基于D-S证据理论的无线传感器网络MAC层安全研究

Research on MAC security based on D-S evidence theory in wireless sensor networks

研究了无线传感器网络MAC层安全问题,分析了现有无线传感器网络MAC层协议安全体系的不足之处,针对无线传感器网络遭到非法入侵的情况,提出了一个基于D-S证据理论的MAC层入侵检测机制。该机制利用碰撞率、数据包平均等待时间、RTS包到达率以及邻居节点的报警作为证据,对网络的状态进行实时的分析检测,根据网络的状态作出响应。该算法能够应用于现有的MAC协议如S-MAC、IEEE 802.15.4中,仿真结果表明,该算法能够较好地抵御针对MAC层的攻击,保证网络的安全运行。

This paper considered the security problem at MAC layer in wireless sensor networks, analyzed the security defects in current works on MAC protocols, and then presented a intrusion detection system （IDS） on MAC layer based on D-S evidence theory for the condition that current security system was broken down. In the IDS, selected the collision ratio, data packet＇ s waiting time, RTS packets arrival ratio and the other nodes＇ alarms as evidences to detect the attacks such as collision attack, unfairness attack and exhaustion attack. This IDS can be used in S-MAC, IEEE 820.15.4 directly. To evaluate the performance of the system, analyzed the IDS with NS-2, the results show that the IDS can defense attacks on MAC layer, and guarantee the wireless sensor networks work well.