Insider Attacker Detection in Wireless Sensor Networks

— Though destructive to network functions, insider attackers are not detectable with only the classic cryptographybased techniques. Many mission-critic sensor network applications demand an effective, light, flexible algorithm for internal adversary identification with only localized information available. The insider attacker detection scheme proposed in this paper meets all the requirements by exploring the spatial correlation existent among the networking behaviors of sensors in close proximity. Our work is exploratory in that the proposed algorithm considers multiple attributes simultaneously in node behavior evaluation, with no requirement on a prior knowledge about normal/malicious sensor activities. Moreover, it is applicationfriendly, which employs original measurements from sensors and can be employed to monitor many aspects of sensor networking behaviors. Our algorithm is purely localized, fitting well to the large-scale sensor networks. Simulation results indicate that ...

• Type: Conference
• Year: 2007
• Where: INFOCOM
• Authors: Fang Liu, Xiuzhen Cheng, Dechang Chen
• Keywords: Communications, INFOCOM 2007, Insider Attacker, Sensor Networks, Sensors