物联网中选择性转发攻击的发现

作为战略性新兴产业之一，物联网具有广阔的市场应用前景，其安全性正在成为普遍关注的焦点。物联网中传感器节点资源有限的特点和不理想的部署环境使其面临着安全脆弱性，容易受到不同类型的攻击，选择性转发攻击是其中危害最严重的攻击形式之一。提出了一种基于数据包ID检测机制的低成本轻量级选择性转发攻击发现算法，即节点每收到一个数据包后都要进行包ID更新，并比较存储包的ID与接收包的ID，根据比较结果确定是否存在可疑节点，并向基站发送报警包进行检举，基站根据节点被检举的次数来判定发起选择性转发攻击的恶意节点。仿真实验结果表明了该方案的有效性，且具有较高的恶意节点发现率和低的误警率。

Detection of selective forwarding attack in the Internet of things

As one of the strategic and rising industries, the Internet of things has an expansive application in the future, but its security is becoming a focus of popular attention. Due to limited resource for sensor nodes and non-perfect environment of deployment, the Internet of things is vulnerable and easily compromised by various attacks, of which the selective forwarding attack is one of the worst ones. A low-cost and lightweight algorithm is proposed to detect selective forwarding attack in the Internet of things based on packet ID check. Namely, any cluster head will compare the received packet ID with its local record, and update local recorded ID, the result of inspection is used to decide if any suspicious node exists or not. The cluster head will send a warning packet to the base station to report a suspicious node. The base station judges malicious nodes by the reported suspicious times. The simulation results show that our algorithm can effectively detect malicious nodes with high detection ratio and low false alarm ratio.