Security weakness in a dynamic program update protocol for wireless sensor networks

Authors:
Peng Zeng;Zhenfu Cao;Kim-Kwang Raymond Choo;Shengbao Wang
Affiliations:
Department of Computer Science and Engineering, Shanghai Jiao Tong University, China;Department of Computer Science and Engineering, Shanghai Jiao Tong University, China;Australian Institute of Criminology and ARC Centre of Excellence in Policing and Security, Regulatory Institutions Network, Australian National University's College of Asia and the Pacific, Austra ...;New Star Research Institute of Applied Technology, China
Venue:
IEEE Communications Letters
Year:
2009

Citing 5
Cited 2

The dynamic behavior of a data dissemination protocol for network programming at scale

SenSys '04 Proceedings of the 2nd international conference on Embedded networked sensor systems
Secure code distribution in dynamically programmable wireless sensor networks

Proceedings of the 5th international conference on Information processing in sensor networks
Securing the deluge Network programming system

Proceedings of the 5th international conference on Information processing in sensor networks
A Practical Study of Transitory Master Key Establishment ForWireless Sensor Networks

SECURECOMM '05 Proceedings of the First International Conference on Security and Privacy for Emerging Areas in Communications Networks
Sluice: Secure Dissemination of Code Updates in Sensor Networks

ICDCS '06 Proceedings of the 26th IEEE International Conference on Distributed Computing Systems

Security analysis of a dynamic program update protocol for wireless sensor networks

IEEE Communications Letters
Secure and efficient dynamic program update in wireless sensor networks

Security and Communication Networks

Quantified Score

Hi-index	0.00

Visualization

Abstract

In 2008, Das and Joshi proposed a new dynamic program update protocol for wireless sensor networks using the orthogonality principle. We identify an inherent flaw in their design and demonstrate that the Das-Joshi scheme is vulnerable to an impersonation attack, in violation of their security claim. We then present a modified scheme to eliminate the security vulnerability.