论文标题
将网络编码引入RPL:链式安全模式(CSM)
Introducing Network Coding to RPL: The Chained Secure Mode (CSM)
论文作者
论文摘要
低功率和有损网络(RPL)的当前路由协议包括三种安全模式:无抵押模式(UM),预安装安全模式(PSM)和身份验证的安全模式(ASM)。尽管PSM和ASM旨在防止外部路由攻击和一些重播攻击(通过可选的重播机制),但最近的研究表明,PSM中的RPL仍然容易受到许多内部和外部路由攻击的影响。在本文中,我们基于Intraflow网络编码的概念,为RPL提出了一种新颖的安全模式,即链式安全模式(CSM)。 CSM的主要目标是增强针对重播攻击的RPL弹性,并能够减轻其中一些。在存在邻居攻击的情况下,评估了CSM的概念证明原型的安全性和性能(并与UM和PSM中的RPL相比)。这表明,与重播保护相比,与UM和PSM相比,CSM具有更好的性能和更高的安全性。另一方面,它表明需要有适当的恢复机制来丢失控制消息。
The current standard of Routing Protocol for Low Power and Lossy Networks (RPL) incorporates three modes of security: the Unsecured Mode (UM), Preinstalled Secure Mode (PSM), and the Authenticated Secure Mode (ASM). While the PSM and ASM are intended to protect against external routing attacks and some replay attacks (through an optional replay protection mechanism), recent research showed that RPL in PSM is still vulnerable to many routing attacks, both internal and external. In this paper, we propose a novel secure mode for RPL, the Chained Secure Mode (CSM), based on the concept of intraflow Network Coding. The main goal of CSM is to enhance RPL resilience against replay attacks, with the ability to mitigate some of them. The security and performance of a proof-of-concept prototype of CSM were evaluated and compared against RPL in UM and PSM (with and without the optional replay protection) in the presence of Neighbor attack as an example. It showed that CSM has better performance and more enhanced security compared to both the UM and PSM with the replay protection. On the other hand, it showed a need for a proper recovery mechanism for the case of losing a control message.