Source-linked AI summary
A Survey of Attacks, Security Mechanisms and Challenges in Wireless Sensor Networks
Dr. G. Padmavathi, Mrs. D. Shanmugapriya
TL;DR
Wireless sensor networks face security risks because hostile deployment and wireless communication expose nodes and data, while limited resources constrain conventional defenses. The paper surveys security goals, attack classifications, security mechanisms, and challenges. It identifies secure aggregation, node-capture resilience, self-organization, and communication-efficient mechanisms as central security concerns.
Problem
Wireless sensor networks combine hostile deployment, broadcast-medium exposure, and constrained bandwidth, computation, memory, and energy, making security schemes difficult to design.
Method
The paper classifies wireless sensor network security goals and attacks, surveys mechanisms for handling attacks, and discusses major challenges.
Results
The paper presents classifications of attacks and security goals, discusses mechanisms including secure data aggregation, and surveys challenges such as node capture and resource scarcity.
Takeaways & Limitations
Security mechanisms for wireless sensor networks must address attack resilience while remaining efficient in bandwidth, computation, memory, and energy use.
Abstract
from arXiv · showhide
Wireless Sensor networks (WSN) is an emerging technology and have great potential to be employed in critical situations like battlefields and commercial applications such as building, traffic surveillance, habitat monitoring and smart homes and many more scenarios. One of the major challenges wireless sensor networks face today is security. While the deployment of sensor nodes in an unattended environment makes the networks vulnerable to a variety of potential attacks, the inherent power and memory limitations of sensor nodes makes conventional security solutions unfeasible. The sensing technology combined with processing power and wireless communication makes it profitable for being exploited in great quantity in future. The wireless communication technology also acquires various types of security threats. This paper discusses a wide variety of attacks in WSN and their classification mechanisms and different securities available to handle them including the challenges faced.
I. INTRODUCTION
Wireless sensor networks support monitoring and surveillance in hostile environments, making security crucial. The paper classifies attacks, security mechanisms, and challenges while outlining security goals for sensor networks.
- Wireless sensor networks support applications including wildlife monitoring, bushfire response, military command, smart buildings, and traffic monitoring.
- Hostile deployments create security requirements such as location secrecy and resistance to network subversion and destruction.
- The paper’s major contribution is a classification of security attacks, security mechanisms, and challenges in wireless sensor networks.
- The paper organizes its discussion around security goals, attacks and classifications, security mechanisms, challenges, and conclusions.
- Wireless sensor network security goals include primary CIAA goals and secondary goals suited to ad hoc constraints.
A. Data Confidentiality
Wireless sensor networks require confidentiality, authentication, integrity, availability, and freshness to protect communications and maintain dependable operation.
- A. Data Confidentiality: Confidentiality conceals sensor-network messages from passive attackers and prevents nodes from revealing data to neighbors.
- A. Data Confidentiality: Data authentication verifies sender and receiver identities, using symmetric or asymmetric mechanisms with shared secret keys.
- C. Data Integrity: Data integrity confirms that messages have not been tampered with, altered, or changed, including through false-data injection or wireless-channel damage.
- A. Data Confidentiality: Availability determines whether nodes can use resources and whether messages can communicate across the network.
- C. Data Integrity: Data freshness ensures messages are recent and prevents replay of old messages, for example by adding a nonce or time-related counter.
F. Self-Organization
Self-organization is essential because wireless sensor networks lack fixed management infrastructure and must adapt to changing situations. Secure localization also matters because manipulated location information can undermine network utility.
- F. Self-Organization: Wireless sensor networks require nodes to be independent, self-organizing, and self-healing because no fixed management infrastructure is available.
- F. Self-Organization: Without self-organization, damage from attacks or risky environments may be devastating.
- F. Self-Organization: Time synchronization supports end-to-end delay computation, collaborative tracking, and other sensor-network applications.
- F. Self-Organization: Accurate automatic localization supports fault detection, but attackers can manipulate unsecured location information by falsifying or replaying signals.
- F. Self-Organization: Wireless sensor network attacks are classified into active and passive categories, with separate general and WSN-specific classifications shown in Figures 1 and 2.
A. Passive Attacks
Passive attacks monitor communications and threaten privacy, while active attacks modify or disrupt network operation. The paper surveys routing, denial-of-service, node, physical, and message-related attacks.
- A. Passive Attacks: Passive attacks involve unauthorized monitoring and listening of the communication channel, particularly threatening privacy.
- A. Passive Attacks: Privacy attacks include eavesdropping, traffic analysis despite encryption, and camouflage nodes that attract and misroute packets.
- B. Active Attacks: Active attacks monitor, listen to, and modify data streams in the communication channel.
- B. Active Attacks: Routing attacks can spoof, alter, or replay routing information, extending or shortening routes, generating false errors, and increasing end-to-end latency.
- B. Active Attacks: Selective forwarding drops selected packets, especially after a malicious node attracts substantial traffic.
- B. Active Attacks: Sinkholes, Sybil attacks, wormholes, and HELLO floods manipulate traffic, identities, packet paths, or perceived neighborhood relationships.
- B. Active Attacks: Other attacks include denial of service, node capture, malfunction, outage, physical destruction, message corruption, false nodes, replication, and passive information gathering.
- B. Active Attacks: False nodes can inject malicious data or prevent true data from passing, while replicated nodes can corrupt or misroute packets and disconnect networks.
IV. SECURITY MECHANISM
Security mechanisms detect, prevent, and recover from attacks, and are organized into high-level and low-level categories.
- Security mechanisms are used to detect, prevent, and recover from security attacks.
- The mechanisms are categorized as high-level and low-level security schemes.
A. Low-Level Mechanism
Low-level mechanisms address key establishment, secrecy, privacy, denial-of-service resistance, secure routing, and resilience to node capture under sensor-network constraints.
- Key establishment and trust setup: Cryptographic key establishment must scale to thousands of nodes despite limited computational power and differing communication patterns.Public-key primitives may be too expensive, while compromised nodes can reconstruct a complete key pool.
- Secrecy and authentication: Secrecy and authentication protect sensor-network packets against eavesdropping, injection, and modification through cryptography.End-to-end cryptography offers strong security but requires keys among all endpoints; link-layer cryptography eases deployment but exposes messages to intermediate nodes.
- Privacy: Privacy mechanisms address concerns that sensor networks deployed for legitimate purposes may later be used in unanticipated ways.Awareness of sensor presence and data acquisition is identified as particularly important.
- Robustness to communication denial of service: Denial-of-service resilience must address jamming and medium-access violations that disrupt network communication.An adversary may broadcast a high-energy signal or repeatedly request channel access.
- Secure routing: Secure routing protects communication from denial of service, malicious routing information, and replay of legitimate routing messages.Authentication may guard against injection attacks, but some routing protocols remain susceptible to replay.
- Resilience to node capture: Node-capture resilience is difficult because attackers can access nodes, extract secrets, modify programs, or replace nodes.Tamper-resistant packaging may help but is expensive, making algorithmic solutions preferable.
B. High-Level Mechanism
High-level mechanisms secure group management, intrusion detection, and data aggregation while accommodating distributed sensor-network operation and constrained resources.
- Secure group management: Secure group management supports in-network services performed by changing groups of resource-limited nodes.Groups may jointly track vehicles, and their member nodes can change continuously and quickly.
- Intrusion detection: Intrusion detection must be fully distributed and inexpensive in communication, energy, and memory requirements.Secure groups are presented as a promising approach for decentralized intrusion detection.
- Secure data aggregation: Secure data aggregation reduces traffic by combining fine-grained sensing results before transmission to the base station.Examples include averaging regional temperature, estimating moving-object location and velocity, and reducing false alarms.
V. CHALLENGES OF SENSOR NETWORKS
Large, ad-hoc wireless sensor networks create significant security-design challenges because they impose more constraints than traditional computer networks.
- Large, ad-hoc wireless sensor networks present significant challenges for designing security schemes.The paper characterizes sensor networks as having many constraints compared with traditional computer networks.
A. Wireless Medium
Wireless communication exposes sensor networks to interception, alteration, replay, and packet injection. Dynamic topology and physical capture further require security schemes that adapt to changing and hostile deployments.
- Broadcast wireless communication enables adversaries to intercept, alter, replay, and inject packets.
- Topology changes caused by node failure, addition, or mobility prevent static network structures and require self-configuration.
- Hostile deployments allow attackers to capture and physically disassemble nodes to extract information such as cryptographic keys.
D. Resource Scarcity
Sensor networks’ limited resources constrain security mechanisms, while unreliable communication complicates protocol operation and synchronization. Large deployments additionally require scalable, computation- and communication-efficient protection.
- Extreme hardware constraints require security algorithms to minimize bandwidth, computational complexity, memory, and energy use.Communication is especially expensive in terms of power, making communication efficiency central to energy efficiency.
- Security mechanisms must scale to tens or hundreds of thousands of nodes while maintaining computational and communication efficiency.
- Connectionless packet routing is inherently unreliable, creating a communication dependency for network security.
- Wireless broadcast conflicts and multi-hop latency from congestion and node processing hinder reliable communication and synchronization.
G. Unattended Operation
Unattended sensor networks are exposed to physical attacks, remote management constraints, and the absence of centralized control. Longer unattended periods increase the likelihood of node compromise, motivating surveys of attacks, defenses, and challenges.
- Unattended deployment exposes sensors to adversaries and bad weather, making physical attacks more likely than against secured conventional computers.
- Remote management makes physical tampering and maintenance problems virtually impossible to detect.
- Distributed operation without a central management point increases network vitality but can make organization difficult, inefficient, and fragile if poorly designed.
- Longer unattended periods increase the likelihood that an adversary has compromised a node.
- The survey summarizes attacks, security mechanisms, and challenges to support safer deployments and motivate smarter, more robust mechanisms.