{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:38:14Z","timestamp":1750307894762,"version":"3.41.0"},"reference-count":57,"publisher":"Association for Computing Machinery (ACM)","issue":"4","license":[{"start":{"date-parts":[[2008,8,1]],"date-time":"2008-08-01T00:00:00Z","timestamp":1217548800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000183","name":"Army Research Office","doi-asserted-by":"publisher","award":["W911NF-05-1-0270MURI W911NF-07-1-0318"],"award-info":[{"award-number":["W911NF-05-1-0270MURI W911NF-07-1-0318"]}],"id":[{"id":"10.13039\/100000183","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000144","name":"Division of Computer and Network Systems","doi-asserted-by":"publisher","award":["CNS-0524156CNS-0519460CAREER-0643906"],"award-info":[{"award-number":["CNS-0524156CNS-0519460CAREER-0643906"]}],"id":[{"id":"10.13039\/100000144","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-0524156CNS-0519460CAREER-0643906"],"award-info":[{"award-number":["CNS-0524156CNS-0519460CAREER-0643906"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Sen. Netw."],"published-print":{"date-parts":[[2008,8]]},"abstract":"<jats:p>\n            Mobile sinks are needed in many sensor network applications for efficient data collection, data querying, localized sensor reprogramming, identifying, and revoking compromised sensors, and other network maintenance. Employing mobile sinks however raises a new security challenge: if a mobile sink is given too many privileges, it will become very attractive for attack and compromise. Using a compromised mobile sink, an adversary may easily bring down or even take over the sensor network. Thus, security mechanisms that can tolerate mobile sink compromises are essential. In this article, based on the\n            <jats:italic>principle of least privilege<\/jats:italic>\n            , we first propose an efficient scheme to restrict the privilege of a mobile sink without impeding its ability to carry out any authorized operations for an assigned task. In addition, we present an extension to allow conditional trajectory change due to unexpected events. To further reduce the possible damage caused by a compromised mobile sink, we propose efficient message forwarding schemes for deleting the privilege assigned to a compromised mobile sink immediately after its compromise has been detected. Through detailed analysis, simulation, and real implementation, we show that our schemes are secure and efficient, and are highly practical for sensor networks consisting of the current generation of sensors.\n          <\/jats:p>","DOI":"10.1145\/1387663.1387669","type":"journal-article","created":{"date-parts":[[2008,9,4]],"date-time":"2008-09-04T12:51:35Z","timestamp":1220532695000},"page":"1-34","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":15,"title":["Least privilege and privilege deprivation"],"prefix":"10.1145","volume":"4","author":[{"given":"Hui","family":"Song","sequence":"first","affiliation":[{"name":"Frostburg State University, Frostburg, MD"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sencun","family":"Zhu","sequence":"additional","affiliation":[{"name":"The Pennsylvania State University, University Park, PA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wensheng","family":"Zhang","sequence":"additional","affiliation":[{"name":"Iowa State University, Ames, IA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Guohong","family":"Cao","sequence":"additional","affiliation":[{"name":"The Pennsylvania State University, University Park, PA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2008,9,4]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(01)00302-4"},{"volume-title":"Proceedings of the IEEE Conference on Mass Storage Systems and Technologies (MASS). 195--203","author":"Anjum F.","key":"e_1_2_1_2_1","unstructured":"Anjum , F. , Pandey , S. , Kim , B. , and Agrawal , P . 2005. Secure localization in sensor networks using transmission range variation . In Proceedings of the IEEE Conference on Mass Storage Systems and Technologies (MASS). 195--203 . Anjum, F., Pandey, S., Kim, B., and Agrawal, P. 2005. Secure localization in sensor networks using transmission range variation. In Proceedings of the IEEE Conference on Mass Storage Systems and Technologies (MASS). 195--203."},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1006\/jcss.1999.1694"},{"volume-title":"Proceedings of the IEEE\/RSJ International Conference on Intelligent Roloats and Systems (IROS'03)","author":"Bergbreiter S.","key":"e_1_2_1_4_1","unstructured":"Bergbreiter , S. and Pister , K . 2003. Cotsbots: An off-the-shelf platform for distributed robotics . In Proceedings of the IEEE\/RSJ International Conference on Intelligent Roloats and Systems (IROS'03) . Bergbreiter, S. and Pister, K. 2003. Cotsbots: An off-the-shelf platform for distributed robotics. In Proceedings of the IEEE\/RSJ International Conference on Intelligent Roloats and Systems (IROS'03)."},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.5555\/646757.705531"},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/313239.313282"},{"volume-title":"Proceedings of the Annual Joint Conference of the IEEE Computer and Communications Societies (INFOCOM '06)","author":"Capkun S.","key":"e_1_2_1_7_1","unstructured":"Capkun , S. , Cagalj , M. , and Srivastava , M . 2006. Securing localization with hidden and mobile base stations . In Proceedings of the Annual Joint Conference of the IEEE Computer and Communications Societies (INFOCOM '06) . Barcelona, Spain. Capkun, S., Cagalj, M., and Srivastava, M. 2006. Securing localization with hidden and mobile base stations. In Proceedings of the Annual Joint Conference of the IEEE Computer and Communications Societies (INFOCOM '06). Barcelona, Spain."},{"key":"e_1_2_1_8_1","volume-title":"Tech. Rep. EPFL\/IC\/200444","author":"Capkun S.","year":"2002","unstructured":"Capkun , S. and Hubaux , J . 2002 . Secure positioning in sensor networks. Tech. Rep. EPFL\/IC\/200444 available at http:\/\/www.terminodes.org\/micsPublications.php. 1278--1287. Capkun, S. and Hubaux, J. 2002. Secure positioning in sensor networks. Tech. Rep. EPFL\/IC\/200444 available at http:\/\/www.terminodes.org\/micsPublications.php. 1278--1287."},{"volume-title":"Proceedings of the Annual Joint Conference of the IEEE Computer and Communications Societies (INFOCOM).","author":"Chan H.","key":"e_1_2_1_9_1","unstructured":"Chan , H. and Perrig , A . 2005. Pike: Peer intermediaries for key establishment in sensor networks . In Proceedings of the Annual Joint Conference of the IEEE Computer and Communications Societies (INFOCOM). Chan, H. and Perrig, A. 2005. Pike: Peer intermediaries for key establishment in sensor networks. In Proceedings of the Annual Joint Conference of the IEEE Computer and Communications Societies (INFOCOM)."},{"key":"e_1_2_1_10_1","volume-title":"Proceedings of the IEEE Security and Privacy Symposim","author":"Chan H.","year":"2003","unstructured":"Chan , H. , Perrig , A. , and Song , D . 2003. Random key predistribution schemes for sensor networks . In Proceedings of the IEEE Security and Privacy Symposim 2003 . Chan, H., Perrig, A., and Song, D. 2003. Random key predistribution schemes for sensor networks. In Proceedings of the IEEE Security and Privacy Symposim 2003."},{"key":"e_1_2_1_11_1","unstructured":"Chapweske J. and Mohr G. 2002. Tree hash exchange format (thex). http:\/\/open-content.net\/specs\/draft-jchapweske-thex-01.html.  Chapweske J. and Mohr G. 2002. Tree hash exchange format (thex). http:\/\/open-content.net\/specs\/draft-jchapweske-thex-01.html."},{"key":"e_1_2_1_12_1","unstructured":"Crossbow Technology Inc. Wireless sensor networks. http:\/\/www.xbow.com\/Products\/Wireless_Sensor_Networks.htm.  Crossbow Technology Inc. Wireless sensor networks. http:\/\/www.xbow.com\/Products\/Wireless_Sensor_Networks.htm."},{"key":"e_1_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/986858.986870"},{"volume-title":"Proceedings of IEEE 2004 International Conference on Dependable Systems and Networks (DSN'04)","author":"Deng J.","key":"e_1_2_1_14_1","unstructured":"Deng , J. , Han , R. , and Mishra , S . 2004. Intrusion tolerance strategies in wireless sensor networks . In Proceedings of IEEE 2004 International Conference on Dependable Systems and Networks (DSN'04) . Deng, J., Han, R., and Mishra, S. 2004. Intrusion tolerance strategies in wireless sensor networks. In Proceedings of IEEE 2004 International Conference on Dependable Systems and Networks (DSN'04)."},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/948109.948118"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/586110.586117"},{"key":"e_1_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/1080793.1080809"},{"key":"e_1_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/958491.958508"},{"key":"e_1_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/1029102.1029115"},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/781131.781133"},{"key":"e_1_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/6490.6503"},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/378993.379006"},{"volume-title":"Proceedings of the ACM Computer on Communications Security Conference (INFOCOM'03)","author":"Hu Y.","key":"e_1_2_1_23_1","unstructured":"Hu , Y. , Perrig , A. , and Johnson , D . 2003. Packet leashes: A defense against wormhole attacks in wireless ad hoc networks . Proceedings of the ACM Computer on Communications Security Conference (INFOCOM'03) . Hu, Y., Perrig, A., and Johnson, D. 2003. Packet leashes: A defense against wormhole attacks in wireless ad hoc networks. Proceedings of the ACM Computer on Communications Security Conference (INFOCOM'03)."},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/1029102.1029110"},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/958491.958516"},{"key":"e_1_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/990064.990080"},{"volume-title":"Proceedings of the First IEEE Workshop on Sensor Network Protocols and Applications.","author":"Karlof C.","key":"e_1_2_1_27_1","unstructured":"Karlof , C. and Wagner , D . 2003. Secure routing in sensor networks: attacks and countermeasures . In Proceedings of the First IEEE Workshop on Sensor Network Protocols and Applications. Karlof, C. and Wagner, D. 2003. Secure routing in sensor networks: attacks and countermeasures. In Proceedings of the First IEEE Workshop on Sensor Network Protocols and Applications."},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/345910.345953"},{"volume-title":"Proceedings of the International Conference on Network Protocols (ICNP).","author":"Ko Y.","key":"e_1_2_1_29_1","unstructured":"Ko , Y. and Vaidya , N . 2000. Geotora: A protocol for geocasting in mobile ad hoc networks . Proceedings of the International Conference on Network Protocols (ICNP). Ko, Y. and Vaidya, N. 2000. Geotora: A protocol for geocasting in mobile ad hoc networks. Proceedings of the International Conference on Network Protocols (ICNP)."},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/778415.778447"},{"key":"e_1_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/1077391.1077395"},{"volume-title":"Proceedings of the 10th Annual Network and Distributed System Security Symposium (NDSS'03)","author":"Liu D.","key":"e_1_2_1_32_1","unstructured":"Liu , D. and Ning , P . 2003a. Efficient distribution of key chain commitments for broadcast authentication in distributed sensor networks . In Proceedings of the 10th Annual Network and Distributed System Security Symposium (NDSS'03) . 263--276. Liu, D. and Ning, P. 2003a. Efficient distribution of key chain commitments for broadcast authentication in distributed sensor networks. In Proceedings of the 10th Annual Network and Distributed System Security Symposium (NDSS'03). 263--276."},{"key":"e_1_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/948109.948119"},{"volume-title":"Proceedings of the International Symposium on Information Processing in Sensor Networks (IPSN).","author":"Liu D.","key":"e_1_2_1_34_1","unstructured":"Liu , D. , Ning , P. , and Du , W . 2005. Attack-resistant location estimation in sensor networks . In Proceedings of the International Symposium on Information Processing in Sensor Networks (IPSN). Liu, D., Ning, P., and Du, W. 2005. Attack-resistant location estimation in sensor networks. In Proceedings of the International Symposium on Information Processing in Sensor Networks (IPSN)."},{"key":"e_1_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/345910.345955"},{"volume-title":"Proceedings of the IEEE International Conference on Robtics &amp; Automation.","author":"McMickell M. B.","key":"e_1_2_1_36_1","unstructured":"McMickell , M. B. , Goodwine , B. , and Montestruque , L. A . 2003. Micabot: A robotic platform for large-scale distributed robotics . In Proceedings of the IEEE International Conference on Robtics &amp; Automation. McMickell, M. B., Goodwine, B., and Montestruque, L. A. 2003. Micabot: A robotic platform for large-scale distributed robotics. In Proceedings of the IEEE International Conference on Robtics &amp; Automation."},{"key":"e_1_2_1_37_1","volume-title":"Proceedings of Advances in Cryptography. 218--238","author":"Merkle R.","year":"1989","unstructured":"Merkle , R. 1989 . A certified digital signature . In Proceedings of Advances in Cryptography. 218--238 . Merkle, R. 1989. A certified digital signature. In Proceedings of Advances in Cryptography. 218--238."},{"key":"e_1_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/381677.381696"},{"key":"e_1_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/345910.345917"},{"key":"e_1_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/381677.381679"},{"key":"e_1_2_1_41_1","volume-title":"Proceedings of the 1st International Workshop on Fast Software Encryption. 86--96","author":"Rivest R.","year":"1994","unstructured":"Rivest , R. 1994 . The rc5 encryption algorithm . In Proceedings of the 1st International Workshop on Fast Software Encryption. 86--96 . Rivest, R. 1994. The rc5 encryption algorithm. In Proceedings of the 1st International Workshop on Fast Software Encryption. 86--96."},{"volume-title":"Proc. IEEE.","author":"Saltzer J. H.","key":"e_1_2_1_42_1","unstructured":"Saltzer , J. H. and Schroeder , M. D . 1975. The protection of information in computing systems . Proc. IEEE. Saltzer, J. H. and Schroeder, M. D. 1975. The protection of information in computing systems. Proc. IEEE."},{"key":"e_1_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/381677.381693"},{"key":"e_1_2_1_44_1","volume-title":"Proceedings of the IEEE International Conference on Robtics &amp; Automation.","volume":"2","author":"Sibley G.","unstructured":"Sibley , G. , Rahimi , M. , and Sukhatme , G . 2002. Robomote: A tiny mobile robot platform for large-scale ad hoc sensor networks . In Proceedings of the IEEE International Conference on Robtics &amp; Automation. Vol. 2 . Washington D.C., 1143--1148. Sibley, G., Rahimi, M., and Sukhatme, G. 2002. Robomote: A tiny mobile robot platform for large-scale ad hoc sensor networks. In Proceedings of the IEEE International Conference on Robtics &amp; Automation. Vol. 2. Washington D.C., 1143--1148."},{"key":"e_1_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.adhoc.2006.05.016"},{"key":"e_1_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2005.861396"},{"volume-title":"Proceedings of the 13th International Conference on Computer Communications and Networks (ICCCN'04)","author":"Tirta Y.","key":"e_1_2_1_47_1","unstructured":"Tirta , Y. , Li , Z. , Lu , Y. , and Bagchi , S . 2004. Efficient collection of sensor data in remote fields using mobile collectors . In Proceedings of the 13th International Conference on Computer Communications and Networks (ICCCN'04) . Tirta, Y., Li, Z., Lu, Y., and Bagchi, S. 2004. Efficient collection of sensor data in remote fields using mobile collectors. In Proceedings of the 13th International Conference on Computer Communications and Networks (ICCCN'04)."},{"key":"e_1_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2002.1039518"},{"key":"e_1_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/381677.381685"},{"key":"e_1_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/570645.570664"},{"volume-title":"Proceedings of the Annual Joint Conference of the IEEE Computer and Communications Societies (INFOCOM'05)","author":"Ye F.","key":"e_1_2_1_51_1","unstructured":"Ye , F. , Luo , H. , Lu , S. , and Zhang , L . 2004. Statistical en route filtering of injected false data in sensor networks . In Proceedings of the Annual Joint Conference of the IEEE Computer and Communications Societies (INFOCOM'05) . Ye, F., Luo, H., Lu, S., and Zhang, L. 2004. Statistical en route filtering of injected false data in sensor networks. In Proceedings of the Annual Joint Conference of the IEEE Computer and Communications Societies (INFOCOM'05)."},{"key":"e_1_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1109\/TWC.2004.833443"},{"volume-title":"Proceedings of the Annual Joint Conference of the IEEE Computer and Communications Societies (INFOCOM'05)","author":"Zhang W.","key":"e_1_2_1_53_1","unstructured":"Zhang , W. and Cao , G . 2005. Group rekeying for filtering false data in sensor networks: A predistribution and local collaboration based approach . In Proceedings of the Annual Joint Conference of the IEEE Computer and Communications Societies (INFOCOM'05) . Zhang, W. and Cao, G. 2005. Group rekeying for filtering false data in sensor networks: A predistribution and local collaboration based approach. In Proceedings of the Annual Joint Conference of the IEEE Computer and Communications Societies (INFOCOM'05)."},{"key":"e_1_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2007.1019"},{"key":"e_1_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/948109.948120"},{"volume-title":"Proceedings of the IEEE Symposium on Security and Privacy.","author":"Zhu S.","key":"e_1_2_1_56_1","unstructured":"Zhu , S. , Setia , S. , Jajodia , S. , and Ning , P . 2004. An interleaved hop-by-hop authentication scheme for filtering false data in sensor networks . Proceedings of the IEEE Symposium on Security and Privacy. Zhu, S., Setia, S., Jajodia, S., and Ning, P. 2004. An interleaved hop-by-hop authentication scheme for filtering false data in sensor networks. Proceedings of the IEEE Symposium on Security and Privacy."},{"volume-title":"Proceedings of the IEEE International Conference on Network Protocol (ICNP).","author":"Zhu S.","key":"e_1_2_1_57_1","unstructured":"Zhu , S. , Xu , S. , Setia , S. , and Jajodia , S . 2003b. Establishing pairwise keys for secure communication in ad hoc networks: A probabilistic approach . Proceedings of the IEEE International Conference on Network Protocol (ICNP). Zhu, S., Xu, S., Setia, S., and Jajodia, S. 2003b. Establishing pairwise keys for secure communication in ad hoc networks: A probabilistic approach. Proceedings of the IEEE International Conference on Network Protocol (ICNP)."}],"container-title":["ACM Transactions on Sensor Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1387663.1387669","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1387663.1387669","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T14:47:25Z","timestamp":1750258045000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1387663.1387669"}},"subtitle":["Toward tolerating mobile sink compromises in wireless sensor networks"],"short-title":[],"issued":{"date-parts":[[2008,8]]},"references-count":57,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2008,8]]}},"alternative-id":["10.1145\/1387663.1387669"],"URL":"https:\/\/doi.org\/10.1145\/1387663.1387669","relation":{},"ISSN":["1550-4859","1550-4867"],"issn-type":[{"type":"print","value":"1550-4859"},{"type":"electronic","value":"1550-4867"}],"subject":[],"published":{"date-parts":[[2008,8]]},"assertion":[{"value":"2006-01-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2007-12-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2008-09-04","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}