基于规范的入侵检测技术在无线传感网中的研究

Specification-based intrusion detection for WSN

探讨了无线传感网中的入侵检测技术,提出了设计传感网入侵检测系统时应遵守的一些基本原则,并以此为基础设计了一种简单有效的实施方案。该方案利用同一邻居关系节点间的分工协作和信息交流可以使网络恢复正常的运行状态。重点解决如何依据局部信息,通过分布式方案来实现对传感网的入侵行为的检测;通过定义简单的规则实现了对黑洞攻击和选择性转发攻击的检测。最后通过实验对方案的有效性进行了验证。

To study the problem of intrusion detection in WSN, this paper proposed some basic principles and a good scheme that could be applied to such networks. The collaboration and exchange of nodes in the same neighborhood could make the network back to its normal operational situation. Detection with localized and partial audit data was achieved by a distributed approach. The design was applied for the black-hole and selective forwarding attacks by defining appropriate rules. Finally, the effectiveness of this scheme was verity.