Anomaly Detection Based on Data-Mining for Routing Attacks in Wireless Sensor Networks  

作　　者：Song Jianhua Ma Chuanxiang 

机构地区：[1]Hubei Univ, Sch Math & Comp Sci, Wuhan 430062, Peoples R China

出　　处：《China Communications》2008年第2期34-39,共6页中国通信（英文版）

基　　金：the supports of the National Natural Science Foundation of China (60403027); the projects of science and research plan of Hubei provincial department of education (2003A011);the Natural Science Foundation Of Hubei Province of China (2005ABA243).

摘　　要：With the increasing deployment of wireless sensordevices and networks,security becomes a criticalchallenge for sensor networks.In this paper,a schemeusing data mining is proposed for routing anomalydetection in wireless sensor networks.The schemeuses the Apriori algorithm to extract traffic patternsfrom both routing table and network traffic packetsand subsequently the K-means cluster algorithmadaptively generates a detection model.Through thecombination of these two algorithms,routing attackscan be detected effectively and automatically.Themain advantage of the proposed approach is that it isable to detect new attacks that have not previouslybeen seen.Moreover,the proposed detection schemeis based on no priori knowledge and then can beapplied to a wide range of different sensor networksfor a variety of routing attacks.With the increasing deployment of wireless sensor devices and networks, security becomes a critical challenge for sensor networks. In this paper, a scheme using data mining is proposed for routing anomaly detection in wireless sensor networks. The scheme uses the Apriori algorithm to extract traffic patterns from both routing table and network traffic packets and subsequently the K-means cluster algorithm adaptively generates a detection model. Through the combination of these two algorithms, routing attacks can be detected effectively and automatically. The main advantage of the proposed approach is that it is able to detect new attacks that have not previously been seen. Moreover, the proposed detection scheme is based on no priori knowledge and then can be applied to a wide range of different sensor networks for a variety of routing attacks.

关 键 词：ANOMALY detection ROUTING ATTACKS DATA-MINING WIRELESS sensor networks 

分 类 号：TN929.5[电子电信—通信与信息系统] TP212.9[电子电信—信息与通信工程]