Department of Defense Science (Computer Engineering and Cyberwarfare Major), Graduate School of Defense Management, Korea National Defense University, Nonsan 33021, Republic of Korea.
Department of Electrical and Computer Engineering and Institute of Systems Research, University of Maryland, College Park, MD 20742, USA.
Sensors (Basel). 2023 Apr 30;23(9):4407. doi: 10.3390/s23094407.
Quick and accurate detection of inside packet drop attackers is of critical importance to reduce the damage they can have on the network. Trust mechanisms have been widely used in wireless sensor networks for this purpose. However, existing trust models are not effective because they cannot distinguish between packet drops caused by an attack and those caused by normal network failure. We observe that insider packet drop attacks will cause more consecutive packet drops than a network abnormality. Therefore, we propose the use of consecutive packet drops to speed up the detection of inside packet drop attackers. In this article, we describe a new trust model based on consecutive drops and develop a hybrid trust mechanism to seamlessly integrate the new trust model with existing trust models. We perform extensive OPNET (Optimized Network Engineering Tool) simulations using a geographic greedy routing protocol to validate the effectiveness of our new model. The simulation results show that our hybrid trust model outperforms existing trust models for all types of inside packet drop attacks, not only in terms of detection speed and accuracy as it is designed for, but also in terms of other important network performance metrics, such as packet delivery rate, routing reliability, and energy efficiency.
快速准确地检测内部丢包攻击者对于减少他们对网络造成的损害至关重要。为此,信任机制已被广泛应用于无线传感器网络中。然而,现有的信任模型并不有效,因为它们无法区分攻击引起的丢包和正常网络故障引起的丢包。我们观察到,内部丢包攻击会导致比网络异常更多的连续丢包。因此,我们提出使用连续丢包来加速检测内部丢包攻击者。在本文中,我们描述了一种基于连续丢包的新信任模型,并开发了一种混合信任机制,以无缝集成新的信任模型与现有的信任模型。我们使用地理贪婪路由协议在 OPNET(优化网络工程工具)上进行了广泛的仿真,以验证我们新模型的有效性。仿真结果表明,我们的混合信任模型在所有类型的内部丢包攻击下都优于现有的信任模型,不仅在设计的检测速度和准确性方面,而且在其他重要的网络性能指标方面,如分组投递率、路由可靠性和能量效率。