Real-Testbed Fingerprinting of Child-Parent Clock Drift for Node Impersonation Detection in 6TiSCH Networks
IEEE NETWORKING LETTERS, cilt.8, sa.4, ss.1-5, 2026 (ESCI)
- Yayın Türü: Makale / Editöre Mektup
- Cilt numarası: 8 Sayı: 4
- Basım Tarihi: 2026
- Doi Numarası: 10.1109/lnet.2026.3742886
- Dergi Adı: IEEE NETWORKING LETTERS
- Derginin Tarandığı İndeksler: Emerging Sources Citation Index (ESCI)
- Sayfa Sayıları: ss.1-5
- Karadeniz Teknik Üniversitesi Adresli: Evet
Özet
6TiSCH networks verify device identity only through software-configurable addresses, leaving them open to impersonation. We show, on a real seven-node CC2538 testbed, that the clock-drift correction already computed by the TSCH time-synchronization loop is a stable, per-link child-parent fingerprint of the pair's crystal frequency offset, obtained without extra synchronization traffic or sensing hardware. Across the six-client DODAG it spans 7.6 to 23.7 ppm. Swapping a genuine device (16.2 ppm) for an attacker reusing the same address drops the fingerprint to 5.8 ppm, cleanly separable from its enrolled value. The drift thus provides an always-on, low-overhead feature complementing cryptographic device-identity verification.