Dynamic camouflage event based malicious node detection architecture

Abstract

Compromised sensor nodes may collude to segregate a specific region of the sensor network preventing event reporting packets in this region from reaching the basestation. Additionally, they can cause skepticism over all data collected. Identifying and segregating such compromised nodes while identifying the type of attack with a certain confidence level is critical to the smooth functioning of a sensor network. Existing work specializes in preventing or identifying a specific type of attack and lacks a unified architecture to identify multiple attack types. Dynamic Camouflage Event-Based Malicious Node Detection Architecture (D-CENDA) is a proactive architecture that uses camouflage events generated by mobile-nodes to detect malicious nodes while identifying the type of attack. We exploit the spatial and temporal information of camouflage event while analyzing the packets to identify malicious activity. We have simulated D-CENDA to compare its performance with other techniques that provide protection against individual attack types and the results show marked improvement in malicious node detection while having significantly less false positive rate. Moreover, D-CENDA can identify the type of attack and is flexible to be configured to include other attack types in future.

Virtual energy based distributed security for wireless sensor networks

“…Event based malicious node detection [5] architecture is proactive that uses camouflage events generated by mobile nodes to detect malicious nodes. While the mobile node starts the route designed by the base station and it stops at the designated location and it generates camouflage event.…”

Trust, security and privacy for pervasive applications

“…The fourth paper, "Dynamic Camouflage Event based Malicious Node Detection Architecture," [4] presents the Dynamic Camouflage Event-based malicious Node Detection Architecture (D-CENDA) for detecting malicious nodes in the sensor networks. D-CENDA improves CENDA by using dynamic feedback from the network in the form of sensor node usage for event detection and packet propagation.…”