基于危险理论的无线传感器网络入侵检测模型

doi:1000-436X(2012)09-0031-07

摘要/Abstract

摘要：

针对无线传感器网络入侵检测技术面临的挑战，利用了人工免疫技术的基本原理，提出一种基于危险理论的入侵检测模型。模型采用了分布式合作机制，与采用混杂模式监听获取全局知识的方法相比，在检测性能和能耗上都具有优势。仿真结果表明，相比于传统的单一阈值 Watchdog 算法和自我-非我(SNS)模型，基于危险理论的检测模型能够提供较高的检测率和较低的误检率，并且有效降低了系统的能耗。

关键词: 无线传感器网络, 入侵检测, 人工免疫系统, 危险理论

Abstract:

According to the challenges of intrusion detection technique for wireless sensor networks,a danger theory in-spired intrusion detection model was proposed by taking advantage of the working principle of artificial immune system.Due to the distributed and cooperative mechanism,the proposed model shows more advantages in detection performance and energy consumption than methods adopt promiscuous to get global knowledge.The simulation results show that compared to traditional Watchdog algorithm with single threshold and self-nonself(SNS)model,the model inspired by danger theory can provide highest correct detection rate and lowest false detection rate.Moreover,the model can also decrease the energy consumption of the system.

Key words: wireless sensor networks, intrusion detection, artificial immune system, danger theory

傅蓉蓉,郑康锋,芦天亮,杨义先. 基于危险理论的无线传感器网络入侵检测模型[J]. 通信学报, 2012, 33(9): 31-37.

Rong-rong FU,Kang-feng ZHENG,Tian-liang LU,Yi-xian YANG. Danger theory inspired intrusion detection model for wireless sensor networks[J]. Journal on Communications, 2012, 33(9): 31-37.

图/表 9

图1

图2

表1

图3

表2

图4

图5

图6

表3

参考文献 14

[1]	KIM J , BENTLEY P , AICKELIN U , et al. Immune system approaches to intrusion detection-a review[J]. Natural Computing, 2007,6(4): 413-466.
[2]	YI P , WU Y , CHEN J L . Towards an artificial immune system for detecting anomalies in wireless mesh networks[J]. China Communications, 2011,8(3): 107-117.
[3]	MATZINGER P . Tolerance,danger and the extended family[J]. Annual Review Immunology, 1994,12: 991-1045.
[4]	WU S X , BANZHAF W . The use of computational intelligence in intrusion detection systems:a review[J]. Applied Soft Computing, 2010,10(1): 1-35.
[5]	AICKELIN U , BENTLEY P , CAYZER S , et al. Danger theory:the link between AIS and IDS[A]. Proceedings of the Second International Conference on Artificial Immune Systems[C]. Edinburgh,UK, 2003. 147-155.
[6]	KIM J , BENTLEY P , WALLENTA C , et al. Danger is ubiquitous:detecting malicious activities in sensor networks usin the dendritic cell algorithm[A]. Proceedings of the International Conference o Artificial Immune Systems[C]. Cambridge,UK, 2006. 390-403.
[7]	DROZDA M , SCHAUST S , SZCZERBICKA H . AIS for misbehavior detection in wireless sensor networks:performance and design principles[A]. Proceedings of the IEEE Congress on Evolutionary Computation,Special Session on Recent Developments in Artificial Immune Systems[C]. Singapore, 2007. 3719-3726.
[8]	DROZDA M , SCHAUST S , SCHILDT S , et al. Priming:making the reaction to intrusion or fault predictable[J]. Natural Computing, 2011,10(1): 243-274.
[9]	DROZDA M , SCHILDT S , SCHAUST S , et al. An immuno-inspired approach to misbehavior detection in ad hoc wireless networks[EB/OL]. , 2010.
[10]	MARTI S , GIULI T , LAI K , et al. Mitigating routing misbehavior in mobile ad hoc networks[A]. Proceedings of the International Conference on Mobile Computing and Networking[C]. Massachusetts,USA, 2000. 255-265.
[11]	SCHAUST S , SZCZERBICKA H . Applying antigen-receptor degeneracy behavior for misbehavior response selection in wi less sensor networks[A]. Proceedings of the 10th International Conference on Artificial Immune Systems[C]. Cambridge,UK, 2011. 212-225.
[12]	BALACHANDRAN S , DASGUPTA D , WANG L . A hybrid approach for misbehavior detection in wireless ad-hoc networks[A]. Proceedings of the Symposium on Information Assurance[C]. New York,USA, 2006. 14-15.
[13]	孙利民，李建中，陈渝等．无线传感器网络[M]．北京：清华大学出版社， 2005. SUN LM , LI J Z , CHEN Y , et al. Wireless Sensor Networks[M]. Beijing: Tsinghua University Press, 2005.
[14]	RAO V P , MARANDIN D . Adaptive backoff exponent algorithm for zigbee(IEEE 802.15.4)[A]. Proceedings of 6th International Conference on Next Generation Teletraffic and Wired/Wireless Advanced Networking[C]. St Petersburg,Russia, 2006. 501-516.

危险理论AIS	系统模型
淋巴细胞	检测节点和决策节点
病原体	入侵节点或者具有传播性的蠕虫、病毒
凋亡细胞	由于能量耗尽等原因正常不工作的节点
受难细胞	由于受到入侵影响，感知到危险的节点
危险信号	发送给决策节点表明存在潜在入侵的信息
APC	危险域中的节点合作提供抗原
抗原(antigen)	危险域中的全局信息
抗体(antibody)	由耐受过程产生的异常模式
受体(receptor)	抗原和抗体都由受体构成，每个受体描述每个节点流量信息的正常模式

参数	默认值
网络部署区域大小/m²	1 000m×1 000m
节点通信半径r/m	100
节点数量	300
MAC层协议	IEEE 802.15.4
路由协议	Flooding
通信速率/(kbit·s^{- 1})	250
数据分组长度/byte	128
检测时间间隔？t/s	60
非我受体个数m	5
危险阈值d	0.2
亲和力阈值?	0.3

[1]	苏新, 张桂福, 行鸿彦, Zenghui Wang. 基于平衡生成对抗网络的海洋气象传感网入侵检测研究[J]. 通信学报, 2023, 44(4): 124-136.
[2]	赵越, 李赞, 李冰, 郝本建. TDoA定位盲区分析与节点部署策略研究[J]. 通信学报, 2023, 44(1): 1-13.
[3]	李翠然, 王雪洁, 谢健骊, 吕安琪. 基于改进PSO的铁路监测线性无线传感器网络路由算法[J]. 通信学报, 2022, 43(5): 155-165.
[4]	王一丰, 郭渊博, 陈庆礼, 方晨, 林韧昊. 基于对比学习的细粒度未知恶意流量分类方法[J]. 通信学报, 2022, 43(10): 12-25.
[5]	杜秀娟, 王丽娟, 刘静萍, 金龙. 基于归零神经动力学的水下无线传感器网络节点测距定位方法[J]. 通信学报, 2022, 43(10): 177-185.
[6]	孙爱晶, 李世昌, 张艺才. 基于PSO优化模糊C均值的WSN分簇路由算法[J]. 通信学报, 2021, 42(3): 91-99.
[7]	刘奇旭, 王君楠, 尹捷, 陈艳辉, 刘嘉熹. 对抗机器学习在网络入侵检测领域的应用[J]. 通信学报, 2021, 42(11): 1-12.
[8]	田有亮,吴雨龙,李秋贤. 基于信息论的入侵检测最佳响应方案[J]. 通信学报, 2020, 41(7): 121-130.
[9]	张兴兰,尹晟霖. 可变融合的随机注意力胶囊网络入侵检测模型[J]. 通信学报, 2020, 41(11): 160-168.
[10]	孙伟,张鹏,何永全,邢丽超. 内网环境下基于时空事件关联的攻击检测方法[J]. 通信学报, 2020, 41(1): 33-41.
[11]	王天荆,李秀琴,白光伟,沈航. 无线传感器网络中基于自适应网格的多目标定位算法[J]. 通信学报, 2019, 40(7): 197-207.
[12]	郝晓辰,姚宁,解力霞,王姣姣,王立元. 联合功率与信道的WSN生命期优化博弈算法[J]. 通信学报, 2019, 40(4): 62-70.
[13]	刘琳岚,高声荣,舒坚. 基于随机森林的链路质量预测[J]. 通信学报, 2019, 40(4): 202-211.
[14]	武小年,张楚芸,张润莲,孙亚平. WSN中基于改进粒子群优化算法的分簇路由协议[J]. 通信学报, 2019, 40(12): 114-123.
[15]	刘浩然,赵赫瑶,邓玉静,王星淇,尹荣荣. 基于非合作博弈的无线传感器网络覆盖控制算法[J]. 通信学报, 2019, 40(1): 71-78.