With the growing use of underwater acoustic communications (UWAC) for both industrial and military operations, there is a need to ensure communication security. A particular challenge is represented by underwater acoustic networks (UWANs), which are often left unattended over long periods of time. Currently, due to the physical and performance limitations, the UWAC packets rarely include encryption, leaving the UWAN exposed to external attacks faking legitimate messages. In this paper, we propose a new algorithm for message authentication in a UWAN setting. We begin by observing that, due to the strong spatial dependency of the underwater acoustic channel, an attacker can attempt to mimic the channel associated with the legitimate transmitter only for a small set of receivers, typically just for a single one. Taking this into account, our scheme relies on trusted nodes that independently help a sink node in the authentication process. For each incoming packet, the sink fuses beliefs evaluated by the trusted nodes to reach an authentication decision. These beliefs are based on the estimated statistics of the channel parameters, which are chosen to be the most sensitive to the transmitter-receiver displacement. Our simulation results show accurate identification of an attacker’s packet. We also report results from a sea experiment demonstrating the effectiveness of our approach.
When multiple nodes are available, the authentication process can be further enhanced. @cite_5 , a distributed authentication in wireless networks was considered where multiple sensors report their correlated measurements to a fusion center, which makes the ultimate authentication decision. @cite_20 , a similar solution using compressed sensing is studied. All these works typically assume a given channel statistic, which is used to formulate the authentication hypothesis testing problem. @cite_11 , this assumption is removed by using logistic regression techniques, which is applied to the received signal power.
@cite_5 @cite_20 @cite_11
2602063355 2133380705 1964842920 2169879363
In this preliminary work, we study the problem of distributed authentication in wireless networks. Specifically, we consider a system where multiple Bob (sensor) nodes listen to a channel and report their correlated measurements to a Fusion Center (FC) which makes the ultimate authentication decision. For the feature- based authentication at the FC, channel impulse response has been utilized as the device fingerprint. Additionally, the correlated measurements by the Bob nodes allow us to invoke Compressed sensing to significantly reduce the reporting overhead to the FC. Numerical results show that: i) the detection performance of the FC is superior to that of a single Bob-node, ii) compressed sensing leads to at least @math overhead reduction on the reporting channel at the expense of a small ( @math dB) SNR margin to achieve the same detection performance. In this paper, we investigate a binary decentralized detection problem in which a network of wireless sensors provides relevant information about the state of nature to a fusion center. Each sensor transmits its data over a multiple access channel. Upon reception of the information, the fusion center attempts to accurately reconstruct the state of nature. We consider the scenario where the sensor network is constrained by the capacity of the wireless channel over which the sensors are transmitting, and we study the structure of an optimal sensor configuration. For the problem of detecting deterministic signals in additive Gaussian noise, we show that having a set of identical binary sensors is asymptotically optimal, as the number of observations per sensor goes to infinity. Thus, the gain offered by having more sensors exceeds the benefits of getting detailed information from each sensor. A thorough analysis of the Gaussian case is presented along with some extensions to other observation distributions. The problem of binary hypothesis testing is considered in a bandwidth-constrained densely populated low-power wireless sensor network operating over insecure links. Observations of the sensors are quantized and encrypted before transmission. The encryption method maps the output of the quantizer to one of the possible quantizer output levels randomly according to a probability matrix. The intended (ally) fusion center (AFC) is aware of the encryption keys (probabilities) while the unauthorized (third party) fusion center (TPFC) is not. A constrained optimization problem is formulated from the point of view of AFC in order to design its decision rule along with the encryption probabilities. The objective function to be minimized is the error probability of AFC and the constraint is a lower bound on the error probability of TPFC. In the binary case the optimal solution is found and in the nonbinary case a good suboptimal solution is analytically obtained. Numerical results are presented to show that it is possible to degrade the error probability of TPFC significantly and still achieve very low probability of error for AFC. The proposed method which may be considered a PHY-layer security scheme is highly scalable since it does not increase the packet overhead or transmit power of the sensors and has very low computational complexity. A scheme is described to randomize the keys so as to defeat any key space exploration attack. In this paper, the problem of joint multichannel cooperative sensing and resource allocation is investigated. A cognitive radio network with multiple potential channels and multiple secondary users is considered. Each secondary user carries out wideband spectrum sensing to get a test statistic for each channel and transmits the test statistic to a coordinator. After collecting all the test statistics from secondary users, the coordinator makes the estimation as to whether primary users are idle or not in the channels. When a channel is estimated to be free, secondary users can get access to the channel with assigned bandwidth and power. An optimization problem is formulated, which maximizes the weighted sum of secondary users' throughputs while guaranteeing a certain level of protection for the activities of primary users. Although the problem is nonconvex, it is shown that the problem can be solved by bilevel optimization and monotonic programming. This paper is also extended to cases with consideration of proportional and max-min fairness.