Wireless sensor network DOS (disk operating system) attack lightweight detection method based on random forest

Abstract

The invention provides a wireless sensor network DOS (disk operating system) attack lightweight detection method based on a random forest, and relates to the field of wireless sensor network information security. The method includes the steps: collecting one group of monitoring data by wireless sensor network monitoring nodes every other a fixed time, and transmitting the monitoring data to a basestation; generating detection characteristics (A) and (B) according to perception data attack characteristics of DOS attack on the base station, and standardizing the detection characteristics (A) and (B) into (A*) and (B*); combining a training set with the detection characteristics (A*) by a k-means++ algorithm to obtain normal data and noise data, and adding a certain attack data into the normal data obtained at the stage to train the random forest; firstly judging each sample to be detected is noise or not according to the detection characteristics (A*), and detecting whether DOS attack happens or not by the aid of a random forest and the detection characteristics (B*) if not. The method is implemented on the base station, DOS attack is detected without additional contribution of themonitoring nodes, and node calculation, storage and energy are saved.

Description

technical field [0001] The invention belongs to the field of information security of wireless sensor networks, and relates to a light-weight detection method for DOS attacks of wireless sensor networks based on random forests. Background technique [0002] Wireless sensor network is a special mobile ad hoc network, which can be applied to areas where power supply is difficult, people cannot reach (such as polluted, environment cannot be destroyed or hostile areas) and some temporary occasions (such as natural disasters, fixed The communication network is destroyed), the system can collect real-time environmental information in the monitoring area, such as temperature, humidity, brightness and pressure, etc., and transmit the monitoring data to the base station in a wireless multi-hop manner. However, wireless sensor networks have many unique features, including: (1) network resources are limited, including energy, computing power, communication capabilities, and communicatio...

AI Technical Summary

Problems solved by technology

In addition, the detection method based on clustering will also consume the computing and storage capacity of nodes

Therefore, for sensor nodes with limited computing power, limited storage capacity, and energy constraints, detection methods such as intrusion detection characterized by network traffic will greatly reduce the service life of the network.

Images