基于TinySec协议的DoS攻击的防御实现  

Defending against DoS attacks based on TinySec

作　　者：郭远洋[1] 张红梅[1] 吕兆辉[1] 

机构地区：[1]桂林电子科技大学信息与通信学院,广西桂林541004

出　　处：《桂林电子科技大学学报》2013年第2期96-101,共6页Journal of Guilin University of Electronic Technology

基　　金：国家自然科学基金(61163060);广西科学研究与技术开发计划(桂科攻12118017-2C)

摘　　要：广播是WSN中的基本通信方式,TinySec协议可有效保证广播数据包的认证安全,且协议开销小,但易遭受DoS攻击,比如攻击节点不断伪造虚假认证包来消耗网络和节点资源。针对这种情况,提出一种TinySec协议的改进方案,通过引入节点ID验证和信誉等级制来限制DoS攻击范围,并使用单向密钥链进行弱认证来防御攻击。仿真实验表明,改进后的协议比现有的TinySec协议更安全,能有效防御广播认证中的DoS攻击。相比于其他防御方案,本方案的系统开销小,实时性高。Broadcasting is a basic information transmission way in wireless sensor networks. Tinysec is a protocol that provides secure authentication of broadcast packets with low consumption, but which is vulnerable for DoS at- tacks such as continuous forged authentication packets from attackers deplete legitimate nodes~ power. To defense against DoS attacks, an improved TinySec protocol is proposed by introducing nodes~ ID authentication and reputa- tion grades to restrict the DoS attack area and using hash-function chain for weak authentication. The simulation results show that the improved TinySec protocol performs well in broadcasting authentication against DoS attacks. Compared with other schemes, the proposed one consumes less time and energy.

关 键 词：无线传感器网络 广播认证 TinySec DOS攻击 信誉等级制 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]