Hasti Khosravi - Faculty of Engineering and Technology, Alzahra University, Iran
Reza Azmi
Mehran Sharghi

Wireless sensor network (WSN) is regularly deployed in unattended and hostile environments. The WSN is vulnerable to security threats and various attacks like black hole, sink hole, selective forwarding and Hello Flood etc. Hello Flood attack is a type of network layer attack in wireless sensor networks. In this attack, the malicious node is able to disturb the security of network by sending periodic hello packets with high signal strength. In this work, a hybrid intrusion detection system is proposed to detect Hello Flood attack. It has two phases. The first phase is neighbor-based anomaly detection and the second phase is based upon the discovery of missing and malfunction of nodes due to Hello Flood attack. For optimizing, the adaptive method based on Alpha-Beta filtering is used in phase 1. The algorithm is implemented in TOSSIM- the sensor network simulator in TinyOS systems. The simulating results show that the combination of two techniques can achieve high detection rate and low false positive. The proposed method also detects collusion attack of malicious nodes.

Wireless Sensor Network, Hello Flood Attack, Adaptive Intrusion Detection, Collusion Attack