A Trust Based Routing Protocol for Mitigation of Sinkhole Attacks in Wireless Sensor Networks

Abstract

520 Abstract-As wireless sensor networks are characterized by severely constrained node resources, low communication range, low memory capacity and dynamic nature of WSNs, implementing security functionality and detection protocols to protect against adversary nodes becomes a challenging task. It is very likely that the encryption keys in the sensor nodes are accessed by attacker entities. The compromised nodes can launch sinkhole or wormhole attack to prevent the arrival of important information to the base station (BS). Establishing trust among distributed network entities has been recognized as a powerful tool to secure distributed networks such as MANETs and sensor networks. In this paper we first estimate the area in the network where a sinkhole attack has occurred there by considering the energy consumption model in the network. Then we present an entropy-based trust model in which more factors that affect trust computation are introduced. We apply a trust-based routing for providing a high level of security by path selection based on packet trust requirement. So it is needed that a routing protocol classifies the traffic packets according to their requested security and then routs the packets related to each class through the path that fulfills the security requirements of them. Our proposed approach that purposes to cover the mentioned problem is a resource efficient security protocol. This means that a trust value is allocated to the area suspected of sinkhole; the area is located by analyzing the energy of networks nodes and the packet is forwarded through low risk paths.Index Terms-Wireless sensor networks, sinkhole attack, trust model, secure routing. I. INTRODUCTIONIn sinkhole attack the compromised node attracts the traffic of its neighbors by pretending that it has the shortest path to the base-station.and drops them. So it prevents the BS to receive sensed information completely and correctly. The sinkhole may launch a variety of attacks against the data traffic. If the sinkhole node drops the packets selectively we are facing a selective forwarding attack. Also it may modify some packets content and forwards them which is the most malicious type of sinkhole [1], [2]. Compromised nodes in selective forwarding attack are modeled as nodes that drop messages with probability p messages instead of forwarding them. When the probability p=1 we are facing sinkhole nodes [3]. In order to protect WSNs against malicious and selfish behavior, different secure routing protocols have been Manuscript received April 3, 2014; revised June 13, 2014. Omid Naderi and Mehdi Shahedi are with the Department of Computer, Science and Research Branch, Islamic Azad University, South Khorasan, Birjand, MhdShahedi@Gmail.com).Sayyed majid Mazinani is with the Electrical Engineering Department, Imam Reza International University, Mashhad, Iran (e-mail: smajid_mizinani@yahoo.com).developed which mainly rely on cryptographic Basics and authentication mechanisms which are not suitable for WSNs. It is difficult to prevent pack...

Identifying and Improving the Malicious Behavior of Rushing and Blackhole Attacks using Proposed IDSAODV Protocol

“…Second, the novel design and evaluation of two simple and resilient topology-based reconfiguration protocols that broadcast cryptographic values. Omid Naderi et al [22] presented an efficient algorithm to mitigate the effects of sinkhole attack and provide an entropy-based trust model. L. Coppolino et al [23] presented an Intrusion Detection System (IDS), which can protect a CI from attacks directed to its WSN-based parts.…”

Trust Mechanisms to Secure Routing in Wireless Sensor Networks: Current State of the Research and Open Research Issues

“…(i) Greyhole/selective forwarding [15][16][17][18][19][20][21][22][23][24][25][26][27][28][29][30][31][32][33][34] (ii) Wormhole [35][36][37][38][39][40][41][42][43] (iii) Sinkhole [26,[42][43][44][45][46][47][48][49][50] (iv) Sybil attacks [51][52][53][54][55][56][57][58][59] Since we did not find a significant number of articles for other attacks, we overview articles only for the abovementioned attacks.…”

“…On the other hand, the last two forms of the attack are easier to detect due to uniform behavior. [17][18][19][20][22][23][24][25][26][27][28][29][30][31] are based on the watchdog mechanism. Watchdog mechanism can be used by nodes which are located on each other's transmission range.…”

“…In this way, data reached to destination. Secure routing algorithm for inquirybased WSN is proposed in [26]. So in this scheme, first sink node requests data.…”

“…In [26] query-based routing is proposed, in which first sink nodes queries network about sensor data that will be broadcasted until query reaches the source node. Once source node receives the query, it broadcasts the sensor data.…”