TinyWIDS++

Intrusion Detection System for Wireless Sensor Networks improved with active reactions to incoming attacks

Logo

Main partner/Developer Tool developer

Tool Link Link to website/github (URL) with more detailed information (optional)

Tool partners Non-owner organizations associated with the tool (partners/distributors)

Improved/Developed Tool Select if it is a new tool (developed) or an improved tool

Tool description A detailed description of the tool

TinyWIDS++ is an Intrusion Detection System (IDS) specific for Wireless Sensor Networks (WSN). It targets low-resource hardware devices and provide an lightweight detection mechanism based on modelling attacks via Weak Process Models. During the normal software application execution, TinyWIDS++ maps the node state on the model by collecting the events (called "observables") that the hardware/software platform generate. Once TinyWIDS++ detects a "dangerous" state, it sends a notification and a callback that allows developers to setup a countermeasure action.

Technical toolchains Technical connection of tools with their supporting tools. Example: for running a specific tool, you need to run/install this other tool(s) (e.g., CHESS-FLA CHESS, MoMuT Enterprise Architect, etc)

Description of the improvements Description of the improvements and novelties added during VALU3S/Baseline

TinyWIDS++ improves TinyWIDS and introduces a new core functionality: active reactions to intrusions. Active reactions will make available a selection of counter-moves (active reactions) (aimed to delay, deter, locate or eventually block incoming intrusions in the WSN. The active reactions will be triggered by the WPM state estimation process and will act while the WSN operations (who will receive an intrusion notification) are on the way to perform on-field operations. The operators will be also provided with additional information (e.g., locations and IDs of the affected WSN nodes) retrieved by the active reactions, which could be helpful as forensic evidence to determine the source or vulnerability exploited by the intrusion. The active reactions will be selectable and customizable

Improvement date

New Improvements To be filled in the future (after VALU3S)

References Related papers, journals, articles, and so on

Luciano Bozzi, Lorenzo Di Giuseppe, Luigi Pomante, Marco Pugliese, Marco Santic, Fortunato Santucci, and Walter Tiberti. 2018. TinyWIDS: a WPM-based Intrusion Detection System for TinyOS2.x/802.15.4 Wireless Sensor Networks. In Proceedings of the Fifth Workshop on Cryptography and Security in Computing Systems (CS2 '18). Association for Computing Machinery, New York, NY, USA, 13–16. https://doi.org/10.1145/3178291.3178293

Relationships with other web-repo artefacts

Related V&V Methods A tool could be based on several V&V methods.

Standards A method can be linked with standards.

Use cases Use cases where the tool has been used

Functional Toolchain Functional connection of tools for the implementation of a specific evaluation scenario/workflow. Example: the output of one tool can be used by the other tool(s) in order to obtain a different information (e.g., CIROS FERAL, MARVER >-> SRVT, etc)

Improvement Classification

Evaluation Criteria for Safety, Cybersecurity, and Privacy (SCP)

Evaluation Criteria for V&V Processes

Open source - Goals

open Source

Goals Tool goals

Contents

There are currently no items in this folder.