Securing RPL Using Network Coding: The Chained Secure Mode (CSM)

doi:10.1109/JIOT.2021.3109109

2022-04-01

Ahmed Raoof *

Chung–Horng Lung

Ashraf Matrawy

DOI：10.1109/JIOT.2021.3109109

原文链接

原文求助

摘要

En 中文

Considered the preferred routing protocol for many Internet of Things (IoT) networks, the routing protocol for low-power and lossy networks (RPL) incorporates three security modes to protect the integrity and confidentiality of the routing process: 1) the unsecured mode (UM); 2) preinstalled secure mode (PSM); and 3) the authenticated secure mode (ASM). Both PSM and ASM were originally designed to protect against external routing attacks, in addition to some replay attacks (through an optional replay protection mechanism). However, recent research showed that RPL, even when it operates in PSM, is still vulnerable to many routing attacks, both internal and external. In this article, a novel secure mode for RPL, the chained secure mode (CSM), is proposed using the concept of intraflow network coding (NC). The CSM is designed to enhance RPL's resiliency and mitigation capability against replay attacks. In addition, CSM allows the integration with external security measures such as intrusion detection systems (IDSs). An evaluation of the proposed CSM, from a security and performance point of view, was conducted and compared against RPL in UM and PSM (with and without the optional replay protection) under several routing attacks: the neighbor attack (NA), wormhole (WH), and CloneID attack (CA), using average packet delivery rate (PDR), end-to-end (E2E) latency, and power consumption as metrics. It showed that CSM has better performance and more enhanced security than both the UM and PSM with the replay protection while mitigating both the NA and WH attacks and significantly reducing the effect of the CA in the investigated scenarios.

Keyword:

Security

Routing

Internet of Things

Standards

Routing protocols

Power demand

Encryption

Chained secure mode (CSM)

Internet of Things (IoT)

routing attacks

routing protocol for low-power and lossy network (RPL)