Establishing an identity for valid types of RIs aids in detecting intruding
systems that have a di?®erent type of RI. Though an attacker can use the same
424
Chapter 18 Unauthorized Sensor Node Identification
RI, this technique adds another barrier for the attacker 1. In this chapter, we
show that di?®erences in the composition of an RI influence data transmission
patterns in a manner that is observable through tra?±c analysis. We extract
subtle di?®erences in the temporal behavior of a wireless stream to produce a
spectral profile as the identity of an RI of a wireless sensor.
The remainder of the chapter is organized as follows. In Section 2, we
present existing approaches to device identification. Sections 3 and 4 explore
the organization of an RI and highlights factors that shape the behavior of
wireless tra?±c. Sections 5 and 6 discuss rate switching as a viable attribute for
identifying di?®erent types of RIs. In Section 7, we present our technique for
passive RI identification. We conduct an experimental evaluation and present
the results in Section 8. In Section 9, we give the conclusion and discuss future
directions.
2 Related Work
Most current approaches to thwarting unauthorized access in 802.11 networks
focus on wireless local area networks (WLANs). For this reason, our discussion
of related work pertains to WLANs. However, it is important to note
that these approaches will di?®er from those in sensor networks.
Pages:
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669