A lightweight intrusion detection framework for wireless sensor networks

  • Authors:
  • Tran Hoang Hai;Eui-Nam Huh;Minho Jo

  • Affiliations:
  • Internet Computing and Network Security Laboratory, Kyunghee University, Seocheon-Dong, Giheung-Gu, Yongin-Si, Gyeonggi-Do, South Korea;Internet Computing and Network Security Laboratory, Kyunghee University, Seocheon-Dong, Giheung-Gu, Yongin-Si, Gyeonggi-Do, South Korea;Graduate School of Information Management and Security, Korea University, 1, 5-Ga, Anam-Dong, Sungbuk-Gu, Seoul 136-701, South Korea

  • Venue:
  • Wireless Communications & Mobile Computing
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

In recent years, Wireless Sensor Networks (WSNs) have demonstrated successful applications for both civil and military tasks. However, sensor networks are susceptible to multiple types of attacks because they are randomly deployed in open and unprotected environments. It is necessary to utilize effective mechanisms to protect sensor networks against multiple types of attacks on routing protocols. In this paper, we propose a lightweight intrusion detection framework integrated for clustered sensor networks. Furthermore, we provide algorithms to minimize the triggered intrusion modules in clustered WSNs by using an over-hearing mechanism to reduce the sending alert packets. Our scheme can prevent most routing attacks on sensor networks. In in-depth simulation, the proposed scheme shows less energy consumption in intrusion detection than other schemes. Copyright © 2009 John Wiley & Sons, Ltd. The guard nodes use the watchdog monitoring mechanism and predefined rules with two-hop neighbor knowledge to detect anomalies within their transmission ranges. In watchdog, due to the broadcast nature of wireless networks, guard nodes receive packets within their radio range. These packets are captured and stored in a buffer which contains information including the packet identification and type, source and destination, etc. Using captured information by global and local agent modules in guard nodes, detection is achieved successfully.