Issue No. 05 - Sept.-Oct. (2012 vol. 9)
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/TDSC.2012.39
Jing Dong , Dept. of Comput. Sci., Purdue Univ., West Lafayette, IN, USA
R. Curtmola , Dept. of Comput. Sci., New Jersey Inst. of Technol., Newark, NJ, USA
C. Nita-Rotaru , Dept. of Comput. Sci., Purdue Univ., West Lafayette, IN, USA
D. K. Y. Yau , Adv. Digital Sci. Center, Singapore, Singapore
We study data pollution attacks in wireless interflow network coding systems. Although several defenses for these attacks are known for intraflow network coding systems, none of them are applicable to interflow coding systems. We formulate a model for interflow network coding that encompasses all the existing systems, and use it to analyze the impact of pollution attacks. Our analysis shows that the effects of pollution attacks depend not only on the network topology, but also on the location and strategy of the attacker nodes. We propose CodeGuard, a reactive attestation-based defense mechanism that uses efficient bit-level traceback and a novel cross-examination technique to unequivocally identify attacker nodes. We analyze the security of CodeGuard and prove that it is always able to identify and isolate at least one attacker node on every occurrence of a pollution attack. We analyze the overhead of CodeGuard and show that the storage, computation, and communication overhead are practical. We experimentally demonstrate that CodeGuard is able to identify attacker nodes quickly (within 500 ms) and restore system throughput to a high level, even in the presence of many attackers, thus preserving the performance of the underlying network coding system.
telecommunication security, network coding, radio networks, telecommunication network topology, system throughput, pollution defense, wireless interflow network coding system, data pollution attack, intraflow network coding system, network topology, attacker node, CodeGuard, reactive attestation-based defense mechanism, bit-level traceback, cross-examination technique, security, storage, communication overhead, Encoding, Pollution, Network coding, Decoding, Wireless networks, Throughput, Routing protocols, interflow network coding., Pollution attacks, wireless networks
C. Nita-Rotaru, R. Curtmola, Jing Dong and D. K. Yau, "Pollution Attacks and Defenses in Wireless Interflow Network Coding Systems," in IEEE Transactions on Dependable and Secure Computing, vol. 9, no. , pp. 741-755, 2012.