2385789
Efficient self-healing group key distribution with revocation capability
This paper presents group key distribution techniques for large and dynamic groups over unreliable channels. The techniques proposed here are based on the self-healing key distribution methods (with revocation capability) recently developed by Staddon et al. [27]. By introducing a novel personal key distribution technique, this paper reduces (1) the communication overhead of personal key share distribution from O(t2log q) to O(tlogq), (2) the communication overhead of self-healing key distribution with t-revocation capability from O((mt2+tm)log q) to O(mtlog q), and (3) the storage overhead of the self-healing key distribution with $t$-revocation capability at each group member from O(m2log q) to O(mlogq), where $t$ is the maximum number of colluding group members, $m$ is the number of sessions, and $q$ is a prime number that is large enough to accommodate a cryptographic key. All these results are achieved without sacrificing the unconditional security of key distribution. In addition, this paper presents two techniques that allow trade-off between the broadcast size and the recoverability of lost session keys. These two methods further reduce the broadcast message size in situations where there are frequent but short-term disruptions of communication and where there are long-term but infrequent disruptions of communication, respectively.
6546013
Detecting Malicious Beacon Nodes for Secure Location Discovery in Wireless Sensor Networks
Sensors' locations play a critical role in many sensor network applications. A number of techniques have been proposed recently to discover the locations of regular sensors based on a few special nodes called beacon nodes, which are assumed to know their locations (e.g., through GPS receivers or manual configuration). However, none of these techniques can work properly when there are malicious attacks, especially when some of the beacon nodes are compromised. This paper introduces a suite of techniques to detect and remove compromised beacon nodes that supply misleading location information to the regular sensors, aiming at providing secure location discovery services in wireless sensor networks. These techniques start with a simple but effective method to detect malicious beacon signals. To identify malicious beacon nodes and avoid false detection, this paper also presents several techniques to detect replayed beacon signals. This paper then proposes a method to reason about the suspiciousness of each beacon node at the base station based on the detection results collected from beacon nodes, and then revoke malicious beacon nodes accordingly. Finally, this paper provides detailed analysis and simulation to evaluate the proposed techniques. The results show that our techniques are practical and effective in detecting malicious beacon nodes
5968490
Attack-resistant location estimation in sensor networks
Many sensor network applications require sensors' locations to function correctly. Despite the recent advances, location discovery for sensor networks in hostile environments has been mostly overlooked. Most of the existing localization protocols for sensor networks are vulnerable in hostile environments. The security of location discovery can certainly be enhanced by authentication. However, the possible node compromises and the fact that location determination uses certain physical features (e.g., received signal strength) of radio signals make authentication not as effective as in traditional security applications. This paper presents two methods to tolerate malicious attacks against beacon-based location discovery in sensor networks. The first method filters out malicious beacon signals on the basis of the "consistency" among multiple beacon signals, while the second method tolerates malicious beacon signals by adopting an it era lively refined voting scheme. Both methods can survive malicious attacks even if the attacks bypass authentication, provided that the benign beacon signals constitute the majority of the "consistent" beacon signals. This paper also presents the implementation of these techniques on MICA2 motes running TinyOS, and the evaluation through both simulation and field experiments. The experimental results demonstrate that the proposed methods are promising for the current generation of sensor networks.
1535984
Establishing pairwise keys in distributed sensor networks
Pairwise key establishment is a fundamental security service in sensor networks; it enables sensor nodes to communicate securely with each other using cryptographic techniques. However, due to the resource constraints on sensors, it is infeasible to use traditional key management techniques such as public key cryptography and key distribution center (KDC). To facilitate the study of novel pairwise key predistribution techniques, this paper presents a general framework for establishing pairwise keys between sensors on the basis of a polynomial-based key predistribution protocol [2]. This paper then presents two efficient instantiations of the general framework: a random subset assignment key predistribution scheme and a grid-based key predistribution scheme. The analysis in this paper indicates that these two schemes have a number of nice properties, including high probability (or guarantee) to establish pairwise keys, tolerance of node captures, and low communication overhead. Finally, this paper presents a technique to reduce the computation at sensors required by these schemes.
8564766
Location-based pairwise key establishments for static sensor networks
Sensor networks are ideal candidates for applications such as target tracking and environment monitoring. Security in sensor networks is critical when there are potential adversaries. Establishment of pairwise keys is a fundamental security service, which forms the basis of other security services such as authentication and encryption. However, establishing pairwise keys in sensor networks is not a trivial task, particularly due to the resource constraints on sensors. This paper presents several techniques for establishing pairwise keys in static sensor networks. These techniques take advantage of the observation that in static sensor networks, although it is difficult to precisely pinpoint sensors' positions, it is often possible to approximately determine their locations. This paper presents a simple location-aware deployment model, and develops two pairwise key predistribution schemes, a closest pairwise keys predistribution scheme and a location-based pairwise keys scheme using bivariate polynomials, by taking advantage of sensors' expected locations. The analysis in this paper indicates that these schemes can achieve better performance if such location information is available and that the smaller the deployment error (i.e., the difference between a sensor's actual location and its expected location) is, the better performance they can achieve.
53235721
Establishing pairwise keys in distributed sensor networks
Pairwise key establishment is a fundamental security service in sensor networks; it enables sensor nodes to communicate securely with each other using cryptographic techniques. However, due to the resource constraints on sensor nodes, it is not feasible to use traditional key management techniques such as public key cryptography and key distribution center (KDC). A number of key predistribution techniques have been proposed for pairwise key establishment in sensor networks recently. To facilitate the study of novel pairwise key predistribution techniques, this paper develops a general framework for establishing pairwise keys between sensor nodes using bivariate polynomials. This paper then proposes two efficient instantiations of the general framework: a random subset assignment key predistribution scheme, and a hypercube-based key predistribution scheme. The analysis shows that both schemes have a number of nice properties, including high probability, or guarantee to establish pairwise keys, tolerance of node captures, and low storage, communication, and computation overhead. To further reduce the computation at sensor nodes, this paper presents an optimization technique for polynomial evaluation, which is used to compute pairwise keys. This paper also reports the implementation and the performance of the proposed schemes on MICA2 motes running TinyOS, an operating system for networked sensors. The results indicate that the proposed techniques can be applied efficiently in resource-constrained sensor networks.
215202
Neural network-based model reference adaptive control system
In this paper, an approach to model reference adaptive control based on neural networks is proposed and analyzed for a class of first-order continuous-time nonlinear dynamical systems. The controller structure can employ either a radial basis function network or a feedforward neural network to compensate adaptively the nonlinearities in the plant. A stable controller-parameter adjustment mechanism, which is determined using the Lyapunov theory, is constructed using a sigma-modification-type updating law. The evaluation of control error in terms of the neural network learning error is performed. That is, the control error converges asymptotically to a neighborhood of zero, whose size is evaluated and depends on the approximation error of the neural network. In the design and analysis of neural network-based control systems, it is important to take into account the neural network learning error and its influence on the control error of the plant. Simulation results showing the feasibility and performance of the proposed approach are given.
694856
Support Concurrent Queries in Multiuser CBIR Systems
Various techniques have been developed for different query types in content-based image retrieval (CBIR) systems such as sampling queries, constrained sampling queries, multiple constrained sampling queries, k-NN queries, constrained k-NN queries, and multiple localized k-NN queries. In this paper, we propose a generalized query model suitable for expressing queries of different types, and investigate efficient processing techniques for this new framework. We develop new storage and query processing techniques to exploit sequential access and leverage inter-query concurrency to share computation. Our experimental results, based on the Corel dataset, indicates that the proposed optimization can significantly reduce average response time in a multiuser environment.
30709401
T-graphs and the channel assignment problem
Abstract T -colorings arose from the channel assignment problem in communications. Given a finite set T of non-negative integers, a T -coloring of a simple graph G is an assignment of a non-negative integer (channel) on every vertex of G , such that the difference of channels of two adjacent vertices does not fall in T . The T -span of G , denoted by sp T ( G ), is the minimum span among all possible T -colorings of G , where the span of a T -coloring is the difference between the largest and smallest channels used. This article applies T -graphs to explore the sets T that belong to these two collections: G = { T : greedy (or first-fit) algorithm provides T -spans for all complete graphs}, and E = { T : spt ( G ) = sp T ( K χ ( G ) ) for all graphs G , where χ is the chromatic number}. Given T , its T -graph has the vertex set of all non-negative integers so that two vertices are adjacent if their difference does not fall in T . We show that for any a ∈ Z + , the T -graph of aT is isomorphic to a disjoint product of a copies of the T -graph of T , where aT is the set obtained by multiplying every element of T by a . Based on this characterization, the following two results are attained. For any a ∈ Z + , T ∈ E if and only if aT ∈ E , and T ∈ G if and only if aT ∈ G . The second fact has been proven by Cozzens and Roberts (1991) from a different approach. We will completely solve the family of sets T = {0, s , s + 1,…, l } by providing a different proof of the fact T ∈ G (Tesman, 1989), and showing that T ∈ E if and only if l is a multiple of s . In addition, complete solutions for a more general family are obtained: for any a , s , l ∈ Z + with s ⩽ l , T = {0, as , a ( s + 1), a ( s + 2),…, al } ∪ A ∈ E , and T ϵ E if and only if l = ms for some m , where A ⊆{ as + 1, as + 2, …, al - 1}.
14999533
Efficient target search with relevance feedback for large CBIR systems
Recent content-based image retrieval (CBIR) techniques were designed around query refinement based on relevance feedback. They suffer from slow convergence, high disk I/O, and do not even guarantee to find intended targets. In this paper, we identify the cause of these problems and propose several efficient target search methods to address these drawbacks. Our complexity analysis shows that our approach is able to reach any given target image with fewer iterations in the worst and average cases. We evaluated our techniques on large datasets in simulated and realistic environments. The results show that our approach significantly reduces the number of iterations and improves overall retrieval performance. The experiments also confirm that our approach can always retrieve intended targets even with poor selection of initial query points and can be used to improve the effectiveness of existing CBIR systems with relevance feedback.
13943173
Coordinated Static and Mobile Sensing for Environmental Monitoring
Distributed embedded sensor networks are now being successfully deployed in environmental monitoring of natural phenomena as well as for applications in commerce and physical security. While substantial progress in sensor network performance has appeared, new challenges have also emerged as these systems have been deployed in the natural environment. First, in order to achieve minimum sensing fidelity performance, the rapid spatiotemporal variation of environmental phenomena requires impractical deployment densities. The presence of obstacles in the environment introduces sensing uncertainty and degrades the performance of sensor fusion systems in particular for the many new applications of image sensing. The physical obstacles encountered by sensing may be circumvented by a new mobile sensing method or Networked Infomechanical Systems (NIMS). NIMS integrates distributed, embedded sensing and computing systems with infrastructure-supported mobility. NIMS now includes coordinated mobility methods that exploits adaptive articulation of sensor perspective and location as well as management of sensor population to provide the greatest certainty in sensor fusion results. The architecture, applications, and implementation of NIMS will be discussed here. In addition, results of environmentally-adaptive sampling, and direct measurement of sensing uncertainty will be described.