WIRELESS SENSOR NETWORK COMPRISING DISTRIBUTED INTRUSION DETECTION

摘要

PURPOSE: A wireless sensor network including a distributed attack detection function is provided to directly determine a false positive pattern or an attack pattern in a sensor node without transmitting a signature code, determined as an attack pattern in a bloom-filter unit installed in a sensor node, to a sync node. CONSTITUTION: A bloom-filter unit(100-1) includes a signature code generation unit(110-1), a bloom-filter storage unit(130-1) and an attack pattern determination unit(120-1). The signature code generation unit generates a signature code with a hash function value corresponding to each hash function by applying received attack data to a plurality of hash functions. The bloom-filter storage unit stores attack pattern data. The attack pattern determination unit compares the generated signature code with the attack pattern data. The attack pattern determination unit determines whether the generated signature code is an attack pattern or not. [Reference numerals] (120-1) Attack pattern judgment unit; (200-1) Search unit; (300-1) Attack pattern database unit; (400-1) Control unit; (AA) Attack data