Distributed intrusion detection method in wireless sensor network

Abstract

The invention discloses a method for detecting distributed intruding, which is used in a wireless sensor network. A frequent item set detecting method is used in a node of a sensor for detecting abnormality degree of discrete web log data and a method of joint probability distribution calculation is used for detecting the abnormality degree of successional web log data; if the node of the sensor judges that the whole data is abnormal intruding data, the node sends the suspicion data to the neighboring node of the sensor for verification; if the neighboring node also judges that the suspicion data is the intruding data, then the node of the sensor marks the data as the intruding data and starts to detect the next data. The method combines the distributed technology and the intruding detecting technology and reduces the calculation quantity and communication quantity of each node by the cooperation among nodes of the sensor network. An intruding movement is distinguished by analyzing the local web log data and reported to a system as an alarm, so as to realize the security purpose of protecting the wireless sensor network from various new and old attacks.

Description

technical field [0001] The invention relates to a security protection method of a wireless sensor network, in particular to a distributed intrusion detection method in a wireless sensor network. Background technique [0002] With the rapid development of wireless sensor network applications, network security issues are increasingly important. While firewalls are an effective first line of defense in detecting intrusions in wired networks, there is no such tool in wireless networks. Because wireless transmission is subject to packet loss and signal blocking. The security of each sensor node is important to maintain the security integrity of the entire network. Today, as wireless sensor networks are used more and more widely, users need an effective network security measure. [0003] Intrusion detection technology is one of the key technologies to protect network security. Intrusion Detection System IDS (IntrusionDetection System) is a system that can detect network intrus...

AI Technical Summary

Problems solved by technology

[0005] After searching the literature of the existing technology, it is found that the Chinese patent application number is 200710019976.3, and the name is "Hybrid Intrusion Detection Method for Wireless Sensor Networks", which describes a method based on multiple intrusion detection methods such as: based on clustering, based on distance for detection concentration The intrusion detection method of wireless sensor network with type intrusion or distributed intrusion, this method is only a centralized detection method, and does not do intrusion detection for the characteristics of discrete data and continuous data, and cannot meet the requirements of wireless sensor networks. Real-time intrusion detection requirements

Images