Intrusion detection in sensor networks based on measurements
Leon Reznik, Bakytzhan K. Bitemirov, Michael Negnevitsky · 2009
The paper presents the results of an empirical study of the intrusion detection methods in wireless sensor networks (WSN). It intends to verify if networking of heterogeneous sensors in WSN improves the system reliability and security. Unlike many other reported approaches, which employ conventional networking intrusion detection techniques in a WSN environment, this paper presents methods specific to sensor networks. They are designed to take an advantage of receiving sensor signals from networked sensors by building the models of the sensor signals and, on the higher network levels, objects under measurement. The methods are based on statistical processing of the measurement results coming from sensors and employing those models to detect the anomalies caused either by an equipment malfunctioning or human malicious activities and mistakes. Three algorithms are examined and implemented with SunSpot sensor kits produced by Sun Corp. Their performance in two intrusion activities executed on real sensor networks is analyzed.