Traceback in wireless sensor networks with packet marking and logging
Traceback in wireless sensor networks with packet marking and logging
复制标题
DOI：
10.1007/s11704-011-0361-y
复制
发表时间：
2011-09
影响因子：
--
通讯作者：
Junsai Xu;Xuehai Zhou;Feng Yang
中科院分区：
文献类型：
--
作者：
Junsai Xu;Xuehai Zhou;Feng Yang
在恶劣的环境中，传感器节点可能会受到损害，然后被用来发动各种攻击。虚假数据注入攻击是无线传感器网络面临的一个严重威胁。攻击者使用受损节点通过注入大量伪造数据包来淹没网络并耗尽网络资源。在本文中，我们研究了如何定位攻击节点使用的数据包标记和数据包日志的框架。我们提出了一个组合的数据包标记和日志跟踪计划（CPMLT）。在CPMLT中，一个数据包可以被多达M个节点标记，每个节点以一定的概率标记一个数据包。当一个数据包被M个节点标记时，下一个标记节点将记录该数据包。通过数据包标记和日志记录相结合的方法，我们可以通过收集足够多的数据包来重构整个攻击路径，从而定位攻击节点。在我们的模拟中，CPMLT实现了快速回溯，日志开销很小。
In a hostile environment, sensor nodes may be compromised and then be used to launch various attacks. One severe attack is false data injection which is becoming a serious threat to wireless sensor networks. An attacker uses the compromised node to flood the network and exhaust network resources by injecting a large number of bogus packets. In this paper, we study how to locate the attack node using a framework of packet marking and packet logging. We propose a combined packet marking and logging scheme for traceback (CPMLT). In CPMLT, one packet can be marked by up toMnodes, each node marks a packet with certain probability. When one packet is marked byMnodes, the next marking node will log this packet. Through combining packet marking and logging, we can reconstruct the entire attack path to locate the attack node by collecting enough packets. In our simulation, CPMLT achieves fast traceback with little logging overhead.