A black hole attack detection method in clustered self-organizing network

Abstract

The invention relates to a method for detecting black hole attacks in a clustered self-organizing network. The method includes the following steps: Step 1: Install a monitoring device at a base station; Step 2: All clusters in the self-organizing network within the coverage of the base station The head area is monitored in real time; step 3: judge whether there is an abnormal cluster head area in the monitored area, if there is, enter step 4, otherwise return to step 2; step 4: detect the credit level of the terminal node in the abnormal cluster head area, Find suspicious nodes to form a set of suspicious nodes S1; step 5: detect the flow difference of nodes in S1, and find out black hole attack nodes to form a set S2 of black hole attack nodes; step 6: the monitoring device issues an early warning prompt. This method can not only solve the attack of a single malicious node, but also effectively solve the problem that multiple malicious nodes cooperate with each other to attack, and can issue an alarm, which is conducive to timely defense and processing of black hole attacks.

Description

technical field [0001] The invention relates to a detection method of a black hole attack in an ad hoc network, belonging to the field of wireless sensor network security. Background technique [0002] Ad hoc network is a multi-hop temporary autonomous system composed of a group of mobile nodes with wireless transceivers. It can realize the automatic organization and operation of the network with any mesh topology without relying on any preset infrastructure, and can be widely used in military tactical communication, emergency communication and other communication occasions that require rapid deployment and dynamic networking. , is a research field with great practical application value. [0003] However, due to the characteristics of open media, dynamic topology, distributed collaboration and limited capacity, ad hoc networks are vulnerable to attacks, especially for their routing protocols. "Black hole" is one of the common attack methods. It obtains the control of netwo...

AI Technical Summary

Problems solved by technology

[0004] At present, some researchers have proposed solutions to different black hole problems, such as redundant routing method, node credit measurement method, Watchdog method, downstream neighbor node verification method, etc., but these technical methods are based on a single malicious node. , without taking into account the existence of multiple malicious nodes

[0005] There are few studies on the mutual cooperation between multiple malicious nodes. It is known that an adjustable downstream neighbor node cyclic verification method is proposed by combining the prohibition of intermediate nodes from responding to RREQ packets and the verification method of downstream neighbor nodes. Source: the node in this method The authenticity of the source information is judged by checking the adjacent nodes of the node to be verified, and the recursive multi-hop verification is used to prevent collusion attacks. In order not to fall into the infinite loop verification, an adjustable parameter variable verification parameter is introduced, and the It is very difficult to determine the parameters, so this method is also difficult to effectively overcome the situation that there are multiple malicious nodes

Images