Abstract:

In order to resist selective forwarding attacks in wireless sensor networks (WSNs), a lightweight selective forwarding attack detection scheme for wireless sensor networks (LSFAD) is presented. The LSFAD scheme detects the selective forwarding attack path by calculating and comparing the average packet loss rate of the path and the normal packet loss rate of the path, and locates malicious nodes or malicious links by calculating the average packet loss rate and normal packet loss rate of each node. The design of the LSFAD scheme is simple, it doesn’t require any monitoring nodes and any complex evaluation models, and malicious path detection is performed during the normal process of sending and receiving packets, which doesn’t affect the normal work of the whole network. Security and performance analysis show that the LSFAD scheme can resist passive selective forwarding attacks and active selective forwarding attacks, and the communication cost of the LSFAD scheme is much less than other schemes. Experimental simulation results show that in the LSFAD scheme, the selective forwarding attack path can be detected even if the normal packet loss rate of the link is 0.125, and when the normal packet loss rate of the link is greater than 0.025, malicious nodes or malicious links can be successfully detected and located by the base station. More-over, the energy consumed by detecting and locating malicious nodes is similar to that consumed in normal model.

Key words: wireless sensor networks (WSNs), selective forwarding attack, malicious path, malicious nodes

摘要：

为了抵抗无线传感器网络（WSNs）选择性转发攻击,提出一种轻量级的无线传感器网络选择性转发攻击检测方案（LSFAD）。LSFAD方案通过计算并比较路径的平均丢包率和路径的正常丢包率检测选择性转发攻击路径,通过计算每个节点的平均丢包率和正常丢包率检测定位恶意链路。LSFAD方案设计简单,不需要任何监听节点,不需要任何复杂的评估模型,且在正常的数据包收发过程中进行恶意路径的检测,不会影响整个网络的正常工作。安全和性能分析表明,LSFAD方案能抵抗恶意节点发起的被动选择性转发攻击和主动选择性转发攻击,LSFAD方案的通信开销要远远小于其他方案。实验仿真结果表明,LSFAD方案即使当链路的正常丢包率为0.125选择性转发攻击路径都能被检测到,当链路正常丢包率大于0.025,发起选择性转发攻击的恶意节点都能被成功检测定位到,并且网络在检测定位恶意节点的状态下消耗的能量与正常情况下消耗的能量相差不大。

关键词: 无线传感器网络（WSNs）, 选择性转发攻击, 恶意路径, 恶意节点