Cooperative security in wireless sensor networks
Systems, apparatuses, and methods for cooperative security in wireless sensor networks are described herein. A wireless node may organize itself into a cluster with other wireless nodes. The wireless node may cooperate with other wireless nodes in the cluster to select a leader node. The wireless node may describe its expected behaviors. The wireless node may detect a compromised wireless node within the cluster. The wireless node may prevent the compromised wireless node from compromising another wireless node.
1. A device for cooperative security in a wireless network, the device comprising:
at least one processor; and
memory including instructions that, when executed by the at least one processor, cause the at least one processor to:
organize a plurality of wireless devices into a first wireless device cluster, wherein the first cluster is a member of a plurality of wireless device clusters, and wherein the device is a member of the first wireless device cluster;
initiate selection of a leader device for the first wireless device cluster;
receive an identification of the leader device for the first wireless device cluster;
establish a proxy connection to the leader device, wherein the proxy connection is used by the leader device to process all data transmissions between the device and the other devices of the plurality of wireless device clusters, and wherein the data transmissions are monitored by the leader device to verify an operational state of the first wireless device cluster; and
receive a reset command from the leader device to place the device in an uncompromised state based on a determination, by the leader device, that the device has entered a compromised state, wherein the reset command is a command to initiate a factory reset of the device.
2. The device of claim 1 , further comprising instructions to:
identify the plurality of wireless devices based on proximity of members of the plurality of wireless devices to the device, wherein the organization of the plurality of devices into the first wireless device cluster is based on the identification of the proximity of the members of the plurality of wireless devices.
3. The device of claim 1 , further comprising instructions to:
identify the plurality of wireless devices based on a device type;
wherein the organization of the plurality of wireless devices into the first wireless device cluster is based on identification of the device type.
4. The device of claim 1 , further comprising instructions to:
identify the plurality of wireless devices based a level of redundancy for the first wireless device cluster, wherein the organization of the plurality of wireless devices into the first wireless device cluster is based on identification of the level of redundancy.
5. The device of claim 1 , further comprising instructions to:
identify the plurality of wireless devices based on a shared capability, wherein the organization of the plurality of wireless devices into the first wireless device cluster is based on identification of the shared capability.
6. The device of claim 1 , further comprising instructions to:
receive, from the leader device, a command to cease data transmissions, wherein the command to cease data transmissions is transmitted based on the device being identified as a compromised wireless device, wherein the leader device identifies the device as compromised based on the device operating outside an unexpected behavior as indicated in the monitored data transmissions, wherein the operation outside the expected behavior causes the leader device to identify the first wireless device cluster as compromised, and wherein the leader device communicates with a second wireless device cluster leader to verify the first wireless device cluster is compromised.
7. The device of claim 6 , wherein the expected behavior describes one or more data parameters to be communicated between the compromised wireless device and the plurality of wireless device clusters.
8. The device of claim 1 , wherein the first wireless device cluster uses a tree-based cluster hierarchy.
9. The device of claim 1 , wherein the first wireless device cluster uses a linear cluster hierarchy.
10. At least one non-transitory machine-readable medium including instructions for cooperative security in a wireless network that, when executed by a machine, cause the machine to perform operations to:
organize a plurality of wireless devices into a first wireless device cluster, wherein the first cluster is a member of a plurality of wireless device clusters;
initiate selection of a leader device for the first wireless device cluster;
receive an identification of the leader device for the first wireless device cluster;
establish a proxy connection to the leader device, wherein the proxy connection is used by the leader device to process all data transmissions between a wireless device of the first wireless device cluster and the other devices of the plurality of wireless device clusters, and wherein the data transmissions are monitored by the leader device to verify an operational state of the first wireless device cluster; and
transmit a reset command to the wireless device to place the wireless device in an uncompromised state based on a determination, by the leader device, that the wireless device has entered a compromised state, wherein the reset command is a command to initiate a factory reset of the device.
11. The at least one machine-readable medium of claim 10 , further comprising instructions to:
identify the plurality of wireless devices based on proximity of members of the plurality of wireless devices, wherein the organization of the plurality of devices into the first wireless device cluster is based on the identification of the proximity of the members of the plurality of wireless devices.
12. The at least one machine-readable medium of claim 10 , further comprising instructions to:
identify the plurality of wireless devices based on a device type;
wherein the organization of the plurality of wireless devices into the first wireless device cluster is based on identification of the device type.
13. The at least one machine-readable medium of claim 10 , further comprising instructions to:
identify the plurality of wireless devices based a level of redundancy for the first wireless device cluster, wherein the organization of the plurality of wireless devices into the first wireless device cluster is based on identification of the level of redundancy.
14. The at least one machine-readable medium of claim 10 , further comprising instructions to:
identify the plurality of wireless devices based on a shared capability, wherein the organization of the plurality of wireless devices into the first wireless device cluster is based on identification of the shared capability.
15. The at least one machine-readable medium of claim 10 , further compromising instructions to:
receive, from the leader device, a command to cease data transmissions, wherein the command to cease data transmissions is transmitted based on the wireless device being identified as a compromised wireless device, wherein the leader device identifies the wireless device as compromised based on the wireless device operating outside an unexpected behavior as indicated in the monitored data transmissions, wherein the operation outside the expected behavior causes the leader device to identify the first wireless device cluster as compromised, and wherein the leader device communicates with a second wireless device cluster leader to verify the first wireless device cluster is compromised.
16. The at least one machine-readable medium of claim 15 , wherein the expected behavior describes one or more data parameters to be communicated between the wireless device and the plurality of wireless device clusters.
17. The at least one machine-readable medium of claim 10 , wherein the first wireless device cluster uses a tree-based cluster hierarchy.
18. A method for cooperative security in a wireless network, the method comprising:
organizing a plurality of wireless devices into a first wireless device cluster, wherein the first cluster is a member of a plurality of wireless device clusters;
initiating selection of a leader device for the first wireless device cluster;
receiving an identification of the leader device for the first wireless device cluster;
establishing a proxy connection to the leader device, wherein the proxy connection is used by the leader device to process all data transmissions between a wireless device of the first wireless device cluster and the other devices of the plurality of wireless device clusters, and wherein the data transmissions are monitored by the leader device to verify an operational state of the first wireless device cluster; and
transmitting a reset command to the wireless device to place the wireless device in an uncompromised state based on a determination, by the leader device, that the wireless device has entered a compromised state, wherein the reset command is a command to initiate a factory reset of the device.
19. The method of claim 18 , further comprising:
identifying the plurality of wireless devices based on proximity of members of the plurality of wireless devices, wherein the organization of the plurality of devices into the first wireless device cluster is based on the identification of the proximity of the members of the plurality of wireless devices.
20. The method of claim 18 , further comprising:
identifying the plurality of wireless devices based on a device type; wherein the organization of the plurality of wireless devices into the first wireless device cluster is based on identification of the device type.
21. The method of claim 18 , further comprising:
identifying the plurality of wireless devices based a level of redundancy for the first wireless device cluster, wherein the organization of the plurality of wireless devices into the first wireless device cluster is based on identification of the level of redundancy.
22. The method of claim 18 , further comprising:
identifying the plurality of wireless devices based on a shared capability, wherein the organization of the plurality of wireless devices into the first wireless device cluster is based on identification of the shared capability.
23. The method of claim 18 , further compromising:
receiving, from the leader device, a command to cease data transmissions, wherein the command to cease data transmissions is transmitted based on the wireless device being identified as a compromised wireless device, wherein the leader device identifies the wireless device as compromised based on the wireless device operating outside an unexpected behavior as indicated in the monitored data transmissions, wherein the operation outside the expected behavior causes the leader device to identify the first wireless device cluster as compromised, and wherein the leader device communicates with a second wireless device cluster leader to verify the first wireless device cluster is compromised.
24. The method of claim 23 , wherein the expected behavior describes one or more data parameters to be communicated between the wireless device and the plurality of wireless device clusters.
25. The method of claim 18 , wherein the first wireless device cluster uses a linear cluster hierarchy.