Secure Re-Keying in Group Key Management Using Combinatorial Designs

Many key pre-distribution (KPD) schemes based on combinatorial design were proposed for secure communication of wireless sensor networks (WSNs). Due to complexity of constructing the combinatorial design, it is infeasible to generate key rings using the corresponding combinatorial design in large scale deployment of WSNs. In this paper, we present a definition of new combinatorial design, termed “µ-partially balanced incomplete block design (µ-PBIBD)”, which is a refinement of partially balanced incomplete block design (PBIBD), and then describe a 2-D construction of µ-PBIBD which is mapped to KPD in WSNs. Our approach is of simple construction which provides a strong key connectivity and a poor network resilience. To improve the network resilience of KPD based on 2-D µ-PBIBD, we propose a KPD scheme based on 3-D Ex-µ-PBIBD which is a construction of µ-PBIBD from 2-D space to 3-D space. Ex-µ-PBIBD KPD scheme improves network scalability and resilience while has better key connectivity. Theoretical analysis and comparison with the related schemes show that key pre-distribution scheme based on Ex-µ-PBIBD provides high network resilience and better key scalability, while it achieves a trade-off between network resilience and network connectivity.

Security of wireless sensor networks (WSN) is an important feature, as they are used in critical applications such as surveillance, monitoring, tracking and controlling etc. Secure and reliable communication is highly important in delivering critical information correctly and in-time by low-powered sensor motes (SM). Many secure WSNs protocols have been proposed but they have focused primarily on denial-of-communication at the routing or medium access control levels. Although WSNs have interesting distinctiveness (i.e., minimum set-up cost, unattended network operation), and because of the wireless medium (i.e., there are no gateways or routers to observe data flow), the security of these networks is the main issue, particularly when privacy is the main theme. Secure communication in WSNs reclines in the security of their routing protocols. However, resource bound security solutions are needed for WSNs. This paper has proposed novel security mechanism by combining features of two security architectures in WSNs, i.e., TESLA from SPINE and Bloom Filters (BF) from MiniSec. We have used TOSSIM for simulation and showed that our proposed mechanism perform better than other security schemes.

With the development of wireless communication technology and sensor technology, the wireless sensor network (WSN) has been widely used in various applications, such as military surveillance, environment monitoring industry control, medical monitoring, and so on. In most of the cases, WSNs are deployed in unattended environment. So, these are more vulnerable to various attacks than traditional networks. To protect communications in WSNs, mutual authentication and key agreement schemes for WSNs have been studied widely. Recently, Xue et al. proposed a temporal-credential-based mutual authentication and key agreement scheme for WSNs and claimed their scheme could withstand various attacks. However, in this paper, we will point out that their scheme is vulnerable to the off-line password guessing attack, the user impersonation attack, the sensor node impersonation attack and the modification attack. To overcome weaknesses in Xue et al.'s scheme, we also propose a new temporal-credential-based mutual authentication and key agreement scheme for WSNs. Security analysis shows our scheme could overcome weaknesses in Xue et al.'s scheme. Performance analysis shows our scheme also has better performance. Therefore, our scheme is more suitable for providing secure communication in WSNs.

Perkembangan teknologi informasi menimbulkan tantangan keamanan data, terutama pada Wireless Sensor Network (WSN) yang rentan terhadap penyadapan. LoRa (Long Range) sering digunakan dalam WSN, tetapi memiliki kelemahan dalam keamanan komunikasi antar node. Untuk mengatasi hal ini, diperlukan sistem autentikasi yang kuat, seperti manajemen kunci. Algoritma ElGamal dipilih karena keamanannya berbasis logaritma diskret dan fleksibilitasnya dalam pengaturan ukuran kunci. Penelitian ini mengimplementasikan Algoritma ElGamal pada WSN dengan LoRa sebagai media transmisi. Perangkat yang digunakan adalah ESP32 Devkit V1 dan LoRa Ra-2 SX1278 pada node master, serta sensor HC-SR04 dan Flame Sensor pada node slave. Hasil menunjukkan Algoritma ElGamal mencapai ketepatan 100% dalam pengiriman data dengan delay 0,289 detik. Daya tahan baterai mencapai 2 jam 58 menit 38 detik. Pengujian intrusi membuktikan Algoritma ElGamal mampu mengamankan data melalui enkripsi dan dekripsi. Kesimpulannya, implementasi Algoritma ElGamal berhasil menjaga keamanan komunikasi dalam WSN, memastikan keaslian pesan, serta menjaga kinerja perangkat selama proses pengiriman dan penerimaan data. ABSTRACT The advancement of information technology presents data security challenges, especially in Wireless Sensor Networks (WSN), which are vulnerable to eavesdropping. LoRa (Long Range) is commonly used in WSN but has weaknesses in securing node communication. To address this, a strong authentication system is required, such as key management. The ElGamal algorithm is chosen for its security based on discrete logarithms and flexibility in key size configuration. This study implements the ElGamal algorithm in a WSN system using LoRa as the transmission medium. Devices used include the ESP32 Devkit V1 and LoRa Ra-2 SX1278 on the master node, along with the HC-SR04 sensor and Flame Sensor on the slave node. Results show that the ElGamal algorithm achieves 100% accuracy in data transmission with a delay of 0.289 seconds. The battery lasts for 2 hours, 58 minutes, and 38 seconds. Intrusion testing proves that the ElGamal algorithm secures data through encryption and decryption. In conclusion, implementing the ElGamal algorithm successfully ensures secure communication in WSN, maintains message authenticity, and sustains device performance during data transmission and reception.

International audience

Wireless sensor networks (WSN) are generally employed in unattended hostile areas such as forest monitoring, agriculture fields, military battlefields. An adversary can physically capture WSN deployed in a hostile environment. Once an adversary captures a node, the cryptographic information and the software program can be easily extracted. Also, the adversary can reprogram the software inside the node. After reprogramming, the adversary can replicate and deploy the node with multiple identities to do malicious activities. This kind of identity theft attack can be classified as Clone attack or Sybil attack. These identity theft attacks are addressed by many distributed, centralised and localised solutions. Most of these solutions utilise private/public key, and symmetric key algorithms are energy and memory demanding, while the WSN are energy and memory constrained. This paper proposes a novel Sybil attack detection protocol (NoSad) to identify and isolate the Sybil attack in WSN. This protocol is a localised method using intra-cluster communication and RSSI value to identify the Sybil node. The proposed protocol is simulated extensively with various topologies, and obtained results prove that the protocol is highly efficient in detection ratio, energy utilisation, memory usage, computation and communication requirement. This protocol may be used in any resource-constrained WSN to obtain a satisfactory result. This work provides a solution for different scenarios of Sybil node position to counter the Sybil attack in WSN.

Wireless Sensor Networks (WSNs) emerge recently as one of the most attractive research subjects. The resourceconstraint characteristics of WSNs limit the secure design and development of security protocols for them. Whilst, sensor nodes those usually operate in unattended and even harsh environments, are prone to failures and are vulnerable to malicious attacks. For reliable and secure communications in WSNs, intrusion-tolerant routing becomes a critical attribute that should be integrated into WSNs. In this paper, we study two intrusiontolerant routing protocols for WSNs, namely INSENS and ITSRP, as well as analyze the intrusion-tolerant properties gained from these two propositions. Simulation and performance analysis have proved that both of them are practical.

Developing effective security solutions for wireless sensor networks (WSN) are not easy due to limited supplies of WSNs and the hazardous nature of wireless medium. The implementation of encryption/decryption algorithms, which are the most essential part of the secure communication, can be very intricate in WSNs since, they incorporate routines, having very complex and intense computing procedures. Therefore, WSNs must be designed in such a way that a compromise should be established by balancing between the security level and the processor overhead. The aim of this paper is to investigate the suitability of the Scalable Encryption Algorithm (SEA) in use for a secure communication in WSNs. In order to confirm the effectiveness of SEA, a comparative performance evaluation with AES and RC6 algorithms are presented in terms of memory requirement, execution time, and bandwidth criteria. According to the results obtained from the target development platform, SEA has better performance than AES in respect of memory requirements and bandwidth, on the other hand, it has surpassed RC6 algorithm in terms of execution time and total memory requirement. As a result, SEA can be a strong alternative block cipher for WSNs.

Wireless sensor networks (WSNs) are regularly employed in risky, uncontrolled situations. WSNs are vulnerable to physical intrusion and security threats. Strong security measures must thus be implemented to secure networks where detecting intrusions are generally acknowledged as one of the most effective security methods for protecting a network from malicious assaults and illegal access. Recent study proposes an improved IDS based on modified binary grey wolf optimizer with support vector machine (GWOSVM-IDS). Optimal wolf counts are found using 3,5,7 wolves. The suggested technique attempts to enhance accuracies of intrusion detections while minimizing processing times with lower false alarm rates and feature counts created by IDS in WSNs. However in existing work sensor nodes consumes more energy to perform packet transmission. More energy consumption may lead to network failure because of this reason energy is the very important parameter in WSNs. Additionally, Grey Wolf Optimizer (GWO) performs poorly in local searches and has a slow convergence rate, both of which might affect intrusion detection effectiveness. Support vector machine (SVM) is unsuitable for managing huge data sets. Increased feature counts per data points during training results in poor SVM performances. To address these challenges, the suggested study suggests node clustering, which is accomplished with weighted KMC. Cluster heads (CHs) will be chosen using Mutation Based Improved Butterfly Optimization (MBIBO). To construct secure communications in WSNs, Improved Whale Optimizations (IWO) for feature selections from input network security laboratory dataset is developed, which reduces time consumption and increases intrusion detection efficiency. Experimental findings demonstrate efficacy of the suggested models in terms of packet delivery ratios, end-to-end latencies, throughputs, and attack detection rates.

Wireless Sensor Networks (WSN) has top-notch capacity for numerous domains of utility due to the potential to sense and apprehend unattended environments. IoT is playing an increasingly more essential position in clever healthcare, smart transportation and elegant grid using WSN. Therefore, challenges like privacy and data security associated with IoT wireless sensor networks because of sensor node being captured easily, consume less computing energy and low storage. Designing a secure authentication scheme will enable secure communication in WSN. Here, we proposed a improved three-factor authentication scheme for WSN utilizing biometric, password and smart card withstand against security attacks. Subsequently, by comparing the security, functional and performance parameters of our proposed scheme to the other schemes, our scheme provides better and efficient one. Therefore, our scheme is fairly workout in real time IoT applications involved in WSN scenario.

Purpose In the past recent years, wireless sensor network (WSN) has progressively grown as an emerging technology. Various research efforts have been made in the literature to address the problem associated with WSN security. Based on the review analysis, it is found that the existing methods are mostly associated with complex security operations that are not suitable for resource constraint sensor nodes. The proposed paper has presented cost-effective modeling of the security framework that addresses the problem of security and energy in WSN. Design/methodology/approach The proposed security framework implements two different protocols to attain maximum security services and optimizes the security operation of the proposed security models to achieve higher energy efficiency and privacy preservation against a majority of the lethal attacks. The first security model introduces a novel cost-efficient pairwise key-based authentication mechanism to identify the availability of optimal routes under the presence of adversary in the network. The second security model introduces an integrated part of the first security model that optimizes security operation to perform secure communication using a lightweight encryption mechanism. Findings Based on the experimental outcome and analysis, the proposed system attains a 60% performance improvement in terms of security and computational efficiency compared to the existing Sec-LEACH. The second security model has achieved a 50% improvement in terms of overall aspects like reduction in transmission delay, packet delivery ratio, remaining energy and communication performance. Originality/value The proposed study has presented a computationally efficient model that provides lightweight security operations based on secure hash function. It also focuses on the security associations between WSN nodes and the selection of reliable routes for secure data transmission. The design of the proposed security model is best suited for homogeneous and heterogeneous sensor networks, which will be robust to any attacking scenario.

\nThe monitoring, control, and security guarantee for the communication in the wireless sensor networks (WSNs) are currently treated as three independent issues and addressed separately through specialized tools. However, most cases of WSNs applications requires the network administrator change the network configuration in a very short time to response to the change of observed phenomenon with security guarantee. To meet this requirement, we propose a security enhanced monitoring and control platform named SecMAS for WSNs, which provides the real-time visualization about network states and online reconfiguration of the network properties and behaviours in a resource-efficient way. Besides, basic cryptographic primitives and part of the anomaly detection functionalities are implemented in SecMAS to enabling the secure communication in WSNs. Furthermore, we conduct experiments to evaluate the performance of SecMAS in terms of the latency, throughput, communication overhead, and the security capacity. The experimental results demonstrate that the SecMAS system achieves stable, efficient and secure data collection with lightweight quick-response network control.\n

To get inexpensive resolution of real-world problems such as weather forecasting, measurement of underground water label, traffic monitoring, activity of enemies, animals counting in forest, and so on, wireless sensor networks (WSNs) are widely used. Energy-efficient routing protocol is needed to provide the longevity of network lifetime by reducing power consumption of sensor nodes as well as whole networks. Besides, authenticity of sensor nodes and privacy of sensed data are needed in routing protocol for WSNs to provide secure communications, i.e., sensor-to-sensor as well as sensors-to-base station. Clustering technique provides an energy-efficient topology control approach. A minimum connected dominating set (MCDS) can be discovered by applying clustering technique which reduces power consumption in inter-cluster network routing. Cluster head and route selection can be used to provide an energy-efficient outer-cluster routing in WSNs. Identity-based scheme can be used to provide a secure secret message passing mechanism in WSNs. This paper has ng in wireless sensor network framework (E2SDRSNF) which consists of three proposed components. The proposed Algorithm 1 creates a MCDS which is used to build virtual backbone for energy-efficient inter-cluster routing. Data flows through the discovered virtual backbone nodes to base station via cluster heads which is discovered by applying proposed Algorithm 2. The proposed signcryption technique is used for secure communication in WSNs. The analysis of the proposed framework shows that it can save 2720 nJ/bit/m\(^2\) energy than LEACH protocol for one communication (transmission/receiving) along with the security.

Wireless sensor networks (WSNs) consists of small nodes with constrained capabilities to sense, collect, and disseminate information in many types of applications. Wireless sensor networks (WSN) have attracted significant interests from the research community in a wide range of applications such as target tracking, environment monitoring, military sensing, distributed measurement of seismic activity, and so on.As sensor networks become wide-spread, security issues become a central concern. In this paper, we identify the Security requirements of key management in WSN. The secure management of the keys is one of the most critical elements when integrating cryptographic functions into a system. An outline of hybrid cryptography, one way hash and Key infection schemes are discussed in this paper. Along the way we analyze the advantages and disadvantages of current secure schemes. Finally, we aim to provide the different techniques of efficient key management operations for secure communications in WSN.

With the development of the wireless communication technology and the sensor technology, the wireless sensor network (WSN) has been used in many applications. However, WSNs suffer from some inherent weaknesses because of restricted communication and hardware capabilities. To achieve essentially secure communication in WSNs, a few of key management models have been proposed since it is the crucial important building block for all security goals in WSNs. Recently, Alagheband and Aref proposed a signcryption scheme and used it to construct a dynamic key management model for hierarchical heterogeneous sensor networks. They also proved that their signcryption scheme is provably secure if the elliptic curve discrete logarithm problem is infeasible. Unfortunately, by giving concrete attacks, we indicate that Alagheband and Aref’s signcryption scheme is not secure in their secure model. The analysis also shows that their key management model is not secure. To solve those weaknesses, we also proposed an improved signcryption scheme.