arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2201.06937cs.NI
收藏

安全IoT路由:RPL网络中的选择转发攻击和基于信任的防御

Secure IoT Routing: Selective Forwarding Attacks and Trust-based Defenses in RPL Network

Jun Jiang, Yuhong Liu

摘要:

低功耗和有损网络的IPv6路由协议(RPL)是一种重要的路由协议,可实现低功耗设备的物联网网络通信。RPL使用目标函数和路由约束来为网络中的每个节点找到优化的路由路径。然而,最近的研究表明,拓扑攻击,如选择性转发攻击,对物联网网络的安全路由构成了巨大的挑战。另一方面,许多传统的安全路由解决方案直接应用于资源受限的物联网网络时计算量很大。迫切需要为物联网网络开发轻量级安全路由解决方案。本文首先从攻击的角度出发,设计并实现了一系列先进的选择性转发攻击,能够灵活地选择转发包的类型和百分比,以能量有效的方式,甚至恶意中伤网络中的其他无辜节点。实验结果表明,所提出的攻击可以最大化攻击后果(即丢弃的数据包数量),同时保持未被检测到。此外,我们提出了一个轻量级的基于信任的防御解决方案,以检测和消除恶意选择性转发节点的网络。结果表明,所提出的防御解决方案可以实现很高的检测精度与非常有限的额外的能量使用(即3.4%)。

英文摘要:

IPv6 Routing Protocol for Low Power and Lossy Networks (RPL) is an essential routing protocol to enable communications for IoT networks with low power devices. RPL uses an objective function and routing constraints to find an optimized routing path for each node in the network. However, recent research has shown that topological attacks, such as selective forwarding attacks, pose great challenges to the secure routing of IoT networks. Many conventional secure routing solutions, on the other hand, are computationally heavy to be directly applied in resource-constrained IoT networks. There is an urgent need to develop lightweight secure routing solutions for IoT networks. In this paper, we first design and implement a series of advanced selective forwarding attacks from the attack perspective, which can flexibly select the type and percentage of forwarding packets in an energy efficient way, and even bad-mouth other innocent nodes in the network. Experiment results show that the proposed attacks can maximize the attack consequences (i.e. number of dropped packets) while maintaining undetected. Moreover, we propose a lightweight trust-based defense solution to detect and eliminate malicious selective forwarding nodes from the network. The results show that the proposed defense solution can achieve high detection accuracy with very limited extra energy usage (i.e. 3.4%).

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑