使用网络编码保护RPL：链式安全模式（CSM）
Securing RPL using Network Coding: The Chained Secure Mode (CSM)
摘要：
作为当今许多物联网（IoT）网络的事实上的路由协议，并且为了确保其控制消息的机密性和完整性，低功耗和有损网络路由协议（RPL）包含三种安全模式：不安全模式（UM），预装安全模式（PSM）和认证安全模式（ASM）。虽然PSM和ASM旨在防止外部路由攻击和一些重放攻击（通过可选的重放保护机制），但最近的研究表明，PSM中的RPL仍然容易受到内部和外部的许多路由攻击。在本文中，我们提出了一种新的安全模式的RPL，链式安全模式（CSM），基于流内网络编码（NC）的概念。CSM旨在增强RPL弹性和缓解重放攻击的能力，同时允许与入侵检测系统（IDS）等外部安全措施集成。在邻居攻击（NA）、虫洞攻击（WH）和克隆ID攻击（CA）下，以平均包传输率（PDR）、端到端（E2E）延迟和功耗为指标，对CSM的安全性和性能进行了评估，并与UM和PSM中的RPL（有和没有可选的重放保护）进行了比较。结果表明，CSM具有更好的性能和更强的安全性比UM和PSM与重放保护，同时减轻NA和WH攻击，并显着降低CA的影响，在调查的情况下。
英文摘要：
As the de facto routing protocol for many Internet of Things (IoT) networks nowadays, and to assure the confidentiality and integrity of its control messages, the Routing Protocol for Low Power and Lossy Networks (RPL) incorporates three modes of security: the Unsecured Mode (UM), Preinstalled Secure Mode (PSM), and the Authenticated Secure Mode (ASM). While the PSM and ASM are intended to protect against external routing attacks and some replay attacks (through an optional replay protection mechanism), recent research showed that RPL in PSM is still vulnerable to many routing attacks, both internal and external. In this paper, we propose a novel secure mode for RPL, the Chained Secure Mode (CSM), based on the concept of intraflow Network Coding (NC). The CSM is designed to enhance RPL resilience and mitigation capability against replay attacks while allowing the integration with external security measures such as Intrusion Detection Systems (IDSs). The security and performance of the proposed CSM were evaluated and compared against RPL in UM and PSM (with and without the optional replay protection) under several routing attacks: the Neighbor attack (NA), Wormhole (WH), and CloneID attack (CA), using average packet delivery rate (PDR), End-to-End (E2E) latency, and power consumption as metrics. It showed that CSM has better performance and more enhanced security than both the UM and PSM with the replay protection, while mitigating both the NA and WH attacks and significantly reducing the effect of the CA in the investigated scenarios.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
