DDOS attacks into different fields and treats each field with different methods. Compared with prior entropy-based approaches, our scheme has significant better performance on distinguishing waves of legal traffic and flash crowds from low-rate DOS. We validate the effectiveness of our scheme by conducting extensive simulation in NS-2. Both theoretical analysis and experimental results show that our scheme can efficiently detect DDOS attacks with high accuracy.

An advanced entropy-based DDOS detection scheme

A systematic review of IP traceback schemes for denial of service attacks

A resource-efficient key management protocol is essential for security-sensitive applications in wireless sensor networks (WSN). Moreover, the dynamic pair-wise key and group key management protocols are also important for long-lived and mobile WSN. In this paper, a two-layered dynamic key management (TDKM) approach for cluster-based WSN (CWSN) is proposed. Both pair-wise key and group key are distributed in three rounds for key material exchange without encryption/decryption and exponentiation operations in TDKM. In theoretical analysis, TDKM is compared with other key management protocols to show its efficiency. Finally, the relationships between the number of groups and the system performance including key generation overhead, network security, and secured data transmission overhead in CWSN are analyzed.

Two-Layered Dynamic Key Management in Mobile and Long-Lived Cluster-Based Wireless Sensor Networks

In this paper, DDoS attack traceback and mitigation system (DATMS) is proposed to trace the DDoS attack sources based on network performance monitoring. By monitoring packet loss rate and packet arrival rate, the routers can be traced as near as attack sources on victim flows, called approximate attack entry nodes (AENs), can be traced as near as attack sources. DATMS adopts on-line analysis instead of post-mortem analysis to reduce the trace time. In addition, the packet filter controller which adapts to queue length is proposed to mitigate the DDoS attacks. Since it is extremely difficult to distinguish attack flows and victim flows on core routers, the proposed packet filter is very simple and has lower overhead. Finally, the experimental results from NS-2 simulations show that the DDoS attacks are effectively mitigated by DATMS.

An On-line DDoS Attack Traceback and Mitigation System Based on Network Performance Monitoring

In thispaper,DDoS AttackTraceback and Mitigation System (DATMS)isproposed totrace theDDoSattack sourcesbasedon networkperformance monitoring. By monitoring packet lossrateandpacket arrival rate, therouters canbetraced asnearasattack sources onvictim flows, called Approximate Attack EntryNodes(AENs), canbetraced asnear asattack sources. DATMS adopts on-line analysis instead of post-mortem analysis toreduce thetracetime. Inaddition, the packet filter controller whichadapts toqueuelength isproposed tomitigate theDDoSattacks. Sinceitisextremely difficult to distinguish attack flowsandvictim flowsoncorerouters, the proposed packet filter isverysimple andhasloweroverhead. Finally, theexperimental results fromNS-2simulations showthat theDDoSattacks areeffectively mitigated byDATMS. IndexTermsDistributed denial ofservice, Networkperformance monitoring, IPtraceback, Packet filter

Chun-Yi Wu

Papers

Two-Layered Dynamic Key Management in Mobile and Long-Lived Cluster-Based Wireless Sensor Networks

An On-line DDoS Attack Traceback and Mitigation System Based on Network Performance Monitoring

An On-lineDDoSAttackTraceback and Mitigation SystemBased on NetworkPerformance Monitoring