A Lightweight Secure Scheme for Detecting Provenance Forgery and Packet Drop Attacks in Wireless Sensor Networks
Large-scale sensor networks are deployed in numerous application domains, and the data they collect are used in decision-making for critical infrastructures. Data are streamed from multiple sources through intermediate processing nodes that aggregate information. A malicious adversary may introduce additional nodes in the network or compromise existing ones. Therefore, assuring high data trustworthiness is crucial for correct decision-making. Data provenance represents a key factor in evaluating the trustworthiness of sensor data. Provenance management for sensor networks introduces several challenging requirements, such as low energy and bandwidth consumption, efficient storage and secure transmission. A novel lightweight scheme is proposed to securely transmit provenance for sensor data. The proposed technique relies on inpacket Bloom filters to encode provenance. Efficient mechanism is introduced for provenance verification and reconstruction at the base station. The secure provenance scheme is extended with functionality to detect packet drop attacks staged by malicious data forwarding nodes. The proposed technique is evaluated both analytically and empirically, and the results prove the effectiveness and efficiency of the lightweight secure provenance scheme in detecting packet forgery and loss attacks.