WSN中基于多项式的节点捕获攻击防御方法

Polynomial-based defense scheme against node capture attack in WSN

针对无线传感器网络中捕获节点所带来的安全威胁,提出一种基于二元多项式的节点捕获攻击的防御方法。该方法将节点密钥信息与节点部署时间和身份标志进行绑定,当节点之间协商会话密钥时,节点间需相互验证部署时间与当前时间的差值,并结合基站验证节点的合法性。方案在阻止攻击者利用捕获节点窃听网络通信的同时,防范捕获节点与合法节点建立会话密钥,有效地防止了捕获节点重新加入网络。通过分析证明了该方案的安全性且系统开销低。

Considering the security issue caused by captured node in wireless sensor networks,this paper presented a polynomial-based scheme to defend node capture attack.This scheme bounded the key material of each node with its original deployment time and identity.When the nodes negotiated the session key,they needed to mutually authenticate the interval time among the deployment time and the current time,and it made use of the base station to verify the legitimacy of the node.This scheme could prevent attackers from eavesdropping communication,and avoid the captured nodes establishing a session key with legitimate nodes at the same time,which effectively prevented the capture nodes re-joining the network.Analysis shows the safety and low system overhead of the scheme