H2BSAP : a Hop-by-Hop broadcast source authentication protocol for WSN to mitigate DoS attacks

Chakib Bekara (1, 2, 3) , Maryline Laurent (4, 1, 2, 3) , Kheira Bekara (1, 2, 3)

1 LOR - Département Logiciels et Réseaux
2 SAMOVAR - Services répartis, Architectures, MOdélisation, Validation, Administration des Réseaux
3 CNRS - Centre National de la Recherche Scientifique
4 R3S-SAMOVAR - Réseaux, Systèmes, Services, Sécurité

Broadcast communications is a dominant communication pattern in WSN. In such type of communications, broadcast source authentication is a major security concern, to avoid that an attacker impersonates a broadcast source, modifies its data, or simply broadcasts useless data in order to deplete the limited energy of sensors. Several Broadcast Source Authentication Protocols (BSAPs) were proposed in the literature, amongst them we found time asymmetry- based BSAPs like μTESLA [1] protocol. Time asymmetry-based BSAPs, suffer from a kind of DoS attack, called resource-draining attack, in which an attacker floods the network with fake messages that all sensors of the network buffer and forward, then later verify, thus causing buffer overflow and batteries depletion. In this paper we propose H2BSAP protocol, to overcome this kind of DoS attacks, by achieving a hop-by-hop authentication of broadcasted messages, thus limiting the damage of an attacker to its one-hop neighbors only, instead of the entire network

Domaines: Cryptographie et sécurité [cs.CR]; Réseaux et télécommunications [cs.NI]

Chakib Bekara, Maryline Laurent, Kheira Bekara. H2BSAP : a Hop-by-Hop broadcast source authentication protocol for WSN to mitigate DoS attacks. ICCS 2008 : 11th IEEE International Conference on Communication Systems, Nov 2008, Guangzhou, China. pp.1197 - 1203 ⟨10.1109/ICCS.2008.4737372⟩. ⟨hal-01327378⟩