RPL-Based IoT Networks under Simple and Complex Routing Security Attacks: An Experimental Study

Abstract

Effective security support still remains a challenge even for a standardized Internet of Things network protocol such as the IPv6 Routing Protocol for Low-Power and Lossy Networks (RPL). It provides limited protection against external security attacks but stays highly vulnerable to internal routing attacks. The inherent RPL design of RPL, particularly its topology establishment and maintenance mechanism, makes it easy to initiate such kinds of attacks which target overall network performance and topology stability. Establishing a firm and practical understanding of the impacts of these attacks on RPL networks is still critically needed for further investigation. This is more demanding when considering varying-scale RPL deployments targeted by complex attack scenarios. In this research work, an extensive experimental study of these critical RPL routing attacks considering simple-to-complex attack scenarios in varying-scale RPL network setups is presented. It provides a practical contribution toward experimentally understanding the effectiveness of internal routing attacks when targeting RPL-based IoT networks. The main objective is to provide future research works with a practical reference to the effectiveness of these security attacks and the overall performance of RPL networks under routing attacks. The results indicate the adverse impacts of routing attacks on the overall performance of RPL networks. Even in simple attack scenarios, it was found that the attacked networks experienced noticeable degradation in QoS performance and topology stability. In addition, the attacks incurred considerable increases in energy consumption and control traffic overhead. These were more evident in large-scale experimental setups and also under composite and hybrid routing attacks. QoS performance and topology stability degraded by more than 90% whereas energy consumption and network overhead increased by more than 200%.