SEEN: A selective encryption method to ensure confidentiality for big sensing data streams

IEEE Transactions on Big Data

Volumn 5, Issue 3, 2019, Pages 379-392

  Puthal, Deepak ^a   Wu, Xindong ^b   Surya, Nepal ^c   Ranjan, Rajiv ^d   Chen, Jinjun ^e  

^a UNIVERSITY OF TECHNOLOGY SYDNEY   (Australia)

^b UNIVERSITY OF LOUISIANA AT LAFAYETTE   (United States)

^c CSIRO   (Australia)

^d NEWCASTLE UNIVERSITY   (United Kingdom)

^e SWINBURNE UNIVERSITY OF TECHNOLOGY   (Australia)

Author keywords

Big data stream; Data confidentiality; Data integrity; Data security; Selective encryption

Indexed keywords

AGRICULTURAL ROBOTS; BEHAVIORAL RESEARCH; CRYPTOGRAPHY; DECISION MAKING; NETWORK SECURITY; PRECISION AGRICULTURE; WIRELESS SENSOR NETWORKS;

AGRICULTURE APPLICATIONS; CRITICAL APPLICATIONS; EMERGING APPLICATIONS; INDUSTRIAL CONTROL SYSTEMS; MALICIOUS ADVERSARIES; SELECTIVE ENCRYPTION; SELF-ORGANIZING WIRELESS; SENSITIVE INFORMATIONS;

DATA STREAMS;

EID: 85092001362     PISSN: None     EISSN: 23327790     Source Type: Journal    
DOI: 10.1109/TBDATA.2017.2702172     Document Type: Article

References (50)

1. A. Arasu, et al, "STREAM: The Stanford stream data manager (demonstration description)," in Proc. ACM SIGMOD Int. Conf. Manage. Data, 2003, pp. 665-665.
2. H-S. Lim, Y-S. Moon and E. Bertino, "Provenance-based trustworthiness assessment in sensor networks," in Proc. 7th Int. Workshop Data Manage. Sensor Netw., 2010, pp. 2-7.
3. S. Sultana, G. Ghinita, E. Bertino and M. Shehab, "A lightweight secure provenance scheme for wireless sensor networks, " in Proc. 18th Int. Conf. Parallel Distrib. Syst., 2012, pp. 101-108.
4. R. A. Shaikh, S. Lee, M. AU Khan and Y. J. Song, "LSec: Lightweight security protocol for distributed wireless sensor network, " in Proc. IFIP Int. Conf. PersonalWireless Commun., 2006, pp. 367-377.
5. G. Selimis, et al., "A lightweight security scheme for wireless body area networks: Design, energy evaluation and proposed microprocessor design, " J. Med. Syst., vol. 35, no. 5, pp. 1289-1298, 2011.
6. G. Selimis, et al., "Evaluation of 90 nm 6 T-SRAM as physical unclonable function for secure key generation in wireless sensor nodes," in Proc. IEEE IEEE Int. Symp. Circuits Syst., 2011, pp. 567-570.
7. M. Roesch, "Snort: Lightweight intrusion detection for networks," in Proc. 13th USENIX Conf. Syst. Administration, pp. 229-238. 1999.
8. N. Tsikoudis, A. Papadogiannakis and E. P. Markatos, "LEoNIDS: A low-latency and energy-efficient network-level intrusion detection system," IEEE Trans. Emerging Topics Comput., vol. 4, no. 1, pp. 142-155, Jan.-Mar. 2016.
9. W. Lee and S. J. Stolfo, "Data mining approaches for intrusion detection," in Proc. 7th Conf. USENIX Secur. Symp., 1998, pp. 6-6.
10. Y. Xie, D. Feng, Z. Tan, and J. Zhou, "Unifying intrusion detection and forensic analysis via provenance awareness," Future Generation Comput. Syst., vol. 61, pp. 26-36, 2016.
11. A. S. Wander, N. Gura, H. Eberle, V. Gupta, and S. C. Shantz, "Energy analysis of public-key cryptography for wireless sensor networks," in Proc. 3rd IEEE Int. Conf. Pervasive Comput. Commun., 2005, pp. 324-328.
12. T. Park and K. G. Shin, "LiSP: A lightweight security protocol for wireless sensor networks," ACM Trans. Embedded Comput. Syst., vol. 3, no. 3, pp. 634-660, 2004.
13. A. Bogdanov, et al., "PRESENT: An ultra-lightweight block cipher," in Proc. Int. Workshop Cryptographic Hardware Embedded Syst., 2007, pp. 450-466.
14. T. A. Zia and A. Y. Zomaya, "A lightweight security framework for wireless sensor networks," J. Wireless Mobile Netw. Ubiquitous Comput. Dependable Appl., vol. 2, no. 3, pp. 53-73, 2011.
15. K. Van Laerhoven, "Combining the self-organizing map and k-means clustering for on-line classification of sensor data," in Proc. Int. Conf. Artif. Neural Netw., 2001, pp. 464-469.
16. P. Ferreira and P. Alves, Distributed Context-Aware Systems. Berlin, Germany: Springer, 2014. doi 10.1007/978-3-319-04882-6.
17. D. Ganesan, D. Estrin and J. Heidemann, "DIMENSIONS: Why do we need a new data handling architecture for sensor networks?," ACM SIGCOMM Comput. Commun. Rev., vol. 33, no. 1. pp. 143-148, 2003.
18. D. Puthal, S. Nepal, R. Ranjan, and J. Chen, "A secure big data stream analytics framework for disaster management on the cloud," in Proc. 18th Int. Conf. High Performance Comput. Commun., 2016, pp. 1218-1225.
19. D. Puthal, S. Nepal, R. Ranjan, and J. Chen, "A dynamic prime number based efficient security mechanism for big sensing data streams," J. Comput. Syst. Sci., vol. 83, no. 1, pp. 22-24, 2017.
20. D. Puthal, S. Nepal, R. Ranjan, and J. Chen, "DLSeF: A dynamic key length based efficient real-time security verification model for big data stream," ACM Trans. Embedded Comput. Syst., vol. 16, no. 2, 2017, Art. no. 51.
21. R. Ranjan, "Streaming big data processing in datacenter clouds," IEEE Cloud Comput., vol. 1, no. 1, pp. 78-83, May 2014.
22. [Onl ine]. Avai lable: www.cloudflare.com, Accessed On: 04.08.2014
23. J. Burke, J. McDonald, and T. Austin, "Architectural support for fast symmetric-key cryptography," ACM SIGARCH Comput. Archit. News, vol. 28, no. 5, pp. 178-189, 2000.
24. Crypto- Benchmarks. [Online]. Available: Http://www. cryptopp.com/benchmarks.html, Accessed on: 30.07.2016.
25. R. M. Metcalfe and D. R. Boggs, "Ethernet: Distributed packet switching for local computer networks," Commun. ACM, vol. 19, no. 7, pp. 395-404, 1976.
26. M. Stonebraker, U. Çetintemel, and S. Zdonik, "The 8 requirements of real-time stream processing," ACM SIGMOD Rec., vol. 34, no. 4, pp. 42-47, 2005.
27. R. V. Nehme, H-S. Lim, E. Bertino, and E. A. Rundensteiner, "StreamShield: A stream-centric approach towards security and privacy in data stream environments, " in Proc. ACM SIGMOD Int. Conf. Manage. Data, 2009, pp. 1027-1030.
28. Scyther. [Online]. Available: Http://www.cs.ox.ac.uk/people/cas.cremers/scyther/, Accessed on: 30.07.2016.
29. N. Nagaratnam, L. Koved, and A. Nadalin, Enterprise Java Security: Building Secure J2EE Applications. Boston, MA, USA: Addison-Wesley Professional, 2004.
30. Matlab. [Onl ine]. Avai lable: Http://au.mathworks.com/products/matlab/, Accessed on: 30.07.2016.
31. Contiki operating system. [Online]. Available: Http://www. contiki-os.org/, Accessed on: 30.07.2016.
32. A. Arasu, et al., "Stream: The stanford data stream management system," Stanford InfoLab, Stanford, CA, USA, Tech. Rep. 2004-20, 2004.
33. H. Balakrishnan, et al., "Retrospective on aurora," VLDB J., vol. 13, no. 4, pp. 370-383, 2004.
34. D. J. Abadi, et al., "The design of the borealis stream processing engine," in Proc. 2nd Biennial Conf. Innovative Data Syst. Res., 2005, pp. 277-289.
35. F. Wu, et al., "An efficient authentication and key agreement scheme for multi-gateway wireless sensor networks in IoT deployment," J. Netw. Comput. Appl., (In press), 2016, https://doi. org/10.1016/j.jnca.2016.12.008
36. V. Gulisano, et al., "Streamcloud: An elastic and scalable data streaming system," IEEE Trans. Parallel Distrib. Syst., vol. 23, no. 12, pp. 2351-2365, Dec. 2012.
37. R. Adaikkalavan and T. Perez, "Secure shared continuous query processing," in Proc. ACM Symp. Appl. Comput., 2011, pp. 1000-1005.
38. R. Adaikkalavan, X. Xie, and I. Ray, "Multilevel secure data stream processing: Architecture and implementation," J. Comput. Secur., vol. 20, no. 5, pp. 547-581, 2012.
39. J. Cao, B. Carminati, E. Ferrari, and K.-L. Tan, "Acstream: Enforcing access control over data streams," in Proc. IEEE 25th Int. Conf. Data Eng., 2009, pp. 1495-1498.
40. D. Puthal, S. Nepal, R. Ranjan, and J. Chen, "Threats to networking cloud and edge datacenters in the internet of thing," IEEE Cloud Comput., vol. 3, no. 3, pp. 64-71, May-Jun. 2016.
41. W. Lindner and J. Meier, "Securing the borealis data stream engine," in Proc. 10th Int. Database Eng. Appl. Symp., 2006, pp. 137-147.
42. X. Xie, I. Ray, R. Adaikkalavan, and R. Gamble, "Information flow control for stream processing in clouds," in Proc. 18th ACM Symp. Access Control Models Technol., 2013, pp. 89-100.
43. R. V. Nehme, E. A. Rundensteiner, and E. Bertino, "A security punctuation framework for enforcing access control on streaming data," in Proc. IEEE 24th Int. Conf. Data Eng., 2008, pp. 406-415.
44. K. Ren, W. Lou, and Y. Zhang, "LEDS: Providing location-aware end-to-end data security in wireless sensor networks," IEEE Trans. Mobile Comput., vol. 7, no. 5, pp. 585-598, May 2008.
45. R. Di Pietro, P. Michiardi, and R. Molva, "Confidentiality and integrity for data aggregation in WSN using peer monitoring," Secur. Commun. Netw., vol. 2, no. 2, pp. 181-194, 2009.
46. E. Bertino, K-K R. Choo, D. Georgakopolous, and S. Nepal, "Internet of things (IoT): Smart and secure service delivery," ACM Trans. Internet Technol., vol. 16, no. 4, 2016, Art. no. 22.
47. A. Perrig, et al., "SPINS: Security protocols for sensor networks," Wireless Netw., vol. 8, no. 5, pp. 521-534, 2002.
48. F. Peng, X.-Q. Gong, M. Long, and X.-M. Sun, "A selective encryption scheme for protecting H. 264/AVC video in multimedia social network," Multimedia Tools Appl., pp. 1-19, 2016.
49. D. Puthal, S. Nepal, R. Ranjan, and J. Chen, "A synchronized shared key generation method for maintaining end-to-end security of big data streams," in Proc. 50th Hawaii Int. Conf. Syst. Sci., 2017, pp. 6011-6020.
50. M. Dayarathna and T. Suzumura, "Automatic optimization of stream programs via source program operator graph transformations," Distrib. Parallel Databases, vol. 31, no. 4, pp. 543-599, 2013