Liu Anfeng, Dong Mianxiong, Ota Kaoru, Long Jun
School of Information Science and Engineering, Central South University, ChangSha 410083, China.
Department of Information and Electronic Engineering, Muroran Insitute of Technology, Hokkaido 050-8585, Japan.
Sensors (Basel). 2015 Dec 9;15(12):30942-63. doi: 10.3390/s151229835.
In this paper, a Per-Hop Acknowledgement (PHACK)-based scheme is proposed for each packet transmission to detect selective forwarding attacks. In our scheme, the sink and each node along the forwarding path generate an acknowledgement (ACK) message for each received packet to confirm the normal packet transmission. The scheme, in which each ACK is returned to the source node along a different routing path, can significantly increase the resilience against attacks because it prevents an attacker from compromising nodes in the return routing path, which can otherwise interrupt the return of nodes' ACK packets. For this case, the PHACK scheme also has better potential to detect abnormal packet loss and identify suspect nodes as well as better resilience against attacks. Another pivotal issue is the network lifetime of the PHACK scheme, as it generates more acknowledgements than previous ACK-based schemes. We demonstrate that the network lifetime of the PHACK scheme is not lower than that of other ACK-based schemes because the scheme just increases the energy consumption in non-hotspot areas and does not increase the energy consumption in hotspot areas. Moreover, the PHACK scheme greatly simplifies the protocol and is easy to implement. Both theoretical and simulation results are given to demonstrate the effectiveness of the proposed scheme in terms of high detection probability and the ability to identify suspect nodes.
本文针对每次数据包传输提出了一种基于逐跳确认(PHACK)的方案,用于检测选择性转发攻击。在我们的方案中,汇聚节点和转发路径上的每个节点都会为每个接收到的数据包生成一个确认(ACK)消息,以确认数据包的正常传输。该方案中,每个ACK沿着不同的路由路径返回给源节点,因为它防止攻击者破坏返回路由路径上的节点,否则这些节点可能会中断ACK数据包的返回,所以该方案可以显著提高抗攻击能力。对于这种情况,PHACK方案在检测异常数据包丢失、识别可疑节点以及抗攻击能力方面也具有更好的潜力。另一个关键问题是PHACK方案的网络寿命,因为它比以前基于ACK的方案生成更多的确认信息。我们证明PHACK方案的网络寿命不低于其他基于ACK的方案,因为该方案只是增加了非热点区域的能量消耗,而没有增加热点区域的能量消耗。此外,PHACK方案极大地简化了协议,易于实现。理论和仿真结果都表明了所提方案在高检测概率和识别可疑节点能力方面的有效性。