Skip to main content

Attack Detection Using Evolutionary Computation

  • Chapter
  • First Online:

Part of the book series: Studies in Computational Intelligence ((SCI,volume 676))

Abstract

Wireless sensor networks (WSNs) are often deployed in open and potentially hostile environments. An attacker can easily capture the sensor nodes or replace them with malicious devices that actively manipulate the communication. Several intrusion detection systems (IDSs) have been proposed to detect different kinds of active attacks by sensor nodes themselves. However, the optimization of the IDSs w.r.t. the accuracy and also sensor nodes’ resource consumption is often left unresolved. We use multi-objective evolutionary algorithms to optimize the IDS with respect to three objectives for each specific WSN application and environment. The optimization on two detection techniques aimed at a selective forwarding attack and a delay attack is evaluated. Moreover, we discuss various attacker strategies ranging from an attacker behavior to a deployment of the malicious sensor nodes in the WSN. The robustness of the IDS settings optimized for six different attacker strategies is evaluated.

This is a preview of subscription content, log in via an institution.

Buying options

Chapter
USD   29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD   84.99
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD   109.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info
Hardcover Book
USD   109.99
Price excludes VAT (USA)
  • Durable hardcover edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Learn about institutional subscriptions

Notes

  1. 1.

    Pareto front is a set of non-dominated solutions with respect to all objectives. Thus, a network operator can easily choose between a solution A with a better IDS accuracy but higher resource consumption or solution B with a worse IDS accuracy but lower resource consumption. Solution C, that is dominated by A and B in all objectives is dominated and, thus, is not a member of the Pareto front.

  2. 2.

    As shown below, evolution can improve the results farther.

  3. 3.

    Such traffic can be overheard by less (if any) number of neighbors comparing to a sensor node placed closer to the BS receiving packets from several directions.

References

  1. da Silva, A.P.R., Martins, M.H.T., Rocha, B.P.S., Loureiro, A.A.F., Ruiz, L.B., Wong, H.C.: Decentralized intrusion detection in wireless sensor networks. In: Proceedings of the 1st ACM International Workshop on Quality of Service & Security in Wireless and Mobile Networks, pp. 16–23 (2005)

    Google Scholar 

  2. Stehlik, M., Matyas, V., Stetsko, A.: Towards better selective forwarding and delay attacks in wireless sensor networks. In: Proceedings of the 13th IEEE International Conference on Networking, Sensing, and Control (2016)

    Google Scholar 

  3. Karlof, C., Wagner, D.: Secure routing in wireless sensor networks: attacks and countermeasures. AdHoc Netw. J. 1(2), 293–315 (2003)

    Article  Google Scholar 

  4. Krontiris, I., Dimitriou, T., Freiling, F.C.: Towards intrusion detection in wireless sensor networks. In Proceedings of the 13th European Wireless Conference (2007)

    Google Scholar 

  5. Tiwari, M., Arya, K.V., Choudhari, R., Choudhary, K.S.: Designing intrusion detection to detect black hole and selective forwarding attack in WSN based on local information. Proceedings of the 2009 Fourth International Conference on Computer Sciences and Convergence Information Technology. ICCIT ’09, pp. 824–828. IEEE Computer Society, Washington, DC (2009)

    Google Scholar 

  6. Hai, T.H., Huh, E.: Detecting selective forwarding attacks in wireless sensor networks using two-hops neighbor knowledge. In: Seventh IEEE International Symposium on Network Computing and Applications, pp. 325–331 (2008)

    Google Scholar 

  7. Liu, F., Cheng, X., Chen, D.: Insider attacker detection in wireless sensor networks. In: INFOCOM 2007. 26th IEEE International Conference on Computer Communications, pp. 1937–1945. IEEE (2007)

    Google Scholar 

  8. Khanna, R., Liu, H., Chen, H.H.: Self-organization of sensor networks using genetic algorithms. In: IEEE International Conference on Communications, 2006. ICC’06, vol. 8, pp. 3377–3382 (2006)

    Google Scholar 

  9. Khanna, R., Liu, H., Chen, H.H.: Dynamic optimization of secure mobile sensor networks: a genetic algorithm. In: IEEE International Conference on Communications, 2007. ICC’07, pp. 3413–3418, (2007)

    Google Scholar 

  10. Khanna, R., Liu, H., Chen, H.H.: Reduced complexity intrusion detection in sensor networks using genetic algorithm. In: IEEE International Conference on Communications, 2009. ICC’09, pp. 1–5 (2009)

    Google Scholar 

  11. Heady, R., Lugar, G., Servilla, M., Maccabe, A.: The Architecture of a Network Level Intrusion Detection System. Technical report, University of New Mexico, Albuquerque, NM (1990)

    Google Scholar 

  12. Stehlik, M., Saleh, A., Stetsko, A., Matyas, V.: Multi-objective optimization of intrusion detection systems for wireless sensor networks. In: Li, P., et al. (eds.) Advances in Artificial Life, ECAL 2013, Proceedings of the Twelfth European Conference on the Synthesis and Simulation of Living Systems, pp. 569–576. MIT Press, Cambridge, MA (2013)

    Google Scholar 

  13. Banerjee, S., Grosan, C., Abraham, A.: IDEAS: intrusion detection based on emotional ants for sensors. In: Proceedings of 5th International Conference on Intelligent Systems Design and Applications, 2005. ISDA ’05, pp. 344–349. IEEE (2005)

    Google Scholar 

  14. Banerjee, S., Grosan, C., Abraham, A., Mahanti, P.K.: Intrusion detection on sensor networks using emotional ants. Int. J. Appl. Sci. Comput. 12(3), 152–173 (2005)

    Google Scholar 

  15. Mukherjee, P., Sen, S.: Using learned data patterns to detect malicious nodes in sensor networks. In: Proceedings of the 9th International Conference on Distributed Computing and Networking. ICDCN’08, pp. 339–344. Springer, Berlin (2008)

    Google Scholar 

  16. Roosta, T., Shieh, S., Sastry, S.: Taxonomy of security attacks in sensor networks and countermeasures. In: The First IEEE International Conference on System Integration and Reliability Improvements, vol. 25, p. 94 (2006)

    Google Scholar 

  17. Loo, C.E., Ng, M.Y., Leckie, C., Palaniswami, M.: Intrusion detection for routing attacks in sensor networks. Int. J. Distrib. Sens. Netw. 2(4), 313–332 (2006)

    Article  Google Scholar 

  18. Stetsko, A., Smolka, T., Matyas, V., Stehlik, M.: Improving intrusion detection systems for wireless sensor networks. In: Boureanu, I., et al. (eds.) Applied Cryptography and Network Security. Lecture Notes in Computer Science, vol. 8479, pp. 343–360. Springer, Berlin (2014)

    Google Scholar 

  19. Matyas, V., Svenda, P., Stetsko, A., Klinec, D., Jurnecka, F., Stehlik, M.: Securing Cyber Physical Systems, chapter 5: WSNProtectLayer Security Middleware for Wireless Sensor Networks. CRC Press, Boca Raton, FL (2015). ISBN 978-1-4987-0098-6

    Google Scholar 

  20. Roman, R., Lopez, J., Gritzalis, S.: Situation awareness mechanisms for wireless sensor networks. IEEE Commun. Mag. 46(4), 102–107 (2008)

    Article  Google Scholar 

  21. Anderson, D.P.: BOINC: a system for public-resource computing and storage. In: Proceedings of IEEE/ACM Workshop on Grid Computing, pp. 4–10 (2001)

    Google Scholar 

  22. Köpke, A., Swigulski, M., Wessel, K., Willkomm, D., Klein Haneveld, P.T., Parker, T.E.V., Visser, O.W., Lichte, H.S., Valentin, S.: Simulating Wireless and Mobile Networks in OMNeT++ the MiXiM Vision. In: Proceedings of the 1st International Conference on Simulation Tools and Techniques for Communications, Networks and Systems & Workshops, Simutools ’08, pp., 71–78, ICST (Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering), Brussels (2008)

    Google Scholar 

  23. OMNeT++. OMNeT++ Network Simulation Framework—Homepage. http://www.omnetpp.org/. Accessed 22 Oct 2015

  24. Stetsko, A., Stehlik, M., Matyas, V.: Calibrating and comparing simulators for wireless sensor networks. In Proceedings of the 8th IEEE International Conference on Mobile Adhoc and Sensor Systems, pp. 733–738. Los Alamitos (2011)

    Google Scholar 

  25. Rappaport, T.: Wireless Communications: Principles and Practice, 2nd edn. Prentice Hall PTR, Englewood Cliffs, NJ (2001)

    MATH  Google Scholar 

  26. Crossbow. TelosB Datasheet. http://www.willow.co.uk/TelosB_Datasheet.pdf. Accessed 26 Oct 2015

  27. Talbi, E.G.: Metaheuristics—From Design to Implementation. Wiley, New York (2009)

    MATH  Google Scholar 

  28. Deb, K., Pratap, A., Agarwal, S., Meyarivan, T.: A fast and elitist multiobjective genetic algorithm: NSGA-II. IEEE Trans. Evol. Comput. 6(2), 182–197 (2002)

    Article  Google Scholar 

  29. Zitzler, E., Laumanns, M., Thiele, L.: SPEA2: Improving the Strength Pareto Evolutionary Algorithm. Technical report, Eidgenössische Technische Hochschule Zürich (ETH) (2001)

    Google Scholar 

  30. Auger, A., Bader, J., Brockhoff, D., Zitzler, E.: Theory of the hypervolume indicator: optimal \(\mu \)-distributions and the choice of the reference point. In: Proceedings of the Tenth ACM SIGEVO Workshop on Foundations of Genetic Algorithms. FOGA ’09, pp. 87–102. ACM. New York, NY (2009)

    Google Scholar 

  31. Fonseca, C.M., Paquete, L., Lopez-Ibanez, M.:. An improved dimension-sweep algorithm for the hypervolume indicator. In: IEEE Congress on Evolutionary Computation, 2006. CEC 2006, pp. 1157–1163 (2006)

    Google Scholar 

  32. Zitzler, E., Thiele, L.: Multiobjective evolutionary algorithms: a comparative case study and the strength Pareto approach. IEEE Trans. Evol. Comput. 3(4), 257–271 (1999)

    Article  Google Scholar 

  33. Jurnecka, F., Stehlik, M., Matyas, V.:. On node capturing attacker strategies. In: Security Protocols XXII—22nd International Workshop Cambridge. Revised Selected Papers, pp. 300–315. Springer LNCS (2014)

    Google Scholar 

  34. Yu, B., Xiao, B.: Detecting selective forwarding attacks in wireless sensor networks. In 20th International Parallel and Distributed Processing Symposium, 2006. IPDPS 2006. IEEE (2006)

    Google Scholar 

Download references

Acknowledgements

We would like to thank Ludek Smolik, Lukas Sekanina and colleagues from CRoCS for the discussions and suggestions. This work was supported by the Czech research Project VG20102014031, programme BV II/2—VS. Access to computing and storage facilities owned by parties and projects contributing to the National Grid Infrastructure MetaCentrum, provided under the programme “Projects of Large Research, Development, and Innovations Infrastructures” (CESNET LM2015042), is greatly appreciated.

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Martin Stehlik .

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2017 Springer International Publishing AG

About this chapter

Cite this chapter

Stehlik, M., Matyas, V., Stetsko, A. (2017). Attack Detection Using Evolutionary Computation. In: Abraham, A., Falcon, R., Koeppen, M. (eds) Computational Intelligence in Wireless Sensor Networks. Studies in Computational Intelligence, vol 676. Springer, Cham. https://doi.org/10.1007/978-3-319-47715-2_5

Download citation

  • DOI: https://doi.org/10.1007/978-3-319-47715-2_5

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-319-47713-8

  • Online ISBN: 978-3-319-47715-2

  • eBook Packages: EngineeringEngineering (R0)

Publish with us

Policies and ethics