Neighbor-based Intrusion Detection for Wireless Sensor Networks

Investor logo

Warning

This publication doesn't include Faculty of Education. It includes Faculty of Informatics. Official publication website can be found on muni.cz.
Authors

STETSKO Andriy FOLKMAN Lukáš MATYÁŠ Václav

Year of publication 2010
Type Article in Proceedings
Conference ICWMC 2010: The Sixth International Conference on Wireless and Mobile Communications
MU Faculty or unit

Faculty of Informatics

Citation
Field Informatics
Keywords intrusion detection system;neighbor-based detection technique;wireless sensor network
Description The neighbor-based detection technique explores the principle that sensor nodes situated spatially close to each other tend to have a similar behavior. A node is considered malicious if its behavior significantly differs from its neighbors. This detection technique is localized, unsupervised and adapts to changing network dynamics. Although the technique is promising, it has not been deeply researched in the context of wireless sensor networks yet. In this paper, we present symptoms which can be used in the neighbor-based technique for detection of selective forwarding, jamming and hello flood attacks. We implemented an intrusion detection system which employs the neighbor-based detection technique. The system was designed for and works on the TinyOS operating system running the Collection Tree Protocol. We evaluated accuracy of the technique in the detection of selective forwarding, jamming and hello flood attacks. The results show that the neighbor-based detection technique is highly accurate.
Related projects:

You are running an old browser version. We recommend updating your browser to its latest version.