The current standard of Routing Protocol for Low Power and Lossy Networks (RPL) incorporates three modes of security: the Unsecured Mode (UM), Preinstalled Secure Mode (PSM), and the Authenticated Secure Mode (ASM). While the PSM and ASM are intended to protect against external routing attacks and some replay attacks (through an optional replay protection mechanism), recent research showed that RPL in PSM is still vulnerable to many routing attacks, both internal and external. In this paper, we propose a novel secure mode for RPL, the Chained Secure Mode (CSM), based on the concept of intraflow Network Coding. The main goal of CSM is to enhance RPL resilience against replay attacks, with the ability to mitigate some of them. The security and performance of a proof-of-concept prototype of CSM were evaluated and compared against RPL in UM and PSM (with and without the optional replay protection) in the presence of Neighbor attack as an example. It showed that CSM has better performance and more enhanced security compared to both the UM and PSM with the replay protection. On the other hand, it showed a need for a proper recovery mechanism for the case of losing a control message.
翻译:目前低功率和损失网络(RPL)运行协议的标准包含三种安全模式:无保障模式(UM)、预设安全模式(PSM)和经认证的安全模式(ASM)。虽然PSM和ASM旨在防止外部路由攻击和一些重弹攻击(通过选择性重播保护机制),但最近的研究表明,PSM中的RPL仍然易受许多内部或外部路由攻击的伤害。在本文中,我们根据内部流网络编码的概念,提出了新的安全模式(CSM),即链锁安全模式(CSM)。CSM的主要目标是加强RPL抵御重现攻击的复原力,以缓解其中一些攻击的能力。对CSM的验证原型的安全和性能进行了评估,并与Neighbbor攻击(有和没有选择性重播保护)中的RPLL相比,在Neighbor攻击面前的RPL和PSM(有选择性重播保护)作为例子。它表明,与UM和PS的恢复机制相比,CM和PS的性安全性安全模式的性表现更好、更强的安全性更强的安全,同时显示它需要正确的恢复机制。