Security in Mobile Wireless Sensor Networks – A Survey <s> IV. SECURITY REQUIREMENTS <s> Recently, wireless sensor networks (WSN) have gained great popularity, mainly because they provide a low cost alternative to solving a great variety of real-world problems (Akyildiz, Su, & Sankarasubramaniam, 2003). Their low cost enableds the deployment of large amounts of sensor nodes (in the order of thousands, and in the future perhaps millions), which most of the time operate under harsh environments. WSN present extreme AbstrAct <s> BIB001 </s> Security in Mobile Wireless Sensor Networks – A Survey <s> IV. SECURITY REQUIREMENTS <s> For courses in Computer/Network Security. In recent years, the need for education in computer security and related topics has grown dramatically -- and is essential for anyone studying Computer Science or Computer Engineering. This is the only text available to provide integrated, comprehensive, up-to-date coverage of the broad range of topics in this subject. In addition to an extensive pedagogical program, the book provides unparalleled support for both research and modeling projects, giving students a broader perspective. The Text and Academic Authors Association have named Computer Security: Principles and Practice the winner of the Textbook Excellence Award for the best Computer Science textbook of 2008. Visit Stallings Companion Website at http://williamstallings.com/CompSec/CompSec1e.html for student and instructor resources and his Computer Science Student Resource site http://williamstallings.com/StudentSupport.html Password protected instructor resources can be accessed here by clicking on the Resources Tab to view downloadable files. (Registration required) Supplements Include: *Power Point Lecture Slides*Instructor's Manual*Author maintained website . <s> BIB002
In this section, we introduce security requirements which need to be met in MWSNs. • Confidentiality: Due to the open nature of MWSNs, confidentiality is necessary to enable sensors to protect data from eavesdroppers. For example, a message should be understood by desired recipients rather than attackers. The standard solution to keep sensitive data secret is to encrypt the data with a secret key known only by the desired recipients. Since public key cryptography is too resource demanding for commodity sensors, one can use symmetric key encryption (e.g., Data Encryption Standard (DES) and Advanced Encryption Standard (AES)) and a shared secret key between the communicating parties to achieve confidentiality. • Integrity: Ensuring the integrity of sensed data is important for preventing data from being modified by attackers. Unlike confidentiality, integrity is, in most cases, a mandatory property. Upon receiving a message from a sensor, the sink wants to ensure that the received message is exactly the same as that is sent by the sensor (i.e., it contains no modifications, insertions, deletions, or replays). • Authentication: Authentication defines the security requirement that any sensor node can ensure the identity of the peer node with which it is communicating BIB002 . Since communication between sensor nodes is based on wireless communication medium, sensor nodes should be able to detect maliciously injected or spoofed packets. In addition, data integrity and sensor authentication are essential security requirements in most sensor applications BIB001 . An attacker might modify and delete data generated by sensors. Data generated by sensors thus have to be authenticated before they are accepted as valid data and are used for whatever purposes. MWSNs should have the ability to store any significant events that occur inside the network. Auditing is necessary because of the autonomous nature of the sensors. In some scenarios, sink (or base station) will not always be available, so sensors should be able to store the sensed data till a mobile sink visits the network to retrieve the data. • Non-repudiation: Providing non-repudiation requires protection against denial by one of the communication parties. More specifically, a node (or sink) cannot deny sending the message it has previously sent. A common method of providing non-repudiation is to produce certain evidence to prove that the communication party has performed a task. • Privacy and Anonymity: Providing privacy and anonymity is very important. In some scenarios, identities and locations of sensors and sink (or base station) should be protected or hidden. For example, when considering battlefield surveillance, soldiers equipped with mobile sinks, which can be used to access the network to obtain information about enemy activities, will be in danger if their locations are revealed.