Resilient Data Aggregation and Aggregator Node Election in Sensor Networks

 

Péter Schaffer

Ph.D Thesis

 

Advisor:
Levente Buttyán, Ph.D.
associate professor


Budapest University of Technology and Economics
Department of Telecommunications
2009


 

Downloads

  • Thesis                           (2.5 MB PDF)
  • Booklet                        (400 KB PDF)


Abstract

Wireless sensor networks are considered as a promising technology that has a wide range of applications including environmental monitoring for agricultural and ecological purposes, wild life monitoring, remote patient monitoring in electronic health care systems, building automation, and reconnaissance applications for military purposes, etc. Sensor networks typically consist of a large number of sensor nodes and a few base stations. The sensor nodes measure some physical phenomena (e.g., temperature, humidity, vibration) that are important in the given application, and report their sensor readings to the base stations (typically via wireless communication channels). As both the number of the sensors and the amount of the measurements that they perform can be large, in many applications, the base stations or some intermediate nodes aggregate the individual sensor readings into a compact report. Aggregation can be useful to keep the amount of information that need to be handled under control, and to improve the energy-efficiency of the network.

A potential problem in this scenario is that sensor readings can be compromised before they reach the base station or the aggregator node. This can be achieved by an attacker for example by altering the environmental parameters around some sensors and thus corrupt their readings. This type of attack cannot be detected, nor prevented, by cryptographic means. In addition, this type of attack is relatively easy to carry out: Firstly, an attacker can easily approach a sensor node, as sensor networks are typically assumed to operate in an unattended manner. Secondly, corrupting the measurement of a nearby sensor does not require sophisticated mechanisms, but in most of the cases, everyday tools can be used effectively (e.g., a lighter, a pocket lamp, or a glass of water can be used to corrupt temperature, light, and humidity measurements, respectively). Unfortunately, many useful aggregation functions are sensitive to even a single compromised sensor reading. In my dissertation, I propose countermeasures against this type of attack - i.e., CORA and RANBAR - that are based on statistical hypothesis testing and sample filtering. The common property of the proposed solutions is that they perform an analyzing step before the aggregation, and with that, one is able to detect an attack or even filter out the compromised measurements. CORA is a two-sample homogeneity test that is flexible enough to be applied without any special assumption on the distribution of the sensor readings or on the strategy of the attacker, while RANBAR is able to filter out a high percent of compromised measurement data by leaning on only one preassumption, namely that the sample is independent and identically distributed in the unattacked case.

Besides protecting the aggregation function against input attacks, it is also highly important to efficiently assign the role of the aggregator among the nodes. As sensor nodes are usually resource-constrained, and the aggregator nodes consume more energy than usual nodes (i.e., they spend extra energy for processing and message sending), one has to ensure that the role of the aggregator is reassigned from time to time. With this principle in mind, one can flatly balance the energy consumption of the sensor network and thus prolong the network lifetime, which is one of the main design objectives in general in sensor networks. For this purpose, aggregator node election protocols can be used in the sensor network. In my dissertation, I also introduce PANEL, a position-based aggregator node election protocol for wireless sensor networks. As its name indicates, PANEL uses the geographical position information of the nodes to determine which of them should be the aggregators. PANEL also ensures load balancing in the sense that each node is elected aggregator nearly equally frequently. The salient feature of PANEL that makes it novel and different from other aggregator node election protocols is that besides synchronous applications, PANEL also supports asynchronous applications, where the sensor readings are fetched by the base station not immediately, but after some delay.