Forensic Analysis of Blackhole Attack in Wireless Sensor Networks/Internet of Things
Forensic Analysis of Blackhole Attack in Wireless Sensor Networks/Internet of Things
复制标题
无线传感器网络/物联网黑洞攻击的取证分析
DOI：
10.3390/app122211442
复制
发表时间：
2022
期刊：
影响因子：
--
通讯作者：
Jawad Ahmad
中科院分区：
文献类型：
--
作者：
A. Hasan;M. Khan;Balawal Shabir;Arslan Munir;A. Malik;Z. Anwar;Jawad Ahmad
物联网(IoT)由于其资源受限的性质，容易受到各种类型的拒绝服务(DoS)攻击。致力于保护这些系统的广泛研究工作，但各种漏洞仍然存在。值得注意的是，由于有限的连通性和动态的拓扑结构，维护移动自组网的机密性、完整性和可用性是具有挑战性的。由于包括智能电网、工业控制和智能交通系统在内的关键基础设施依赖于无线传感器网络和物联网，因此对物联网和无线传感器网络中的网络犯罪进行取证调查和分析的研究工作势在必行。当发生安全故障时，需要揭示和检查故障背后的原因、漏洞和事实，以提高这些系统的安全性。本研究取证地研究了在黑洞攻击下，使用AODV路由协议的自组织物联网网络在黑洞攻击下的性能，这是一种对物联网网络有害的拒绝服务攻击。这项工作还检查了网络和节点中的流量模式，以评估攻击损害，并对协议进行漏洞分析，以进行数字取证(DF)调查。在不同模式和参数下对网络进行了重构，验证了分析结果，并为路由协议的设计提供了建议。
The internet of things (IoT) is prone to various types of denial of service (DoS) attacks due to their resource-constrained nature. Extensive research efforts have been dedicated to securing these systems, but various vulnerabilities remain. Notably, it is challenging to maintain the confidentiality, integrity, and availability of mobile ad hoc networks due to limited connectivity and dynamic topology. As critical infrastructure including smart grids, industrial control, and intelligent transportation systems is reliant on WSNs and IoT, research efforts that forensically investigate and analyze the cybercrimes in IoT and WSNs are imperative. When a security failure occurs, the causes, vulnerabilities, and facts behind the failure need to be revealed and examined to improve the security of these systems. This research forensically investigates the performance of the ad hoc IoT networks using the ad hoc on-demand distance vector (AODV) routing protocol under the blackhole attack, which is a type of denial of service attack detrimental to IoT networks. This work also examines the traffic patterns in the network and nodes to assess the attack damage and conducts vulnerability analysis of the protocol to carry out digital forensic (DF) investigations. It further reconstructs the networks under different modes and parameters to verify the analysis and provide suggestions to design roubust routing protocols.