SRNET: a real-time, cross-based anomaly detection and visualization system for wireless sensor networks

  • Authors:
  • Eirini Karapistoli;Panagiotis Sarigiannidis;Anastasios A. Economides

  • Affiliations:
  • University of Macedonia, Thessaloniki, Greece;University of Western Macedonia, Kozani, Greece;University of Macedonia, Thessaloniki, Greece

  • Venue:
  • Proceedings of the Tenth Workshop on Visualization for Cyber Security
  • Year:
  • 2013

Quantified Score

Hi-index 0.00

Visualization

Abstract

Security concerns are a major deterrent in many applications wireless sensor networks are envisaged to support. To date, various security mechanisms have been proposed for these networks dealing with either Medium Access Control (MAC) layer or network layer security issues, or key management problems. Security visualization is the latest weapon that has been added in the arsenal of a security officer who is tasked with detecting network anomalies by analyzing large amounts of audit data. This paper proposes a novel security visualization system for analyzing and detecting complex patterns of sensor network attacks, called SRNET. Both selective forwarding and jamming attacks are identified through visualizing and analyzing network traffic data on multiple coordinated views, namely the multidimensional crossed view, the crossed view perspective, and the track area view. Through simulations, we demonstrate that SRNET is able to help detect and further identify the root cause of the aforementioned sensor network attacks.