Unique ID generation for sensors
Systems, methods, and computer-readable media are provided for generating a unique ID for a sensor in a network. Once the sensor is installed on a component of the network, the sensor can send attributes of the sensor to a control server of the network. The attributes of the sensor can include at least one unique identifier of the sensor or the host component of the sensor. The control server can determine a hash value using a one-way hash function and a secret key, send the hash value to the sensor, and designate the hash value as a sensor ID of the sensor. In response to receiving the sensor ID, the sensor can incorporate the sensor ID in subsequent communication messages. Other components of the network can verify the validity of the sensor using a hash of the at least one unique identifier of the sensor and the secret key.
1. A method comprising:
receiving, at a sensor configured to capture network data, a new sensor identifier configured to uniquely identify the sensor, wherein the new sensor identifier is generated based on a hash value of at least one attribute associated with the sensor; and
incorporating the new sensor identifier, to replace a previous sensor identifier, in messages subsequently sent from the sensor.
2. The method of claim 1 , wherein the new sensor identifier is a fixed-length hash value based upon various lengths of the at least one unique attribute.
3. The method of claim 1 , wherein the new sensor identifier replaces the previous sensor identifier.
4. The method of claim 1 , further comprising:
prior to receiving the new sensor identifier, determining the sensor is installed on a component in a network; and
sending the at least one attribute of the sensor.
5. The method of claim 1 , further comprising:
prior to receiving the new sensor identifier, sending a first message comprising the at least one attribute from the sensor.
6. The method of claim 5 , further comprising:
sending a second message comprising at least the new sensor identifier; and
based at least on the new sensor identifier, determining the sensor is under an attack.
7. The method of claim 6 , wherein determining the sensor is under the attack is based on a match between the new sensor identifier and a hash value.
8. A system comprising:
a sensor configured to capture network data;
at least one processor;
at least one memory storing instructions, which when executed by the at least one processor, causes the at least one processor to:
receive, at the sensor, a new sensor identifier configured to uniquely identify the sensor, wherein the new sensor identifier is generated based on a hash value of at least one attribute associated with the sensor; and
incorporate the new sensor identifier, to replace a previous sensor identifier, in messages subsequently sent from the sensor.
9. The system of claim 8 , wherein the new sensor identifier is a fixed-length hash value based upon various lengths of the at least one unique attribute.
10. The system of claim 8 , wherein the new sensor identifier replaces the previous sensor identifier.
11. The system of claim 8 , further comprising instructions, which when executed by the at least one processor, causes the at least one processor to:
prior to receiving the new sensor identifier, determine the sensor is installed on a component in a network; and
send the at least one attribute of the sensor.
12. The system of claim 8 , further comprising instructions, which when executed by the at least one processor, causes the at least one processor to:
prior to receiving the new sensor identifier, send a first message comprising the at least one attribute from the sensor.
13. The system of claim 12 , instructions, which when executed by the at least one processor, causes the at least one processor to:
send a second message comprising at least the new sensor identifier,
wherein, based at least on the new sensor identifier, determine, at a system that received the second message, the sensor is under an attack.
14. The system oaf claim 13 , wherein determining the sensor is under the attack is based on a match between the new sensor identifier and a hash value.
15. A system comprising:
at least one processor;
at least one memory storing instructions, which when executed by the at least one processor, causes the at least one processor to:
determine a new sensor identifier for a sensor configured to capture network data, the new sensor identifier configured to uniquely identify the sensor, wherein the new sensor identifier is generated based on a hash value of at least one attribute associated with the sensor; and
send the new sensor identifier to the sensor.
16. The system of claim 15 , wherein the new sensor identifier is a fixed-length hash value based upon various lengths of the at least one unique attribute.
17. The system of claim 15 , further comprising instructions, which when executed by the at least one processor, causes the at least one processor to:
prior to determining the new sensor identifier, determine the sensor is installed on a component in a network; and
receive the at least one attribute of the sensor.
18. The system of claim 15 , further comprising instructions, which when executed by the at least one processor, causes the at least one processor to:
prior to determining the new sensor identifier, receive a first message comprising the at least one attribute from the sensor.
19. The system of claim 18 , instructions, which when executed by the at least one processor, causes the at least one processor to:
receive a second message comprising at least the new sensor identifier; and
based at least on the new sensor identifier, determine the sensor is under an attack.
20. The system of claim 19 , wherein determining the sensor is under the attack is based on a match between the new sensor identifier and a hash value.