Abstract
We study efficient and lightweight Intrusion Detection Systems (IDS) for ad-hoc networks via the prism of IPv6-enabled Wireless Sensor Actuator Networks. These networks consist of highly constrained devices able to communicate wirelessly in an ad-hoc fashion, thus following the architecture of ad-hoc networks. Current state-of-the-art (IDS) has been developed taking into consideration the architecture of conventional computer networks, and as such they do not efficiently address the paradigm of ad-hoc networks, that is highly relevant in emergent networks, such as the Internet of Things (IoT). In this context, the network properties of resilience and redundancy have not been studied yet. In this work, we firstly identify a trade-off between the communication overhead and energy consumption of an IDS (as captured by the number of active IDS agents in the network) and the performance of the system in terms of successfully identifying attacks. In order to fine tune this trade-off, we model such networks as Random Geometric Graphs; a rigorous approach that allows us to capture underlying structural properties of the network. We then introduce a novel IDS architectural approach that consists of a central IDS agent a set of distributed IDS agents deployed uniformly at random over the network area. These nodes are able to efficiently detect attacks at the networking layer in a collaborative manner by monitoring locally available network information provided by IoT routing protocols such as RPL. Our detailed experimental evaluation demonstrates significant performance gains in terms of communication overhead and energy consumption while maintaining high detection rates. We also show that the performance of our IDS in ad-hoc networks does not rely on the size of the network but on fundamental underling network properties, such as the network topology and the average degree of the nodes. Conducted experiments show that our proposed IDS architecture is resilient against frequent topology changs due to nodes failures.
Highlights
Internet of Things represents an emerging networking paradigm both in qualitative and quantitative terms
In this work we study e cient and lightweight Intrusion Detection Systems for static ad-hoc networks via the prism of IPv6-enabled Wireless Actuator Sensor Networks
We first provide a formal model for WSNs with the use of Random Geometric Graphs, a graphtheoretical model to capture the spatial characteristics of WSNs such as inter-dependencies on the existence of wireless links among neighbouring nodes
Summary
Internet of Things represents an emerging networking paradigm both in qualitative and quantitative terms. Motivated by how IoT networking protocols, such as RPL, manage and operate the network, we identify inherent trade-o↵s between the communication overhead introduced by an IDS and its detection rate of attacks such as the sinkhole attack We investigate this trade-o↵ via extended emulations and show there exists an underlying threshold behaviour in the e ciency of the IDS that is related to the connectivity threshold of the RGG model. The rest of the paper is organised as follows: Section 2 presents the current state-ofthe-art with a special emphasis on the most important contributions in Intrusion Detection Systems in WSNs. Sections 3 and 4 introduce the proposed network model and adopted IDS architecture based on Random Geometric Graphs.
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have