Security in Wireless Sensor Networks (WSNs) is an essential but challenging requirement to achieve because of the resource constrained nature of sensor nodes. Prevention based techniques such as encryption and authentication are not effective against attacks when secrets become open to attackers. Motivated by these considerations, we propose a system that incorporates Intrusion Detection Module (IDM) and System Monitoring Module (SMM) to increase security in WSNs. An Extended Kalman Filter (EKF) can be used to set up a normal range of neighbors' future transmitted aggregate values so that significant deviations can be detected. To increase detection sensitivity, we further apply an algorithm of combining Cumulative Summation (CUSUM) and Generalized Likelihood Ratio (GLR) to an EKF based approach. The GUSUM GLR based approach can utilize the cumulative sum of the deviations between measured and estimated values, thus deriving a normal range which is more sensitive to attacks. This research further illustrates how a local detection approach works together with a system monitoring module to differentiate between malicious events and emergency events. We conducted experiments and simulations to evaluate our proposed local detection mechanism under different aggregation functions (average, sum, max, and min).
展开▼
