As the de facto routing protocol for many Internet of Things (IoT) networks nowadays, and to assure the confidentiality and integrity of its control messages, the Routing Protocol for Low Power and Lossy Networks (RPL) incorporates three modes of security: the Unsecured Mode (UM), Preinstalled Secure Mode (PSM), and the Authenticated Secure Mode (ASM). While the PSM and ASM are intended to protect against external routing attacks and some replay attacks (through an optional replay protection mechanism), recent research showed that RPL in PSM is still vulnerable to many routing attacks, both internal and external. In this paper, we propose a novel secure mode for RPL, the Chained Secure Mode (CSM), based on the concept of intraflow Network Coding (NC). The CSM is designed to enhance RPL resilience and mitigation capability against replay attacks while allowing the integration with external security measures such as Intrusion Detection Systems (IDSs). The security and performance of the proposed CSM were evaluated and compared against RPL in UM and PSM (with and without the optional replay protection) under several routing attacks: the Neighbor attack (NA), Wormhole (WH), and CloneID attack (CA), using average packet delivery rate (PDR), End-to-End (E2E) latency, and power consumption as metrics. It showed that CSM has better performance and more enhanced security than both the UM and PSM with the replay protection, while mitigating both the NA and WH attacks and significantly reducing the effect of the CA in the investigated scenarios.

翻译：作为当今许多物联网网络(IOT)事实上的路径协议,并且为了确保其控制信息的保密性和完整性,《低功率和损失网络(RPL)运行协议》包含三种安全模式:无保障模式(UM)、预先安装安全模式(PSM)和经认证的安全模式(ASM)。虽然PSM和ASM意在保护不受外部路由攻击和一些重放攻击(通过选择性重播保护机制),但最近的研究表明,PSM的降价仍然易受许多路由攻击的伤害,无论是内部还是外部的。 在本文件中,我们根据内部流网络(NCNC)的概念,提出了一个新的安全模式(CSM);CSM旨在增强RP的复原力和减轻攻击的能力,同时允许与外部安全措施(Intrus Surveciation Smation系统(ID))的整合,拟议的CSMSM的安全和性能表现比RPL和PSM(NSM)的减少,同时不使用选择性的内向内线和内线-RMU(CR)攻击(CRM)的性攻击,在几处的交付率下显示(CSMUBRAA)的性攻击的性攻击的性攻击(明显和(明显)的更高)的性攻击的更高性攻击的性攻击的强度),在提高(SMUBRBRBRB)下显示(SB),在几级的性攻击的性攻击的性攻击的强度)下,在几下,在提高性攻击的性攻击的性攻击的性攻击的性攻击的防能和性能(SMU)。