An Adaptive Security System in Incrementally Deployed Sensor Networks

• Main Authors: Meng-Yen Hsieh, 謝孟諺
• Other Authors: Yueh-Min Huang
• Format: Others
• Language: en_US
• Published: 2007
• Online Access: http://ndltd.ncl.edu.tw/handle/16977362289169391593

博士 === 國立成功大學 === 工程科學系碩博士班 === 95 === Distributed wireless sensor networks have problems of detecting and preventing malicious nodes. Therefore, sensor networks need an authentication service for sensor identity and message transmission. Intrusion detection and prevention schemes are always integrated in sensor security appliances to enhance network security. My thesis develops secure communications in a cluster-based sensor network (SecCBSN) using adaptive security modules. A dynamic authentication scheme in the proposed primary security module enables existing nodes to authenticate new incoming nodes, triggering the establishment of secure links and broadcast authentication between neighboring nodes. This primary security design prevents intrusion from external malicious nodes. For advancing security, the proposed modules can also exclude internal compromised nodes using an intrusion detection module, which contains an alarm return, trust evaluation, and black and white lists. The two modules are adopted to achieve secure communication in cluster-based sensor networks when the network lifetime is divided into multiple cluster rounds. Finally, the security analysis results indicate that the proposed design can prevent and detect malicious nodes using monitor mechanisms with a high probability of success. According to the performance evaluation results, the proposed security modules result low storage, computation, and communication overhead in sensor nodes.