Path-aware networks have garnered significant attention as an emerging research area. It allows network senders to actively select or influence transmission paths to meet specific requirements, which necessitates the support of path validation mechanisms. Supported by the path-aware networking research group under the Internet Engineering Task Force (IETF), path validation plays a crucial role in enhancing end hosts' control over packet forwarding. However, existing methods face trade-offs among security, protocol header overhead, and computational cost, forming a ''trilemma.'' Drawing inspiration from persistent validation in zero-trust architecture, we propose the 1BIT protocol. This protocol reduces protocol header overhead by more than 57% while providing robust data flow security. The packet demand for path fault detection is reduced by more than 72%, and fault locations can be precisely identified. By employing hash algorithms and few binary operations, the 1BIT protocol achieves high throughput and supports routers capable of adapting to high-speed, multi-interface environments. On a 16-core CPU, the 1BIT protocol can handle throughput exceeding 100 Gbps. This lightweight and efficient solution introduces anomaly signal detection techniques into the field of path validation. Benefiting from in-depth research on anomaly signal detection, this technology offers a richer set of solutions for path validation and lays the foundation for future research and implementation in areas such as multi-path validation and path privacy protection.

Wireless sensor networks (WSNs) are a crucial component of the Internet of Things (IoT). In recent years, the increasing number of smart devices communicating through WSNs has fueled growing research in this area. While WSNs hold great potential for development, they also face several challenges, such as ensuring key security and facilitating key updates. In this paper, we propose a threshold distributed key generation (TDKG) scheme based on verifiable secret sharing. Additionally, we present a dynamic key management scheme that utilizes the vector commitment to ensure that the secret key generated by smart devices cannot be arbitrarily altered. Subsequently, we describe the ECC-based instantiation schemes for TDKG and key management. Besides, the security analysis demonstrates that our proposed scheme offers enhanced security properties compared to existing approaches, while also achieving good performance in terms of time and communication costs.

Due to characteristics such as the openness and exposure of inter-satellite links, Low-Earth Orbit (LEO) satellite networks are subject to heightened vulnerability to malicious attacks compared to ground-based networks. Given various security risks, implementing trust management in LEO satellite networks becomes imperative. However, existing trust management schemes tailored for this scenario are vulnerable to a spectrum of attacks, resulting in low detection rates and poor network performance. To address the above issues, we propose BiTrust, a hybrid trust management scheme for secure data transmission in LEO satellite networks. BiTrust introduces two distinct types of trust: state trust and behavior trust. State trust leverages remote attestation technology to verify the authenticity of node identities and the integrity of their functions, ensuring that nodes consistently disseminate reliable behavior trust announcements to safeguard the trust plane. Behavior trust, on the other hand, utilizes a trust model to quantify the real-time data forwarding behavior characteristics of nodes, thereby maintaining the reliability of the data plane. To precisely quantify behavior trust, we design a trust model based on multi-path trust propagation. By integrating an unstable penalty term, the proposed trust model can effectively defend against dynamic dropping misbehavior. Besides, to facilitate the deployment of BiTrust in a distributed manner, we introduce a two-hop rely message mechanism and a query-answer mechanism to support the construction of behavior trust. Experimental results confirm the efficacy of BiTrust, demonstrating a significant improvement of up to 64.3% in data transmission rate under highly untrusted environments while maintaining affordable overhead.