ZigBee网络Sybil攻击检测方案设计

Sybil Attack Detection Scheme Design in ZigBee Network

针对Zig Bee网络中Sybil攻击破坏资源分配、路由发现和数据融合等问题,提出一种Sybil攻击检测方案,该方案通过建立Sybil节点怀疑机制,标记处于相同地理位置的子节点以及通信距离与地理距离不一致的子节点;同时,设计Sybil节点识别流程,父节点联合合法邻居节点分别在不同信道上同时向疑似Sybil节点发送随机数,通过验证随机数的正确性来识别Sybil节点。安全性分析及实验结果表明,方案在有效检测Sybil攻击的同时,具有较小的通信开销和能量消耗。

Aiming at the problem of Sybil which attacks and destroys the resource allocation, routing discovery and data aggregation in Zig Bee network, a scheme to detect Sybil attacks was proposed. The scheme established a doubt mechanism of Sybil node to mark child nodes in the same location as well as communication distance inconsistent geographical distance. The scheme designed a identified processes of Sybil node via father joint legal neighboring nodes transmitting a random number to the suspected Sybil nodes on different channels simultaneously, identifying Sybil nodes by its correctness. Safety analysis and experiment results show that the proposed scheme has high accuracy detection rate with low communication overhead and energy consumption when confronting Sybil attack in Zig Bee network.