|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Session 5B: Security and Privacy II
|
|
|
|
|
Title:
|
Multigrade Security Monitoring for Ad-Hoc Wireless Networks
|
|
|
|
|
Author(s):
|
Matthew Tan Creti, Purdue University, USA ; Matthew Beaman, Purdue University, USA; Saurabh Bagchi, Purdue University, USA; Zhiyuan Li, Purdue University, USA; Yung-Hsiang Lu, Purdue University, USA
|
|
|
|
|
Abstract:
|
Ad-hoc wireless networks are being deployed in critical applications that require protection against sophisticated adversaries. However, wireless routing protocols, such as the widely-used AODV, are often designed with the assumption that nodes are benign. Cryptographic extensions such as Secure AODV (SAODV) protect against some attacks but are still vulnerable to easily-performed wormhole-based attacks. We present a protocol called Route Verification (RV) that can detect and isolate malicious nodes involved in routing-based attacks with very high likelihood. However, RV is expensive in terms of energy consumption due to its radio communications. To remedy the high energy cost of RV, we propose a multigrade monitoring (MGM) approach. The MGM approach employs previously developed lightweight local monitoring techniques to detect any necessary condition for an attack to succeed. However, local monitoring suffers from false positives due to collisions on the wireless channel. When a necessary condition is detected through local monitoring, the heavy-weight RV protocol is triggered. We show through simulation that MGM applied to AODV generally requires little extra energy compared to baseline AODV, under the common case where there is no attack present. The SAODV protocol on the other hand incurs a large energy expenditure. The key parameter in MGM is the threshold for triggering RV, where the trade off is that short-lived attacks can be missed, but RV is invoked less frequently leading to energy savings. Our work, for the first time, lays out the framework of multigrade monitoring, which we believe fundamentally addresses the tension between security and resource consumption in ad-hoc wireless networks.
|
|
|
|
|
|
|
|
|
