Intrusion Detection Algorithm Based on Change Rates of Multiple Attributes for WSN

Abstract

Intrusion detection system (IDS) is a second line of the security mechanism for the wireless sensor network (WSN), and it has a great influence on confidentiality, integrity, and availability. However, many existing IDS only detect single attack or multiple known attacks. In this paper, a novel intrusion detection algorithm based on change rates of multiple attributes (CRMA) is proposed, which can detect multiple attacks including known and unknown types simultaneously. The change rates of multiple attributes for sensor nodes usually reflect the running states of WSN over a period of time. First, the Observed Change Rate of attributes at different times is obtained by observing multiple attributes of different sensor nodes. Then, the convex optimization is alternately used to obtain the Normal Change Rate and corresponding weights by minimizing the distance between the Observed Change Rate and the Normal Change Rate of each attribute. Finally, the WSN is considered to be attacked when the weighted deviation of the Observed Change Rate and Normal Change Rate is beyond the corresponding threshold. Experimental results show that the CRMA can detect multiple attacks including known and unknown types simultaneously and has a fast convergence rate. The average true positive rates (TPR) of CRMA are high, and the average false positive rates (FPR) of CRMA are low. The detection performance of CRMA is superior to that of the ARMA and NeTMids algorithms.

NTDA: The Mitigation of Denial of Service (DoS) Cyberattack Based on Network Traffic Detection Approach

“…Thus, TPR has an effect on measuring the of the proposed method. 𝑇𝑃𝑅 = 𝑇𝑃 ( 𝑇𝑃+𝐹𝑁) (10) The proposed algorithm NTDA worked as expected, and the generated true positive rate (TPR) is compared with other algorithms such as [29] and [28]. Fig.…”

“…5 shows the false negative rate (FNR) of the proposed algorithm. The NTDA shows the lowest value and decreases slowly to reach zero in FNR compared with other algorithms as in [27] and [29] which makes the NTDA perform well and efficiently in detection process. The reason behind that is that the smallest optimal threshold value that was used in the secondary scenario can reduce the FNR.…”

Enhancing Blackslist-Based Packet Filtration Using Blockchain in Wireless Sensor Networks

“…It could consider energy consumption during detection process and select a balanced strategy between detection efficiency and cost. Bai et al [9] presented a detection algorithm based on the changing rates of multiple attributes (CRMA), which can detect multiple attacks. The CRMA values could be calculated by minimizing the weighted deviation via convex optimization.…”

Enhancing Fault Detection in Wireless Sensor Networks Through Support Vector Machines: A Comprehensive Study

“…Thus, one of the important areas of research in WSN is the continuous diagnosis of sensory nodes and obtaining their status. This helps to ensure continuous network service despite the failure of individual nodes in the network [27]- [31]. This article discusses some pressing issues associated with distributed fault diagnosis for intermittent sensor failures in WSNs.…”