基于单证人节点的分布式节点复制攻击检测  

Single-witness-based distributed detection for node replication attack

作　　者：马锐[1] 朱天保 马科 胡昌振[1] 赵小林[1] 

机构地区：[1]北京理工大学软件学院,软件安全工程技术北京市重点实验室,北京100081 [2]中国信息通信研究院技术与标准研究所,互联网中心,北京100191

出　　处：《清华大学学报（自然科学版）》2017年第9期909-913,920,共6页Journal of Tsinghua University(Science and Technology)

基　　金：国家重点研发计划项目(2016YFB0800700)

摘　　要：在无线传感网络中,现有的节点复制攻击检测方法存在检测率低、通信消耗高、存储消耗高等问题。该文提出一种基于单证人节点的分布式节点复制攻击检测(singlewitness-based distributed detection,SWDD)方法。SWDD方法分为选择证人节点、生成声明信息、发送声明信息、验证证人节点和检测复制节点5个步骤。SWDD方法中引入单证人节点选择机制,采用随机数作为位置声明信息,利用多重映射机制进行证人节点验证,并由最终证人节点完成对复制节点的检测。在OMNeT++平台上进行仿真实验,结果表明:SWDD方法在检测率、通信消耗和存储消耗方面均优于SDC(single deterministic cell)和P-MPC(parallel multiple probabilistic cells)方法。Existing approaches for detecting node replication attacks in wireless sensor networks have low detection rates, high communication costs and high memory costs. This paper presents a single-witness-based distributed detection （SWDD） method to node replication attacks. This method consists of 5 steps： selecting a witness node, generating the declaration information, sending the declaration information, verifying the witness nodes, and detecting the replication node. The method has a single witness node selection mechanism, uses random numbers to describe the node location, verifies the witness nodes using a multiple mapping mechanism and finally detects the replication nodes by the ultimate witness node. Simulations on OMNeT ＋＋ comparing this method with the single deterministic cell （SDC） and parallel multiple probabilistic cells （P-MPC） methods show that the SWDD method has a better detection rate, less communications and less energy consumption.

关 键 词：无线传感网络 节点复制攻击 分布式检测 单证人节点 多重映射机制 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]