Using Improved Hilbert–Huang Transformation Method to Detect Routing-Layer Reduce of Quality Attack in Wireless Sensor Network
- 28 Downloads
Denial of Service (DoS) attack is a serious threat to the security of Wireless Sensor Netwokr (WSN). Moreover, Reduce of Quality (RoQ) attack is a special DoS attack type. The RoQ attack is a potential DoS attack, it is simulator to normal traffic,so it is difficult to be detected by traditional detection method. Hilbert–Huang Transform (HHT) time–frequency analysis method can be used to analyze the non-linear signal generated by RoQ attack. However, mode mixing and false component are the challenge problems to analyze the RoQ attack by HHT method. Ensemble empirical mode decomposition (EEMD) method is used to eliminate the mode mixing problem. Correlated coefficient method is used to recognize the false components. In this paper, EEMD and correlated coefficient methods are combined to detect the weak signal generated by RoQ attack. Ad Hoc On-demand Multi-path Distance Vector routing protocol and random Routing REQuest flooding attack are simulated to implement RoQ attack in wireless sensor network by Network Simulator. Suitable white noises are added to original signal to detect the weak RoQ attack signal. Experiment results show that the improved HHT methods are highly effective to detect RoQ attack, when the standard deviation of white noise is 0.01 and the number of ensemble is 80, the detection results is best. When the correlated coefficient of intrinsic mode functions (IMFs) is greater than 0.2, the IMFs can be used to analyze and detect RoQ attack. To our knowledge, this is the first quantitative experiment and method research on the routing-layer RoQ attack detection in WSN.
KeywordsHHT EEMD Correlation coefficient RoQ attack AOMDV
This work was supported by National Key Research and Development Program of China (2018YFB0803403, 2018YFB0803400). National Social Science Fund of China (18BGJ071). Fundamental Research Funds for the Central Universities (TW201706). Beijing Natural Science Foundation (4142034).
- 1.Krishna Chaitanya, D., Ghosh, A., & Ever, E. (2011). Analysis of denial of service attacks on wireless sensor networks using simulation. In Kaspersky Lab IT security conference for the next generation, Erfurt, Germany, January 27–30.Google Scholar
- 2.He, Y.et al. (2009). Reduction of Quality (RoQ) attacks on structured peer-to-peer networks. In IEEE international parallel and distributed processing symposium (IPDPS 09). Google Scholar
- 3.Guirguis, M., Bestavros, A., Matta, I., & Zhang, Y. (2005). Reduction of Quality (RoQ) attacks on internet end- systems. IEEE INFOCOM, 2, 1362–1372.Google Scholar
- 4.Chen, W., Zhang, Y., & Wei, Y. (2008). The feasibility of launching Reduction of Quality (RoQ) attacks in 802.11 wireless networks. In International conference on parallel and distributed systems - ICPADS 2008 (pp. 517–524).Google Scholar
- 5.Barros, U., Bouet, M., Santos, T. A., & Nogueira, M. (2010). Assessing RoQ attacks on MANETs over aware and unaware TPC techniques. In 2010 International conference on network and service management (pp. 1–5).Google Scholar
- 6.Ren, W., Yeung, D.-Y., & Jin, H. (2007). Pulsing RoQ DDoS attack and defense scheme in mobile ad hoc networks. International Journal of Network Security, 4(2), 227–234.Google Scholar
- 7.Wen, K., Yang, J., Cheng, F., Li, C., Wang, Z., & Yin, H. (2014). Two-stage detection algorithm for RoQ attack based on localized periodicity analysis of traffic anomaly. In ICCCN, 2014 (pp. 1–6).Google Scholar
- 8.Hong, R., Hui-Mei, W., & Ming, X. (2013). A novel method for detecting Reduction of Quality (RoQ) attack based on fast independent component analysis. Journal of Electronics & Information Technology, 35(10), 2307–2313.Google Scholar
- 11.Kangfeng, Z., Xiujuan, W., Yixian, Y., & Shize, G. (2011). Detecting DDoS attack With Hilbert–Huang transformation. China Communications, 8(2), 126–133.Google Scholar
- 12.Han, J., & Zhang, J. Z. (2013). Network traffic anomaly detection using weighted self-similarity based on EMD. In 2013 Proceedings of IEEE Southeastcon, Southeastcon (pp. 1–5).Google Scholar
- 13.Han, J. (2013). Network traffic anomaly detection using EMD and Hilbert-Huan transform. 2013 Western Carolina University (WCU) Thesis.Google Scholar
- 21.http://www.isi.edu/nsnam/ns. Accessed Jan 2017.