Secure communication is critical in military environments where the network infrastructure is vulnerable to various attacks and compromises. A conventional centralized solution breaks down when the security servers are destroyed by the enemies. In this paper we design and evaluate a security framework for multi-layer ad-hoc wireless networks with unmanned aerial vehicles (UAVs). In battlefields, the framework adapts to the contingent damages on the network infrastructure. Depending on the availability of the network infrastructure, our design is composed of two modes. In infrastructure mode, security services, specifically the authentication services, are implemented on UAVs that feature low overhead and flexible managements. When the UAVs fail or are destroyed, our system seamlessly switches to infrastructureless mode, a backup mechanism that maintains comparable security services among the surviving units. In the infrastructureless mode, the security services are localized to each node's vicinity to comply with the ad-hoc communication mechanism in the scenario. We study the instantiation of these two modes and the transitions between them. Our implementation and simulation measurements confirm the effectiveness of our design. 1
|
1976
|
A method for obtaining digital signatures and public key cryptosystems
– Rivest, Shamir, et al.
- 1978
|
|
1338
|
Dynamic source routing in ad hoc wireless networks,” Mobile Computing, volume 353
– Johnson, Maltz
- 1996
|
|
1001
|
How to share a secret
– Shamir
- 1979
|
|
958
|
The capacity of wireless networks
– Gupta, Kumar
- 2000
|
|
851
|
Highly Dynamic Destination-Sequenced Distance-Vector Routing (DSDV) for Mobile Computers
– Perkins, Bhagwat
- 1994
|
|
556
|
Kerberos: An Authentication Service for Open Network Systems
– Steiner, Neuman, et al.
- 1988
|
|
409
|
Z.: Securing Ad Hoc Networks
– Zhou, Haas
- 1999
|
|
260
|
Performance Comparison of Two On-demand Routing Protocols for Ad Hoc Networks
– Das, Perkins, et al.
- 2000
|
|
254
|
Capacity of ad hoc wireless networks
– Li, Blake, et al.
- 2001
|
|
237
|
Adaptive clustering for mobile wireless networks
– Lin, Gerla
- 1997
|
|
227
|
Cryptography and Network Security: Principles and Practice
– Stallings
- 1999
|
|
216
|
The TLS Protocol Version 1.0
– Dierks, Allen
- 1999
|
|
153
|
A practical scheme for non-interactive verifiable secret sharing
– Feldman
- 1987
|
|
149
|
A group mobility model for ad hoc wireless networks
– Hong, Gerla, et al.
- 1999
|
|
147
|
L.X.: Providing Robust and Ubiquitous Security Support for Mobile Ad-Hoc Networks
– Kong, Zerfos, et al.
- 2001
|
|
141
|
Practical threshold signatures
– Shoup
- 2000
|
|
136
|
Temporally-ordered routing algorithm (TORA) version 1: functional specification
– Corson
- 1998
|
|
134
|
Intrusion detection in wireless ad hoc networks
– Zhang, Lee
- 2000
|
|
133
|
Proactive secret sharing, or: How to cope with perpetual leakage,”, Crypto 95
– Herzberg, Jarecki, et al.
- 1995
|
|
102
|
Efficient generation of shared RSA keys
– Boneh, Franklin
- 1997
|
|
97
|
Publicly verifiable secret sharing
– Stadler
- 1996
|
|
81
|
AnIntroduction to the theory of Numbers
– Niven, Zuckerman
- 1960
|
|
69
|
A Simplified Approach to Threshold and Proactive RSA. Crypto ’98
– Rabin
|
|
55
|
A Wireless Hierarchical Routing Protocol with Group Mobility
– Pei, Gerla, et al.
- 1999
|
|
50
|
Security on the move: Indirect authentication using Kerberos
– Fox, Gribble
- 1996
|
|
48
|
A simple publicly verifiable secret sharing scheme and its application to electronic voting
– Schoenmakers
- 1999
|
|
43
|
Building intrusion tolerant applications
– Wu, Malkin, et al.
- 1999
|
|
40
|
Performance Comparison of Public-Key Cryptosystems
– Wiener
- 1998
|
|
39
|
Optimal resilience proactive public-key cryptosystems
– Frankel, Gemmell, et al.
- 1997
|
|
38
|
Internets in the sky: The capacity of three dimensional wireless networks
– Gupta, Kumar
|
|
33
|
Maintaining Authenticated Communication in the Presence of Break-Ins
– Canetti, Halevi, et al.
- 2000
|
|
29
|
Parallel Reliable Threshold Multisignature
– Frankel, Desmedt
- 1992
|
|
29
|
Ubiquitous and robust authentication services for ad hoc wireless networks
– Luo, Lu
- 2000
|
|
28
|
Experimenting with Shared Generation of RSA keys
– Malkin, Wu, et al.
- 1999
|
|
11
|
Performance Evaluation Corporation. http://www.specbench.org
– Standard
|
|
10
|
Wireless Transport Layer Security Specifications, Version
– Forum
- 2001
|
|
9
|
UAV aided intelligent routing for ad-hoc wireless network in single-area theater
– Gu, Pei, et al.
- 2000
|
|
9
|
A multi-layer ipsec protocol
– Zhang, Singh
- 2000
|
|
7
|
Wireless Application Protocol. http://www.wapforum.org
– Forum
- 1999
|
|
6
|
Hierarchical routing for multi-layer ad-hoc wireless networks with UAVs
– Gu, Pei, et al.
- 2000
|
|
6
|
How to Share a Function Securely (Extended Summary
– Santis, Desmedt, et al.
- 1994
|
|
4
|
Analysis of the SSL 3.0 protocol (revised version
– Wagner, Schneier
- 1996
|
|
4
|
A Secure Distributed On-line Certification Authority
– COCA
- 2000
|
|
3
|
Funkspiel Schemes: an Alternative to Conventional Tamper Resistance
– Hastad, Jonsson, et al.
- 2000
|
|
2
|
Selecting Cryptographic Key Sizes. Public Key Cryptography
– Lenstra, Verheul
- 2000
|
|
2
|
Landmark Routing
– Xu, Hong, et al.
- 2001
|
|
1
|
A Centralized Intelligent Channel Assigned Multiple Access for Multi-layer Ad-hoc Wireless Networks with UAVs
– C-ICAMA
- 2000
|
