Defense against Sybil attack in the initial deployment stage of vehicular ad hoc network based on roadside unit support

Abstract

Abstract-In this paper, we propose two certificate mechanisms for preventing the Sybil attack in a vehicular ad hoc network (VANET): the timestamp series approach and the temporary certificate approach. We focus on an early-stage VANET when the number of smart vehicles is only a small fraction of the vehicles on the road and the only infrastructure components available are the roadside units (RSUs). Unlike previously proposed schemes, which require a dedicated vehicular public key infrastructure to certify individual vehicles, in our approach the RSUs are the only components issuing certificates. The vehicles can obtain certificates by simply driving by RSUs, without the need to pre-register at a certificate authority (CA).The timestamp series approach exploits the fact that due to the variance of the movement patterns of the vehicles, it is extremely rare that the two vehicles pass by a series of RSUs at exactly the same time points. The vehicles obtain a series of certificates signed by the RSUs, which certify their passing by at the RSU at a certain timepoint. By exploiting the spatial and temporal correlation between vehicles and RSUs, the Sybil attack can be detected by checking the similarity of timestamp series.In the temporary certificate-based approach, an RSU issues temporary certificates valid only in a particular area for a limited time. To guarantee that each vehicle is assigned only a single certificate, at the issuance of the first certificate it is required that the RSU physically authenticate the vehicle. When driving by the subsequent RSUs, however, the certificate can be updated in chained manner. By guaranteeing that each vehicle is issued a single certificate in a single area, the Sybil attack is prevented.We provide mathematical analysis and simulation for the timestamp series approach. The simulation shows that it works with a small false-positive rate in simple roadway architecture.

Lightweight Cryptographic Techniques for Automotive Cybersecurity

“…In this section, we present a summary of various attacks on vehicular networks, which can be found in the literature [41][42][43][44][45][46][47][48][49][50][51][52][53]. Some of these attacks are performed by the member nodes already registered with the network and called insider attacks.…”

“…The following are the common types of attacks which can be harmful to the security of vehicular network. (1) Sybil attack: In Sybil attack a node asserts itself as several nodes by simulating multiple identities [46,47]. An attacker sends several messages with multiple identities and announces its various positions at the same time.…”

“…It is an effective security scheme for efficient authentication in VANET. (3) Camellia: Nippon Telegraph and Mitsubishi Electric Corporation in 2000 joined together to develop a symmetric cipher called Camellia [47,76]. It has the same security level and processing capacity as compared to AES.…”

A method for defensing against multi-source Sybil attacks in VANET

“…In urban VANET, there are fixed RSUs to provide extra service for vehicles. By receiving and saving the signatures which were broadcasted regularly by RSUs [17,29] or actively requesting RSUs signatures [18] (also named as timestamp series approach, TSA), vehicles obtain movement trajectories. In V2V communications, vehicle has to send information with its motion information.…”

“…Many methods are proposed, such as RSSI-based (Received Signal Strength Indicator) detection method [14][15][16], vehicle movement trajectory based method [17,18] and neighboring nodes information based method [19]. But there are two things that make the existing methods cannot work well: one is conspired Sybil attack, in which malicious vehicles obtain multiple false identities through the way of forgery, stolen and share their identities with the accomplices.…”