Wireless sensor nodes lack hardware support for tamper- resistance and are often deployed in unattended environ- ments, thus leaving them vulnerable to capture and com- promise by an adversary. In a node replication attack, an adversary uses the credentials of a compromised node to surreptitiously introduce replicas of that node into the net- work. These replicas are then used to launch a variety of attacks that subvert the goal of the sensor application, and the operation of the underlying protocols. We present a novel distributed approach called Localized Multicast for detecting node replication attacks. We evaluate the perfor- mance and security of our approach both theoretically and via simulation. Our results show that Localized Multicast is more efficient than previous distributed approaches in terms of communication and memory costs. Further, in our ap- proach, the probability of detecting node replicas is much higher than that achieved in previous distributed protocols.
Citation:
Bo Zhu, Venkata Gopala Krishna Addada, Sanjeev Setia, Sushil Jajodia, Sankardas Roy, "Efficient Distributed Detection of Node Replication Attacks in Sensor Networks," acsac, pp.257-267, Twenty-Third Annual Computer Security Applications Conference (ACSAC 2007), 2007