Wireless sensor network (WSN) is an indispensible part of Internet of Things that has been applied in many fields to monitor environments and collect data from surroundings. However, WSNs are highly susceptible to attacks due to its unique characteristics: large-scale, self-organization, dynamic topology, and constrained resources. A number of systems have been proposed to effectively detect varieties of attacks in WSNs. However, most previous surveys on WSN attacks focus on detection methods for only one or two types of attacks and lack detailed performance analysis. Additionally, the literature lacks comprehensive studies on security-related data (in short security data) collection in WSNs. In this paper, we first provide an overview of WSNs and classify the attacks in WSNs based on protocol stack layers. For the purpose of WSN security measurement, we then research attack detection methods of eleven mainstream attacks. We extract security data that play an important role for detecting security anomaly toward security measurement. We further elaborate the advantages and disadvantages of the existing detection methods based on a number of evaluation criteria. Finally, we highlight a number of open problems in this paper field based on our thorough survey and conclude this paper with possible future research directions.

/pdf/data-collection-for-security-measurement-in-wireless-sensor-3dv4yzzd2n.pdf

Data Collection for Security Measurement in Wireless Sensor Networks: A Survey

As a typical application of Internet of Things (IoT) in the field of transportation, Internet of Vehicles (IoV) aims at achieving an integrated intelligent transportation system to enhance traffics efficiency, avoid accidents, ensure road safety, and improve driving experiences by using new IoT technologies. Different from other Internet, it is characterized by dynamic topological structures, huge network scale, non-uniform distribution of nodes, and mobile limitation. Due to these characteristics, IoV systems face various types of attacks, such as authentication and identification attacks, availability attacks, confidentiality attacks, routing attacks, data authenticity attacks, etc., which result in several challenging requirements in security and privacy. Many security scientists made numerous efforts to ensure the security and privacy for the Internet of Vehicles in recent years. This paper aims to review the advances on issues of security and privacy in IoV, including security and privacy requirements, attack types, and the relevant solutions, and discuss challenges and future trends in this area.

Attacks and countermeasures in the internet of vehicles

In wormhole attacks, attackers create a low-latency link between two points in the network. This can be achieved by either compromising two or more sensor nodes of the network or adding a new set of mali-cious nodes to the network. Once the link is established, the attacker collects data packets on one end of the link, sends the data packets using the low-latency link and replays them at the other end. Wormhole attacks result in alterations in network data flow thereby deceiving the base station. Although implementing a wormhole attack is relatively simple, detecting it is not a trivial task as the replayed information is usually valid. This paper focuses on wormhole attacks and presents the state-of-the-art in wormhole attack detection in wireless sensor networks. The existing wormhole detection protocols are presented in detail and, based on the existing research, the open research areas and future research directions in wormhole attack detection are provided.

A Survey of Wormhole-based Attacks and their Countermeasures in Wireless Sensor Networks

One of the major reasons to address the security aspects in MANETS is the usage of wireless transmission medium, which is highly susceptible or vulnerable to attacks. This paper proposes a way to identify parallelly different types of attacks in MANETS. This approach is highly secure as it essentially concentrates on identifying misbehaving links, number of significant packets dropped and malicious nodes parallelly. This paper shows the implementation of identification and prevention of malicious nodes launching packet dropping and message tampering attacks, using a semantic security mechanism. This security scheme is highly impossible to break, thereby making it a highly secured approach. The evaluation results demonstrate that the approach effectively detects and prevents such nodes and links in networking sessions.

/pdf/a-highly-secured-approach-against-attacks-in-manets-5tp7syi21u.pdf

A Highly Secured Approach against Attacks in MANETS

Underwater sensor networks (UWSNs) can be deployed for sensing the environment in oceanographic columns and other water bodies in which they are deployed. The peculiar characteristic of the underwater medium, coupled with the queer nature of the sound waves in water, poses an enigmatic problem for UWSN researchers. In this study, the authors focus on the problem of UWSN jamming, which is a popular type of denial-of-service attack. The existing jamming detection solutions for sensor networks are primarily targeted towards the terrestrial ones. In this work, the authors study the unique characteristics of jamming in UWSN, and propose a protocol, known as underwater jamming detection protocol (UWJDP), to detect and mitigate jamming in underwater environments. The results show that if the packet delivery ratio (PDR) is less than or equal to 0.8, the authors have the maximum probability of detecting jamming. The jamming detection ratio is around 2-11- more for the said PDR.

Jamming in underwater sensor networks: detection and mitigation

The nature of wireless ad hoc and sensor networks make them very attractive to attackers. One of the most popular and serious attacks in wireless ad hoc networks is wormhole attack and most proposed protocols to defend against this attack used positioning devices, synchronized clocks, or directional antennas. This paper analyzes the nature of wormhole attack and existing methods of defending mechanism and then proposes round trip time (RTT) and neighbor numbers based wormhole detection mechanism. The consideration of proposed mechanism is the RTT between two successive nodes and those nodes’ neighbor number which is needed to compare those values of other successive nodes. The identification of wormhole attacks is based on the two faces. The first consideration is that the transmission time between two wormhole attack affected nodes is considerable higher than that between two normal neighbor nodes. The second detection mechanism is based on the fact that by introducing new links into the network, the adversary increases the number of neighbors of the nodes within its radius. This system does not require any specific hardware, has good performance and little overhead and also does not consume extra energy. The proposed system is designed in ad hoc on-demand distance vector (AODV) routing protocol and analysis and simulations of the proposed system are performed in network simulator (ns-2). Keywords—AODV, Wormhole attacks, Wireless ad hoc and

/pdf/wormhole-attack-detection-in-wireless-sensor-networks-27kxj5zdl1.pdf

Wormhole Attack Detection in Wireless Sensor Networks

Video streaming exceeds all other traffic types on the internet. Now, it occupies a significant portion of total internet traffic. The transmission mechanism used by the video stream affects not only network traffic but also the users' Quality of Experience (QoE). Software Defined Networking (SDN) is a manageable, programmable, adaptable, and cost-effective emerging network architecture, which is very suitable for the dynamic natured high-bandwidth of modern applications. The OpenFlow protocol is a fundamental element in the creation of SDN solutions. Traffic engineering is a favorite mechanism used by network administrators when optimizing the existing networks and providing more services to customers is needed. This paper proposes a traffic rerouting approach in the video streaming flow management framework on SDN architecture, which can effectively reroute video streaming traffics to reduce packet loss and improve bit rates. It can calculate the current link utilization over the network links and it uses least-cost path rerouting rather than the default routing, reactive forwarding in the ONOS controller. The proposed method is validated by using the popular Mininet network emulation environment and OpenFlow features. The experimental results verify that the improvement of performance by the measurement of video streaming bit rates and packet loss of video traffic.

Effective Traffic Rerouting for Video Streaming in Software Defined Networking

In Software-Defined Networking (SDN) area, the implementation of Quality of Service (QoS) is still ongoing. SDN provides flexibility and benefits to the network by separation of control and data planes with its centralized software-based ar-chitecture and programmable functionalities. QoS control in SDN generally refers to network mechanisms used to guarantee a particular service for the resources in the network. One of the parameters in the networked resources includes the bandwidth. As a lot of traditional service providers use hard QoS controls to guarantee bandwidth to their increasing number of users, excess idle bandwidth is wasted when all the users are not using the reserved resources fully all the time. In this paper, fairly distrib-uting the excess bandwidth among current users using Dynamic Bandwidth Allocation (DBA) algorithm to maximize link capacity utilization is presented. For evaluation, SDN traffic flows based on Transmission Control Protocol (TCP) and User Data-gram Protocol (UDP) generated from two hosts (Source) to the server (Destination) are analysed by using the Mininet Emula-tor, OpenFlow enabled CPqD switches, Python-based Ryu con-troller and the Network Speed Testing and Performance Meas-urement Tool (iPerf). In the performance evaluation of dynamic bandwidth allocation for both traffic, the controller allocated bandwidth of the UDP traffic takes place 80 ~ 100 % of theoret-ical value calculated by the algorithm and the allocation band-width of the controller for TCP is 30 ~ 50 % of the algorithm's expected value.

Aung Htein Maw

Papers

Wormhole Attack Detection in Wireless Sensor Networks

Effective Traffic Rerouting for Video Streaming in Software Defined Networking

Performance Evaluation of Resource Allocation in Software Defined Network