Security Mechanisms for Organic Mesh Networks - CAST Security Award 2007

A Security Framework for Organic Mesh Networks Dipl.-Math., Dipl.-Inform. Kalman Graffi Technische Universität Darmstadt KOM - Multimedia Communications Lab Dept. of Electrical Engineering and Information Technology, Dept. of Computer Science Merckstr. 25, D-64283 Darmstadt, Germany, Kalman.Graffi@KOM.tu-darmstadt.de Tel.+49 6151 164959, Fax. +49 6151 166152

Wireless Mesh Network: What’s a Mesh? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],source: http://www.washoetribe.us

Outline ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Requirement/Challenge: Authenticity ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Requirement/Challenge: Secure Routing ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],F C D H E I G J L K N R M O P Q S T S D A B

Requirement/Challenge: Misbehavior Detection ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],F J M Q S D

Contribution of the Thesis ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],AntSec Routing Algorithm Reputation Management System WatchAnt Misbehavior Detector LeakDetector Bootstrapping

Principles of Ant Routing ,[object Object],[object Object],[object Object],[object Object],[object Object],Source: [Dorigo98] Route discovery: Results:

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],AntSec: Routing Protocol Need AuthToken of D = 0 Need PubKey of D = 1 Need AuthToken of D = 0 Need PubKey of D = 0 Timestamp of creation Public Key of D . A B C D F G E S Discovery FANT Authorization Token of S G, QualityInfo_G E, QualityInfo_E C, QualityInfo_C D, QualityInfo_D Backward Ant Signed by D Source Dest. { Needed for Ant Routing

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],AntSec: Security Features

WatchAnt: Main Principles ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Broadcast answer Packets ? A B C K L U X Y

Simulation Results: Detection Quality Setup: 6 nodes , 2 flows, fixed topology, protocol: AntSec Varying: drop ratio of single malicious node Metrics: detection time, reputation of malicious node Reputation table: ,[object Object],[object Object],[object Object],[object Object],-40 to -60 -25 to -40 0 to -25 25 to 0 considered malicious no reput. gain slower recovery normal behavior

Simulation Results: Throughput Mean delivery ratio: Mean delivery ratio over time: ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Setup: 50 nodes, 25 flows, random topology, protocols: Ant(Sec),DSR Varying: fraction of malicious nodes Metrics: throughput, overhead

Conclusion to AntSec and WatchAnt ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Contribution and Impact of the Thesis ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],AntSec Routing Algorithm Reputation Management System WatchAnt Misbehavior Detector Leak Detector Bootstrapping

Questions? Kalman Graffi Peer-to-Peer Research Group Dept. of Electrical Engineering and Information Technology Multimedia Communications Lab · KOM Merckstr. 25 · 64283 Darmstadt · Germany Phone (+49) 6151 – 16 49 59 Fax (+49) 6151 – 16 61 52 [email_address] Further information: http://www.KOM.tu-darmstadt.de/ Publications: http://www.KOM.tu-darmstadt.de/Research/Publications/publications.html

Example for WatchAnt ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Out_Stack: K A/B  K  U Out_Stack: U K  U  X/Y In_Stack: X A  U  X In_Stack: Y A  U  Y K L X Y U A B C 1. Packets ? 2. Broadcast answer Example : Node K checks behavior of node U H9 H8 H7 H6 H5 H4 H3 H2 H1 Hash B B B B B A A A A Prev. U U U U U U U U U Next H9 H8 H7 H6 H5 H4 H3 H2 H1 Hash K K K K K K K K K Prev. X X Y X Y X X Y X Next H6 U K U U U U Pre K K K K Pre Pre H9 H4 H3 H1 Hash H8 U K U U U Pre K K K Pre Pre H7 H5 H2 Hash

Security Mechanisms for Organic Mesh Networks - CAST Security Award 2007

Recommandé

Recommandé

Contenu connexe

Tendances

Tendances (18)

Similaire à Security Mechanisms for Organic Mesh Networks - CAST Security Award 2007

Similaire à Security Mechanisms for Organic Mesh Networks - CAST Security Award 2007 (20)

Plus de Kalman Graffi

Plus de Kalman Graffi (20)

Security Mechanisms for Organic Mesh Networks - CAST Security Award 2007

Notes de l'éditeur