Cryptology ePrint Archive: Report 2020/1094

TN-IDS for Network Layer Attacks in RPL based IoT Systems

Ambili K N and Jimmy Jose

Abstract: Routing protocol for Low power and lossy network (RPL) is a standardized optimal protocol for routing in Internet of Things (IoT). The constrained wireless sensor network in IoT is characterized by lack of processing speed, low power and low memory. Sometimes various network attacks enabling the RPL network affect the network performance dismally. This leads to drastic variation in energy consumption at nodes and disturb the RPL network protocol structure. This leads to reduced processing speed and memory allocation in the network. We first illustrate the attacks and their impact in RPL network by simulation. To detect such attacks, we propose an Intrusion Detection System (IDS) scheme for RPL network based on trust computation. Trust based Neighbor notifi cation IDS (TN-IDS) is a secure hierarchical distribution system which monitors the network intrusion and checks the performance of the network. The new TN-IDS system will track all nodes in the network and identify the malicious nodes. The activity list prepared by IDS indicates them to a sink node. This is achieved by introducing a distributed leader election algorithm to collect metrics related to the RPL network. Hence, the performance metrics of the RPL network together with TN-IDS module can identify the malicious node and isolate them.

Category / Keywords: implementation / IoT; RPL; DoS; blackhole; Topology attacks; sinkhole; IDS; wormhole;

Date: received 11 Sep 2020

Contact author: ambili_p180002cs at nitc ac in,jimmy@nitc ac in

Available format(s): PDF | BibTeX Citation

Version: 20200915:111734 (All versions of this report)

Short URL: ia.cr/2020/1094


[ Cryptology ePrint archive ]