Dynamic self-adapting wireless sensor network invasion detection intelligence algorithm

Abstract

The invention relates to a dynamic self-adapting wireless sensor network invasion detection intelligence algorithm and belongs to the wireless sensor network information safety technology field. The algorithm comprises the following steps of using a min-max standardization method to carry out normalization on a network characteristic; through a mean value drift algorithm, clustering training data into a plurality of clusters, and merging into two clusters according to a relative distance among cluster centers; taking normal data as a template and marking the two clusters as normal clusters or abnormal clusters; distributing weights for each characteristic vector of the training data according to a distance between the characteristic vector and a cluster center where the characteristic vector is located; taking the marked and weighted training data as input of a weighted support vector machine so as to construct a decision function; through the decision function, determining whether the test data is normal or abnormal; and during a detection phase, adding detection data which is determined by the decision function into the training data at intervals of updating time so as to reconstruct the decision function. The algorithm and disposition are simple, cost is low, and the algorithm can adapt to different network structures, can detect attack behaviors with different forms and possesses an expansion capability.

Description

technical field [0001] The invention belongs to the technical field of wireless sensor network information security, and relates to a dynamic adaptive wireless sensor network intrusion detection intelligent algorithm. Background technique [0002] By collecting and analyzing sensor node information, the wireless sensor network intrusion detection system can distinguish whether the node has abnormal behavior, and send an alarm to the administrator. Intrusion detection technology can detect node attack behavior in real time, effectively making up for the lack of security defense technology. Therefore, intrusion detection technology is one of the key technologies to ensure the security of wireless sensor networks. [0003] Athmani et al. resist black hole attacks by controlling the packet transmission between nodes and base stations. This scheme can save node energy, but it is difficult to resist flooding attacks. Because flooding attacks increase the number of packets trans...

AI Technical Summary

Problems solved by technology

The characteristics of the network structure provide convenience for the detection mode on the one hand, but limit the application range of the detection mode on the other hand

[0005] In summary, the current intrusion detection algorithm needs to solve two problems: 1. The current intrusion detection algorithm can usually only detect one kind of attack behavior

2. Current intrusion detection algorithms usually rely on the network structure, making it difficult to adapt to different network structures

Images