无线传感器网络节点复制攻击和女巫攻击防御机制研究

Defense Mechanism Against Node Replication Attacks and Sybil Attacks in Wireless Sensor Networks

在无线传感器网络(WSNs)中,节点复制攻击和女巫攻击可扰乱数据融合和阈值选举等网络操作.发起这两种攻击需先通过邻居发现认证过程.考虑到在WSNs中发起邻居认证是不频繁的,提出了一种基于单向密钥链的ID认证防御机制(OKCIDA),降低攻击者在任何时间段发起这两种攻击的可能性.然后基于椭圆曲线离散对数问题,构造对称参数,并组合OKCIDA和利用节点邻居关系,提出了一种无需位置的邻居认证协议(LFNA),以阻止复制节点和女巫节点成功加入网络.最后给出了安全性证明和分析,并在安全和开销方面将LFNA与已有典型防御方案进行了比较,结果表明该方案具有一定的优势.

In wireless sensor networks （WSNs）,node repfication attacks and Sybil attacks can disrupt the network＇ s operations such as data aggregation and threshold voting schemes. To launch these attacks,it is necessary to go through the neighbor discovery verification process firstly, which is not frequent in WSNs. Considering the above observations, a one-way key chain 1D authentication （OKCIDA） defense mechanism was presentexl to decrease the probability for attackers to mount such attacks at any time.Moreover,the symmetric parameters was constructed based on the elliptic curve discrete logarithm problem; then combines with OKCIDA and utilizes node neighbor relationship, a location-free neighborhood authentication protocol （LF-NA） was introduced to stop replica nodes and Sybil nodes from successfully joining into the network.Finally,the security of LFNA was proved and analyzed. Compared with several existing important mechanisms,the proposed method is superior in security and cost.