Detection of malicious packet dropping attacks in RPL-based internet of things. (5th June 2019)

• Record Type: Journal Article
• Authors: Shin, Sooyeon; Kim, Kyounghoon; Kwon, Taekyoung
• Is Part Of: International journal of ad hoc and ubiquitous computing. Volume 31:Number 2(2019)
• Page Start: 133
• Page End: 141
• Publication Date: 2019-06-05
• Subjects: IoT -- internet of things -- IPv6 -- RPL -- 6LowPAN -- Packet Dropping -- Detection -- ContikiOS -- Cooja simulator; Ubiquitous computing -- Periodicals; Embedded computer systems -- Periodicals; Electronic data processing -- Distributed processing -- Periodicals; Wireless communication systems -- Periodicals; Computer architecture -- Periodicals; 004.2
• Languages: English
• ISSNs: 1743-8225

Abstract

The routing protocol for low-power and lossy networks (RPL) is an IPv6-based routing protocol optimised for internet of things (IoT) environments. However, it is susceptible to malicious packet dropping attacks. If a node with a lower rank that is closer to the root node attempts a malicious packet dropping, it may disrupt basic data transmission or even the entire IoT application service. In this paper, we present a novel detection method for malicious packet dropping attacks against RPL-based networks. The proposed method is based on the anomaly intrusion detection system and detects malicious packet dropping in the presence of normal packet losses. We evaluate the performance of the method on Contiki's network simulator, Cooja. The evaluation results show that the method has good performance in detecting malicious packet dropping attacks. In every case, the successful detection rate is greater than 94% and the false alarm rate is less than 3%.