AN INTRUSION DETECTION SYSTEM FOR WIRELESS SENSOR NETWORKS

Abstract

In recent years, wireless sensor networks have many potential applications for both civil and military tasks. However, sensor networks are susceptible to many types of attacks because they are deployed in open and unprotected environment. So it is necessary to use effective mechanisms to protect sensor networks against many types of attacks. As a second line of defence, Intrusion detection is one of the major and efficient defence methods against attacks in a computer network and system. However, low memory and battery power of sensors requires that security solutions for sensor network should be designed with limited usage of computation and resources. In this dissertation, we propose an Intrusion Detection System model which consists of two intrusion detection modules: local IDS agent and global IDS agent. Local IDS agent monitors the information sent and received by the sensor. Global IDS agent monitors the neighbouring nodes' behaviour. Local IDS agent remains active all time where as global IDS agent gets activated according to the K,,,-monitor eligibility algorithm. In Km—monitor algorithm, node decides that its global IDS agent should be activated on the basis of its one hop and two hop neighbouring nodes' global IDS agent state and monitoring degree provided by base station. Our main idea behind activating global IDS agent on some particular nodes is to reduce the energy consumption of the sensor node and hence enhance the network lifetime