无线传感器网络的入侵检测技术分析-analysis of intrusion detection technology in wireless sensor networks.docx

华中科技大学博士学位论文 华 中 科 技 大 学 博 士 学 位 论 文 IV IV performed. Simulation results show that the intrusion detection algorithm based on statistical models of normal distribution can detect abnormal neighbor nodes, but certain error existed. and the factors that influence the detection was qualitatively analysed. Signature-based detection is the mainstay of operational intrusion detection systems in wireless sensor networks. The effectiveness of the signature based intrusion detection techniques depends critically on the placement of the detection modules. By means of minimum cut-sets, minimum dominating sets in Graph Theory, an optimal Placement strategy of signature-based Intrusion Detection Modules wan proposed, by enabling the intrusion detection functionality on particular sensor nodes, which could improve detection rates. The proposed algorithms, based on the concepts of minimum cut-set and minimum dominating set, allow for a distributed implementation. The performance of the algorithms in identifying intrusions using signature-based detection techniques was studied via simulations. Simulations show that compared to Random Placement algorithm, the optimal Placement algorithm not only can improve detection rates，but also can converge very well. A distributed intrusion detection system against attacks in WSNs (wireless sensor networks, WSNs), which included a three-level hierarchical architecture for data collection, processing and transmission, and a distributed anomaly-based intrusion detection algorithm were presented. Local IDSs (intrusion detection systems, IDSs) were attached to each node of the WSNs, which were responsible for collecting raw data of network operation, and computing a local anomaly index, measuring the difference between the current node operation and normal operation. In this hierarchical system, node-level and cluster-level anomaly index were fused, producing cluster-level and network-level anomaly index respectively. The fusion algorithm was des