Intrusion Detection and Identification of Attacks in the RPL-Based Internet of Things (IoT)
Behnam Farzaneh · SSRN Electronic Journal · 2018
Today, we see an increasing trend towards interconnected devices. This process of connecting devices instead of people is called the Internet of Things (IoT). The main concept of the IoT is to connect heterogeneous objects separately and centralized in different locations using standard protocols. The general idea is to create an independent world using intelligent objects that have the ability to exchange information and make decisions. Objects connected to users allow remote monitoring and tracking in real-time. The IoT relies on the development of low-power and lossy networks to support communication between objects and their connection to the Internet. The characteristics of these networks are limited resources in terms of energy, memory, and processing. According to the real concept of the IoT, the 6LoWPAN networks were created, and a new routing protocol compatible with these networks was introduced, called RPL. Due to the resource-constrained nature of RPL-based networks, they may be exposed to a variety of internal attacks. The Neighbor attack and DIS attack are the specific internal attacks at this protocol. In this thesis, the purpose is to provide an anomaly-based Intrusion Detection System (IDS) based on threshold values for detecting attacks on the RPL protocol, and also fully simulating and evaluating these attacks. The IDS is fully distributed and in which each node monitors its neighbors to detect attacks. The IDS detects two neighbor and DIS attacks that are dedicated attacks of the RPL routing protocol but can also be used to find similar attacks. The results of the simulation using Cooja show that the proposed model has a very high True Positive Rate (TPR) and in some cases, it can be 100%, while the False Positive Rate (FPR) is very low. The results show that the proposed model is fully effective in detecting attacks and applicable to large-scale networks.