본문 바로가기
KERD
논문KCI 등재

Security and Privacy in Ubiquitous Sensor Networks

2

조회

0

다운로드

2

인용

0

참고문헌

키워드

초록

The availability of powerful and sensor-enabled mobile and Internet-connected devices have enabled theadvent of the ubiquitous sensor network (USN) paradigm. USN provides various types of solutions to thegeneral public in multiple sectors, including environmental monitoring, entertainment, transportation,security, and healthcare. Here, we explore and compare the features of wireless sensor networks and USN. Based on our extensive study, we classify the security- and privacy-related challenges of USNs. We identifyand discuss solutions available to address these challenges. Finally, we briefly discuss open challenges fordesigning more secure and privacy-preserving approaches in next-generation USNs.

Abstract

The availability of powerful and sensor-enabled mobile and Internet-connected devices have enabled theadvent of the ubiquitous sensor network (USN) paradigm. USN provides various types of solutions to thegeneral public in multiple sectors, including environmental monitoring, entertainment, transportation,security, and healthcare. Here, we explore and compare the features of wireless sensor networks and USN. Based on our extensive study, we classify the security- and privacy-related challenges of USNs. We identifyand discuss solutions available to address these challenges. Finally, we briefly discuss open challenges fordesigning more secure and privacy-preserving approaches in next-generation USNs.

참고문헌 (115)

  1. "Requirements for Support of Ubiquitous Sensor Network (USN) Applications and Services in the NGN Environment, ITU-T Y.2221", International Telecommunication Union, ~ (2010)
  2. A. Nordrum, "The Internet of fewer things", IEEE Spectrum, 53(10), pp.12~13 (2016)
  3. C. Camara, "Security and privacy issues in implantable medical devices: A comprehensive survey", Journal of Biomedical Informatics, 55, pp.272~289 (2015)[DOI]
  4. M. Zhang, "Towards trustworthy medical devices and body area networks", Proceedings of the 50th Annual Design Automation Conference (2013)
  5. K. Pelechrinis, "Denial of service attacks in wireless networks: the case of jammers", IEEE Communications Surveys & Tutorials, 13(2), pp.245~257 (2011)[DOI]
  6. J. Dunning, "Taming the blue beast: a survey of Bluetooth based threats", IEEE Security & Privacy, 8(2), pp.20~27 (2010)
  7. G. Madlmayr, "NFC devices: security and privacy", Proceedings of the 2008 Availability, Reliability and Security, pp.642~647 (2008)
  8. F. Stajano, "The resurrecting duckling: security issues for ubiquitous computing", IEEE Computer, 35(4), pp.22~26 (2002)
  9. T. Martin, "Denial-of-service attacks on battery-powered mobile computers", Proceedings of the 2004 IEEE Conference in Pervasive Computing and Communications, pp.309~318 (2004)
  10. A. Armando, "Would you mind forking this process? A denial of service attack on Android (and some countermeasures)", IFIP International Information Security Conference, pp.13~24 (2012)
  11. H. Huang, "From system services freezing to system server shutdown in android: all you need is a loop in an app", Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security, pp.1236~1247 (2015)
  12. A. J. Perez, "G-sense: a scalable architecture for global sensing and monitoring", IEEE Network, 24(4), pp.57~64 (2010)[DOI]
  13. M. A. Labrador, "Location-based Information Systems: Developing Real-Time Tracking Applications" (2010), CRC Press
  14. S. Barbeau, "A location-aware framework for intelligent real-time mobile applications", IEEE Pervasive Computing, 10(3), pp.58~67 (2011)
  15. D. Mendez, "P-sense: a participatory sensing system for air pollution monitoring and control", Proceedings of the 2011 IEEE Conference in Pervasive Computing and Communications, pp.344~347 (2011)
  16. M. Mun, "PEIR, the personal environmental impact report, as a platform for participatory sensing systems research", Proceedings of the 7th international conference on Mobile Systems, Applications, and Services, pp.556~568 (2009)
  17. E. Kanjo, "NoiseSPY: areal-time mobile phone platform for urban noise monitoring and mapping", Mobile Networks and Applications, 15(4), pp.562~574 (2010)[DOI]
  18. A. Wiggins, "eBirding: technology adoption and the transformation of leisure into science", Proceedings of the 2011 iConference, pp.798~799 (2011)
  19. N. D. Lane, "Urban sensing systems: opportunistic or participatory?", Proceedings of the 9th Workshop on Mobile Computing Systems and Applications, pp.11~16 (2008)
  20. O. D. Lara, "Centinela: a human activity recognition system based on acceleration and vital sign data", Pervasive and Mobile Computing, 85, pp.717~729 (2012)
  21. "Runtastic Inc"[URL]
  22. "Niantic Inc"[URL]
  23. Key distribution mechanisms for wireless sensor networks: a survey, "S. A. Camtepe", Rensselaer Polytechnic Institute, ~ (2005)
  24. A. S. Wander, "Energy analysis of public-key cryptography for wireless sensor networks", Proceedings of IEEE 2005 Pervasive Computing and Communications Conference, pp.324~328 (2005)
  25. X. Zhang, "Energy efficiency of symmetric key cryptographic algorithms in wireless sensor networks", Proceedings of the 2010 25th IEEE Biennial Symposium on Communications, pp.168~172 (2010)
  26. A. J. Perez, "Investigating security for ubiquitous sensor networks", Procedia Computer Science, 109, pp.737~744 (2017)[DOI]
  27. A. Kapadia, "Opportunistic sensing: security challenges for the new paradigm", Proceedings of the 1st International Communication Systems and Networks and Workshops, pp.1~10 (2009)
  28. P. Gilbert, "Toward trustworthy mobile sensing", Proceedings of the Eleventh Workshop on Mobile Computing Systems & Applications, pp.31~36 (2009)
  29. Y. Shoukry, "PyCRA: physical challenge-response authentication for active sensors under spoofing attacks", Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security, pp.1004~1015 (2015)
  30. A. J. Perez, "HR-Auth: Heart Rate Data Authentication using Consumer Wearables", Proceedings of the 5th IEEE, 2018, 1~2
  31. "Mobile vulnerabilities from data breach to complete shutdown" (2015)[URL]
  32. Y. Ma, "Elastic information management for air pollution monitoring in large-scale M2M sensor networks", International Journal of Distributed Sensor Networks, 9(12) (2013)
  33. S. Subashini, "A survey on security issues in service delivery models of cloud computing", Journal of Network and Computer Applications, 34(1), pp.1~11 (2011)[DOI]
  34. J. S. Lee, "Sell your experiences: a market mechanism based incentive for participatory sensing", Proceedings of the 2010 IEEE Conference in Pervasive Computing and Communications, pp.60~68 (2010)
  35. J. Aikio, "On the Road to Digital Paradise: The Naked Approach" (2016), University of Lapland
  36. D. Christin, "Privacy in mobile participatory sensing: Current trends and future challenges", Journal of Systems and Software, 116, pp.57~68 (2015)
  37. A. J. Perez, "PEAR: a privacy-enabled architecture for crowdsensing", Proceedings of the International Conference on Research in Adaptive and Convergent Systems, pp.161~171 (2017)
  38. J. Al-Muhtadi, "Routing through the mist: privacy preserving communication in ubiquitous computing environments", Proceedings of the 22nd International Conference on Distributed Computing Systems, pp.74~83 (2002)
  39. M. Gruteser, "Enhancing location privacy in wireless LAN through disposable interface identifiers: a quantitative analysis", Mobile Networks and Applications, 10(3), pp.315~325 (2005)[DOI]
  40. M. Gruteser, "Anonymous usage of location-based services through spatial and temporal cloaking", Proceedings of the 1st International Conference on Mobile Systems, Applications and Services, pp.31~42 (2005)
  41. P. Kalnis, "Preventing location-based identity inference in anonymous spatial queries", IEEE Transactions on Knowledge and Data Engineering, 19(12), pp.1719~1733 (2007)[DOI]
  42. C. Bettini, "Anonymity and historical-anonymity in location-based services", Privacy in Location-based Applications, pp.1~30 (2009)
  43. B. Gedik, "Protecting location privacy with personalized k-anonymity: architecture and algorithms", IEEE Transactions on Mobile Computing, 7(1), pp.1~18 (2008)[DOI]
  44. A. Gkoulalas-Divanis, "Providing k-anonymity in location based services", ACM SIGKDD Explorations Newsletter, 12(1), pp.3~10 (2010)[DOI]
  45. M. Duckham, "A formal model of obfuscation and negotiation for location privacy", International Conference on Pervasive Computing, pp.152~170 (2005)
  46. C. A. Ardagna, "An obfuscation-based approach for protecting location privacy", IEEE Transactions on Dependable and Secure Computing, 8(1), pp.13~27 (2009)
  47. P. Wightman, "Evaluation of location obfuscation techniques for privacy in location based information systems", Proceedings of the 2011 IEEE Latin-American Conference on Communications, pp.1~6 (2011)
  48. D. Quercia, "Spotme if you can: randomized responses for location obfuscation on mobile phones", Proceedings of the 31st International Conference on Distributed Computing Systems, pp.363~372 (2011)
  49. M. E. Andres, "Geo-indistinguishability: differential privacy for location-based systems", Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security, pp.901~914 (2013)
  50. J. Krumm, "Inference attacks on location tracks", International Conference on Pervasive Computing, pp.127~143 (2007)
  51. I. J. Vergara-Laurens, "Preserving privacy while reducing power consumption and information loss in lbs and participatory sensing applications", Proceedings of 2011 IEEE GLOBECOM, pp.1247~1252 (2011)
  52. C. Y. Chow, "Trajectory privacy in location-based services and data publication", ACM SIGKDD Explorations Newsletter, 13(1), pp.19~29 (2011)[DOI]
  53. B. Hoh, "Virtual trip lines for distributed privacy-preserving traffic monitoring", Proceedings of the 6th International Conference on Mobile Systems, Applications, and Services, pp.15~28 (2008)
  54. K. C. Lee, "Navigational path privacy protection: navigational path privacy protection", Proceedings of the 18th ACM Conference on Information and Knowledge Management, pp.691~700 (2009)
  55. K. T. Yang, "Path privacy protection in continuous location-based services over road networks", Proceedings of 2012 Wireless and Mobile Computing, Networking and Communications, pp.435~442 (2012)
  56. I. Anagnostopoulos, "Handling big data: research challenges and future directions", Journal of Supercomputing, 72(4), pp.1494~1516 (2016)[DOI]
  57. S. Avancha, "Privacy in mobile technology for personal healthcare", ACM Computing Surveys, 45(1) (2012)
  58. "2015 International Compendium of Data Privacy Laws"[URL]
  59. D. Mendez, "Data interpolation for participatory sensing systems", Pervasive and Mobile Computing, 9(1), pp.132~148 (2013)[DOI]
  60. D. Mendez, "On sensor data verification for participatory sensing systems", Journal of Networks, 8(3), pp.576~587 (2013)
  61. V. Chandola, "Anomaly detection: a survey", ACM Computing Surveys, 41(3), pp.1~15 (2009)
  62. C. C. Poon, "A novel biometrics method to secure wireless body area sensor networks for telemedicine and m-health", IEEE Communications Magazine, 44(4), pp.73~81 (2006)
  63. N. Henry, "Using bowel sounds to create a forensically-aware insulin pump system", Proceedings of 2013 USENIX Workshop on Health Information Technologies (HealthTech) (2013)
  64. O. Mir, "A secure user anonymity and authentication scheme using AVISPA for telecare medical information systems", Journal of Medical Systems, 39(9) (2015)
  65. J. M. Sorber, "Plug-n-trust: practical trusted sensing for mhealth", Proceedings of the 10th International Conference on Mobile Systems, Applications, and Services, pp.309~322 (2012)
  66. L. Xu, "Cryptanalysis and improvement of a user authentication scheme preserving uniqueness and anonymity for connected health care", Journal of Medical Systems, 39(2) (2015)
  67. F. Wu, "An improved and anonymous two-factor authentication protocol for health-care applications with wireless medical sensor networks", Multimedia Systems, 23(2), pp.195~205 (2017)[DOI]
  68. V. Pournaghshband, "Securing legacy mobile medical devices", International Conference on Wireless Mobile Communication and Healthcare, pp.163~172 (2012)
  69. A. Dua, "Towards trustworthy participatory sensing", Proceedings of the 4th USENIX Conference on Hot Topics in Security (2011)
  70. A. Darwish, "Wearable and implantable wireless sensor network solutions for healthcare monitoring", Sensors, 11(6), pp.5561~5595 (2011)[DOI]
  71. J. E. Ekberg, "The untapped potential of trusted execution environments on mobile devices", IEEE Security & Privacy, 12(4), pp.29~37 (2014)[DOI]
  72. K. Kostiainen, "Old, new, borrowed, blue: a perspective on the evolution of mobile platform security architectures", Proceedings of the 1st ACM Conference on Data and Application Security and Privacy, pp.13~24 (2011)
  73. N. Vallina-Rodriguez, "ErdOS: achieving energy savings in mobile OS", Proceedings of the 6th International Workshop on MobiArch, pp.37~42 (2011)
  74. A. Merlo, "A survey on energy-aware security mechanisms", Pervasive and Mobile Computing, 24, pp.77~90 (2015)[DOI]
  75. M. Dong, "Self-constructive high-rate system energy modeling for battery-powered mobile systems", Proceedings of the 9th International Conference on Mobile Systems, Applications, and Services, pp.335~348 (2011)
  76. R. Mittal, "Empowering developers to estimate app energy consumption", Proceedings of the 18th Annual International Conference on Mobile Computing and Networking, pp.317~328 (2012)
  77. C. Min, "Powerforecaster: predicting smartphone power impact of continuous sensing applications at pre-installation time", Proceedings of the 13th ACM Conference on Embedded Networked Sensor Systems, pp.31~44 (2015)
  78. X. Ma, "eDoctor: automatically diagnosing abnormal battery drain issues on smartphones", Proceedings of the 10th USENIX Symposium on Networked Systems Design and Implementation, pp.57~70 (2013)
  79. A. Pathak, "What is keeping my phone awake? Characterizing and detecting no-sleep energy bugs in smartphone apps", Proceedings of the 10th International Conference on Mobile Systems, Applications, and Services, pp.267~280 (2012)
  80. F. Xu, "V-edge: fast self-constructive power modeling of smartphones based on battery voltage dynamics", Proceedings of the 10th USENIX Symposium on Networked Systems Design and Implementation, pp.43~56 (2013)
  81. S. Hallem, "A system and language for building system-specific, static analyses", ACM SIGPLAN Notices, 37(5), pp.69~82 (2002)[DOI]
  82. A. Fattori, "Dynamic and transparent analysis of commodity production systems", Proceedings of the IEEE, 2010, 417~426
  83. G. J. Holzmann, "The model checker SPIN", IEEE Transactions on Software Engineering, 23(5), pp.279~295 (1997)[DOI]
  84. S. Gritzalis, "Security protocols over open networks and distributed systems: Formal methods for their analysis, design, and verification", Computer Communications, 22(8), pp.697~709 (1999)[DOI]
  85. K. Lee, "Extending sensor networks into the cloud using Amazon web services", Proceedings of Networked Embedded Systems for Enterprise Applications, pp.1~7 (2010)
  86. Y Xu, "Scalable cloud-sensor architecture for the Internet of Things", IEEE Internet of Things, 3(3), pp.285~298 (2016)[DOI]
  87. O. Osanaiye, "Distributed Denial of Service (DDoS) resilience in cloud: review and conceptual cloud DDoS mitigation framework", Journal of Network and Computer Applications, 67, pp.147~165 (2016)[DOI]
  88. F. Salim, "Urban computing in the wild: a survey on large scale participation and citizen engagement with ubiquitous computing, cyber physical systems, and Internet of Things", International Journal of Human-Computer Studies, 81, pp.31~48
  89. L. G. Jaimes, "A survey of incentive techniques for mobile crowd sensing", IEEE Internet of Things, 2(5), pp.370~380 (2015)[DOI]
  90. N. Hardy, "The Digital Silk Road" (1993), Agoric Inc
  91. J. S. Lee, "Sell your experiences: a market mechanism based incentive for participatory sensing", Proceedings of the 2010 IEEE Conference in Pervasive Computing and Communications, pp.60~68 (2010)
  92. M. Shin, "AnonySense: a system for anonymous opportunistic sensing", Pervasive and Mobile Computing, 7(1), pp.16~30 (2010)
  93. I. J. Vergara-Laurens, "Privacy, quality of information, and energy consumption in participatory sensing systems", Proceedings of the 2014 IEEE Conference in Pervasive Computing and Communications, pp.199~207 (2014)
  94. I. J. Vergara-Laurens, "A hybrid privacy-preserving mechanism for participatory sensing systems", pp.2014
  95. E. Snekkenes, "Concepts for personal location privacy policies", Proceedings of the 3rd ACM conference on Electronic Commerce, pp.48~57 (2001)
  96. C. Hauser, "Towards privacy support in a global location service", Proceedings of the IFIP Workshop on IP and ATM Traffic Management (2001)
  97. H. Lu, "Bubble-sensing: a new paradigm for binding a sensing task to the physical world", Pervasive Mobile Computing, 6(1), pp.58~71 (2009)
  98. D. Christin, "Share with strangers: privacy bubbles as user-centered privacy control for mobile content sharing applications", Information Security Technical Report, 17(3), pp.105~116 (2012)
  99. A. Kapadia, "Virtual walls: protecting digital privacy in pervasive environments", International Conference on Pervasive Computing, pp.162~179 (2007)
  100. S. De Capitani, "Data privacy: definitions and techniques", International Journal of Uncertainty, Fuzziness and Knowledge-Based Systems, 20(6), pp.793~817 (2012)[DOI]
  101. A. J. Perez, "Privacy issues and solutions for consumer wearables", IT Professional (2017)
  102. Protecting consumer privacy in an era of rapid change, "US Federal Trade Commission Report", ~ (2012)
  103. A. Kosba, "Hawk: the blockchain model of cryptography and privacy-preserving smart contracts", Proceedings of 2016 IEEE Symposium on Security and Privacy, pp.839~858 (2016)
  104. L. Sweeney, "k-anonymity: a model for protecting privacy", International Journal of Uncertainty, Fuzziness and Knowledge-Based Systems, 10(5), pp.557~570 (2002)[DOI]
  105. A. Machanavajjhala, "L-diversity: privacy beyond kanonymity", ACM Transactions on Knowledge Discovery from Data, 1(1) (2007)
  106. N. Li, "t-closeness: privacy beyond k-anonymity and l-diversity", Proceedings of IEEE 23rd International Conference on Data Engineering, pp.106~115 (2007)
  107. C. Dwork, "Differential privacy: a survey of results", Theory and Applications of Models of Computation (2008)
  108. A J. Perez, "A review and an empirical analysis of privacy policy and notices for consumer Internet of things", Security and Privacy, e15 (2018)
  109. "'Pokemon Go' being used to stage robberies, police say"[URL]
  110. T. Pultarova, "Webcam hack shows vulnerability of connected devices", Engineering & Technology, 11(11), pp.10~10 (2016)
  111. "Zephyr BioHarness 3"[URL]
  112. A. J. Perez, "HR-Auth: Heart Rate Data Authentication using Consumer Wearables", Proceedings of the 5th IEEE, 2018, 1~2
  113. "Staggering illiteracy statistics" (2008)[URL]
  114. S. Winkler, "Privacy policy analysis of popular web platforms", IEEE Technology and Society Magazine, 35(2), pp.75~85 (2016)
  115. A. J. Perez, "Bystanders' privacy", IT Professional, 19(3), pp.61~65 (2017)

이 간행물의 다른 논문 (17건)