Method for detecting black hole attacks in clustering self-organized networks

Abstract

The invention relates to a method for detecting black hole attacks in clustering self-organized networks. The method includes that step one, a monitoring device is arranged at a base station; step two, cluster head areas in self-organized networks in an area covered by the base station are monitored in real time; step three, whether abnormal cluster head areas exist in the monitored area is judged, if the abnormal cluster head areas exist, step four is performed, and if not, the step two is repeated; step four, credit rates of terminal nodes in the abnormal cluster head areas are detected, and suspicious nodes are found to form a suspicious node set S1; step five, flow differences of nodes in the S1 are detected, and black hole attack nodes are found to form a black hole attack node set S2; and step six, the monitoring device sends early warning prompts. According to the method, not only a single malicious node attack is solved, the problem that a plurality of single malicious nodes are cooperated to attack can be effectively solved, alarms can be sent, and timely defense and treatment to the black hole attacks are facilitated.

Description

technical field [0001] The invention relates to a detection method of a black hole attack in an ad hoc network, belonging to the field of wireless sensor network security. Background technique [0002] Ad hoc network is a multi-hop temporary autonomous system composed of a group of mobile nodes with wireless transceivers. It can realize the automatic organization and operation of the network with any mesh topology without relying on any preset infrastructure, and can be widely used in military tactical communication, emergency communication and other communication occasions that require rapid deployment and dynamic networking. , is a research field with great practical application value. [0003] However, due to the characteristics of open media, dynamic topology, distributed collaboration and limited capacity, ad hoc networks are vulnerable to attacks, especially for their routing protocols. "Black hole" is one of the common attack methods. It obtains the control of netwo...

AI Technical Summary

Problems solved by technology

[0004] At present, some researchers have proposed solutions to different black hole problems, such as redundant routing method, node credit measurement method, Watchdog method, downstream neighbor node verification method, etc., but these technical methods are based on a single malicious node. , without taking into account the existence of multiple malicious nodes

[0005] There are few studies on the mutual cooperation between multiple malicious nodes. It is known that an adjustable downstream neighbor node cyclic verification method is proposed by combining the prohibition of intermediate nodes from responding to RREQ packets and the verification method of downstream neighbor nodes. Source: the node in this method The authenticity of the source information is judged by checking the adjacent nodes of the node to be verified, and the recursive multi-hop verification is used to prevent collusion attacks. In order not to fall into the infinite loop verification, an adjustable parameter variable verification parameter is introduced, and the It is very difficult to determine the parameters, so this method is also difficult to effectively overcome the situation that there are multiple malicious nodes

Images