Employ DBSCAN and Neighbor Voting to Screen Selective Forwarding Attack Under Variable Environment in Event-Driven Wireless Sensor Networks

Abstract

In the event-driven wireless sensor networks (EWSNs), the event of interests occurs irregularly and at random in the network. Then, sensor nodes near the event sense the event and send out data packets of the event. Next, router nodes (RNs) forward those packets to the sink node (SN) by multi-hop communications. Compromised RNs would become malicious and launch selective forwarding attacks by dropping part of or all the packets from other nodes. On the other hand, a harsh environment makes the channel poor, so the routing nodes under a harsh environment have low packet forwarding rates because they sometimes have to give up forwarding the current packets after many tries to forward them due to poor channel. If the malicious nodes' forwarding rates become close to those of nodes under a harsh environment, the schemes based on packet forwarding rates for detecting selective forwarding attack may fail because they cannot differentiate the low data packet forwarding rates resulting from the malicious behaviors or harsh environment. To solve this problem, we provide a combined scheme for detecting selective forwarding attack in wireless sensor networks (WSNs) under harsh environments. This scheme employs a data clustering algorithm (DCA) to screen the malicious nodes out by clustering their cumulative forwarding rates (CFRs) and designs a voting decision method to protect the nodes under a harsh environment from being judged as malicious nodes. The simulation results show that our scheme has a low false detection rate (FDR) of 1% and a low missed detection rate (MDR) of 5% respectively with negligible energy consumption in WSNs under a local variable harsh environment.INDEX TERMS event-driven wireless sensor networks, selective forwarding attack, cumulative forwarding rate, data clustering algorithm

Cyberattack Detection Using Unsupervised Learning Techniques

“…Li et al (2023) [17] proposed a DBSCAN-based approach for detecting DDoS attacks in software-defined networking (SDN) environments. They used network traffic features, such as packet size, interarrival time, and packet rate, as inputs to the DBSCAN algorithm.…”

A Combined Scheme Based on Artificial Immune System for Selective Forwarding Attack Detection in Event Driven Wireless Sensor Networks

“…However, as the channel quality changes, the detecting capacity declines. A reputation model-based solution to identifying attacks [12] builds a reputation framework and verifies incursions using reputation values. Additionally, in order to resist selective forwarding attacks, authors incorporated the reputation, greatly increasing the PDR.…”

Detecting selective forwarding attacks in WSN based on deep belief network

“…As the event of interest occurs and a new round begins, and the event node driven by EoI establishes the route. ENs establishes the route according to the voting method of neighbor nodes represented by [13], and looks for a reliable node closer to SN as the next hop node. When the network runs to the k-th round, malicious node detection begins, and k is called the detection period.…”