arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 1203.4697cs.CR
收藏

FlexiSec:一种可配置的无线传感器网络链路层安全体系结构

FlexiSec: A Configurable Link Layer Security Architecture for Wireless Sensor Networks

Devesh Jinwala, Dhiren Patel, Kankar Dasgupta

摘要:

无线传感器网络(WSNs)中的通信安全确实是至关重要的,由于传感器节点中的资源的关键性,以及由于其无处不在和无处不在的部署,具有不同的属性和所需的安全程度。下一代传感器节点的激增,并没有解决这个问题,因为更强调低成本的部署。此外,无线传感器网络使用以数据为中心的多跳通信,这反过来又需要在链路层设计安全支持(增加安全相关操作的成本),而不是像一般网络那样在应用层。因此,需要一个节能的链路层安全框架。确实存在许多链路层安全架构,它们提供不同WSN应用所需的安全属性的某些组合。然而,正如我们在本文中所展示的,它们都不能满足应用程序的实际安全需求。因此,我们认为,有必要调查一个可配置的基于软件的链路层安全架构的可行性,其中应用程序可以灵活地编译,相对于其实际的安全需求。在本文中,我们分析,提出和实验的基本设计,这种可配置的无线传感器网络的链路层安全架构。我们还通过实验评估了与我们的方案相关的各个方面,即可配置的分组密码,可配置的分组密码操作模式,可配置的MAC大小和可配置的重放保护。所提出的架构旨在以最小的开销提供最佳的安全级别,从而节省无线传感器网络中的宝贵资源。

英文摘要:

Ensuring communications security in Wireless Sensor Networks (WSNs) indeed is critical; due to the criticality of the resources in the sensor nodes as well as due to their ubiquitous and pervasive deployment, with varying attributes and degrees of security required. The proliferation of the next generation sensor nodes, has not solved this problem, because of the greater emphasis on low-cost deployment. In addition, the WSNs use data-centric multi-hop communication that in turn, necessitates the security support to be devised at the link layer (increasing the cost of security related operations), instead of being at the application layer, as in general networks. Therefore, an energy-efficient link layer security framework is necessitated. There do exists a number of link layer security architectures that offer some combinations of the security attributes desired by different WSN applications. However, as we show in this paper, none of them is responsive to the actual security demands of the applications. Therefore, we believe that there is a need for investigating the feasibility of a configurable software-based link layer security architecture wherein an application can be compiled flexibly, with respect to its actual security demands. In this paper, we analyze, propose and experiment with the basic design of such configurable link layer security architecture for WSNs. We also experimentally evaluate various aspects related to our scheme viz. configurable block ciphers, configurable block cipher modes of operations, configurable MAC sizes and configurable replay protection. The architecture proposed is aimed to offer the optimal level of security at the minimal overhead, thus saving the precious resources in the WSNs.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑