Literature review of Security and Privacy in Visual Sensor Network: A survey. Winkler, T., & Rinner, B. (2014). Security and Privacy Protection in Visual Sensor Networks: A Survey. ACM Computing Surveys (CSUR), 47(1), 2.

1. Security and Privacy Protection
in Visual Sensor Network
Advisor:
Leonid Batyuk
Student:
Khan Reaz
1

2. Agenda
• Attack scenarios on VSN
• Design Challenges
• Requirements
• Privacy Protection Mechanism
2

3. VSN in an open space: Station
Source: http://goo.gl/XjHxYM 3

4. VSN in a closed space: Power Plant
Source: http://goo.gl/U1mpM4

5. Application Scenarios
Reactive Monitoring
for Enforcement
Reactive Monitoring
for Private Safety
Proactive Monitoring
for Public Safety
5

6. Security and Privacy Requirements for VSN
6

7. Classification of Attacks
Disruptive
Attack
PassiveAttack
Active
Attack
7
• Goals
• By Whom
• What Level
Passive:Il
Active: Pa
infrastruc
Disruptin
Outsiders
Insiders

8. Classification of Attack (Cont’d…)
• Illegitimate Data Access:
• Disrupting Service:
• Illegitimate Control:
8
Attacker collects data for his/her own
use by eavesdropping
Takes (partial) control of a node by forge
or injecting control messages.
Takes (partial) control of a node by forge
or injecting control messages.
Takes (partial) control of a node by forge
or injecting control messages.

9. “Who will guard the guards?”
*Roman poet: Juvenal
Prevention from outsiders attack:
- Data Encryption
- Authentication
- Digital Signature etc.
• Applying Four Eye principle
• Only minimal amount of information is disclosed
9

10. • Modification of Softwares
• Installation of new software (i.e: Malware, Rootkits)
• Changes of routing and MAC protocol.
Software vs Hardware Attack
10
Hardware based security:
- Smartcards
- CPU instruction set extensions
- Trusted Platform Module (TPM)
More sophisticated methods:
- Reverse engineering of IC
- Via side channel exploitation.

11. Design Challenges in VSN
11

12. Security Requirements
12

13. Node Centric Security Requirements
13

14. Data-Centric Security Requirements
14

15. User Centric Security Requirements
15

16. Network Centric Security Requirements
16

17. Protocol Overview
17
IN
w
Ar
pr
SP
N
fo
Zi
co
of
de
co
di
Zi
ke
di
an
es
N
m
sa
ar
be
W
pr
in
tra
SP
im
D
au
TE
au
re

18. Observations
• Reactive Data Delivery Cannot Replace Security.
• Tradeoff between Privacy Protection and System Utility.
• Incomplete Security Requirements & unclearResponsibilities.
• Lack of
18
• Node Centric Protection.
• User Centric Protection.
• Collaboration Security.
{

19. • No Common Definition
• Highly Subjective
• Legislative
• Identity vs Behavior
Protecting Privacy
19

20. Privacy Protection Techniques
Blanking Pixelation Abstraction Encryption
20
Detection

21. Remarks
21
• Pre Deployment Audit
• Requirements Analysis
• Regular Threat Drill
• Awareness Campaign

22. 22
Thank you

23. • Winkler, T., & Rinner, B. (2014). Security and
Privacy Protection in Visual Sensor Networks: A
Survey. ACM Computing Surveys (CSUR), 47(1), 2.
References
23