A Systematic Approach to Sensor Network Security

1
A Systematic Approach to Sensor Network Security

• Tanya Roosta and Alvaro Cárdenas
• Prof. Shankar Sastry
• May, 2007

2
Motivation

• There is a lack of clear understanding of what it
  means for a sensor network to be secure
• Previous research has focused on finding a myriad
  of new attacks and proposing corresponding
  solutions for each attack
• The end result is that in practice the operator
  of a sensor network is faced with FUD fear
  uncertainty and doubt!
• There is no systematic approach to evaluate the
  real threat and the impact of the security
  solution

3
Goal 1Define Security Metrics

• The ability to score information system
  vulnerabilities is extremely important to the
  professional computing world
• Quantify the estimated effect of an attack on
• Confidentiality
• Integrity
• Availability
• The definition of security relies on a proper
  Threat Model

4
Goal 2Define a Threat Model for Sensor Networks

• Threat Model for sensor networks
• Pre-conditions refers to the means that the
  adversary needs to execute the attack.
• Post-conditions what capabilities and privileges
  the adversary obtains after a successful attack
• Estimated impact and cost is an attack a
  stepping stone for the attacker? Or a final
  step against a breach of Confidentiality,
  Integrity or Availability?
• Protect the critical components of the network
  first