Two-Hop Monitoring Mechanism Based on Relaxed Flow Conservation Constraints against Selective Routing Attacks in Wireless Sensor Networks

• Published in: Sensors (Basel, Switzerland) Vol. 20; no. 21; p. 6106
• Main Authors: Derhab, Abdelouahid, Bouras, Abdelghani, Belaoued, Mohamed, Maglaras, Leandros, Khan, Farrukh Aslam
• Format: Journal Article
• Language: English
• Published: Basel MDPI AG 01.11.2020; MDPI
• Subjects: Communication; Computer Science; Cryptography and Security; Distributed, Parallel, and Cluster Computing; intrusion detection system; Intrusion detection systems; Machine Learning; Monitoring; Multiagent Systems; Networking and Internet Architecture; Nodes; Performance evaluation; relaxed flow conservation constraint; selective routing attack; Sensors; two-hop monitoring; Upstream; Wireless networks; wireless sensor network; Wireless sensor networks
• ISSN: 1424-8220; 1424-8220
• DOI: 10.3390/s20216106

In this paper, we investigate the problem of selective routing attack in wireless sensor networks by considering a novel threat, named the upstream-node effect, which limits the accuracy of the monitoring functions in deciding whether a monitored node is legitimate or malicious. To address this limitation, we propose a one-dimensional one-class classifier, named relaxed flow conservation constraint, as an intrusion detection scheme to counter the upstream node attack. Each node uses four types of relaxed flow conservation constraints to monitor all of its neighbors. Three constraints are applied by using one-hop knowledge, and the fourth one is calculated by monitoring two-hop information. The latter is obtained by proposing two-hop energy-efficient and secure reporting scheme. We theoretically analyze the security and performance of the proposed intrusion detection method. We also show the superiority of relaxed flow conservation constraint in defending against upstream node attack compared to other schemes. The simulation results show that the proposed intrusion detection system achieves good results in terms of detection effectiveness.