An Efficient Trusted Computing Base for MANET Security  

作　　者：Somya D. Mohanty Vinay Thotakura Mahalingam Ramkumar 

机构地区：[1]Social Science Research Center, Mississippi State University, Starkville, USA [2]Microsoft, Seattle, USA [3]Department of Computer Science and Engineering, Mississippi State University, Starkville, USA

出　　处：《Journal of Information Security》2014年第4期192-206,共15页信息安全（英文）

摘　　要：Devices participating in mobile ad hoc networks (MANET) are expected to strictly adhere to a uniform routing protocol to route data packets among themselves. Unfortunately, MANET devices, composed of untrustworthy software and hardware components, expose a large attack surface. This can be exploited by attackers to gain control over one or more devices, and wreak havoc on the MANET subnet. The approach presented in this paper to secure MANETs restricts the attack surface to a?single module?in MANET devices a trusted MANET module (TMM). TMMs are deliberately constrained to demand only modest memory and computational resources in the interest of further reducing the attack surface. The specific contribution of this paper is a precise characterization of simple TMM functionality suitable for any distance vector based routing protocol, to realize the broad assurance that “any node that fails to abide by the routing protocol will not be able to participate in the MANET”.Devices participating in mobile ad hoc networks (MANET) are expected to strictly adhere to a uniform routing protocol to route data packets among themselves. Unfortunately, MANET devices, composed of untrustworthy software and hardware components, expose a large attack surface. This can be exploited by attackers to gain control over one or more devices, and wreak havoc on the MANET subnet. The approach presented in this paper to secure MANETs restricts the attack surface to a?single module?in MANET devices a trusted MANET module (TMM). TMMs are deliberately constrained to demand only modest memory and computational resources in the interest of further reducing the attack surface. The specific contribution of this paper is a precise characterization of simple TMM functionality suitable for any distance vector based routing protocol, to realize the broad assurance that “any node that fails to abide by the routing protocol will not be able to participate in the MANET”.

关 键 词：Algorithm/Protocol Design and Analysis Network Protocols CRYPTOGRAPHIC CONTROLS Mobile AD-HOC Networks (MANET) Distance Vector (DV) Protocols Authenticated Data Structures (ADS) 

分 类 号：TP39[自动化与计算机技术—计算机应用技术]