A Dynamic En-route Scheme for Filtering False Data Injection in Wireless Sensor Networks

摘要

In this paper, we propose a dynamic en-route filtering scheme for false data injection attacks in wireless sensor networks. In sensor networks, adversaries can inject false data reports containing bogus sensor readings or nonexistent events from compromised nodes. Such attacks may not only cause false alarms, but also drain out the limited energy of sensor nodes. Several existing schemes for filtering false reports either cannot deal with dynamic topology of sensor networks or have limited filtering capacity. In our scheme, a legitimate report is endorsed by multiple sensing nodes using their own authentication keys generated from one-way hash chains. Cluster head uses Hill Climbing approach to disseminate the authentication keys of sensing nodes to the forwarding nodes along multiple paths toward the base station. Hill Climbing guarantees that the forwarding nodes closer to a cluster hold more authentication keys for the cluster than those nodes farther from it do, hence, the number of keys held by each forwarding node can be balanced. In filtering phase, each forwarding node validates the authenticity of the reports and drops those false ones. Compared to existing schemes, our scheme can better deal with dynamic topology of sensor networks. Analytical and simulation results show that our scheme drops false reports earlier even with a lower memory requirement and tolerates more compromised nodes. Our scheme also outperforms others in term of energy efficiency, especially for large sensor networks.