Multi-scale analysis of long range dependent traffic for anomaly detection in wireless sensor networks

Wireless sensor networks are prone to node misbehavior arising from tampering by an adversary (Byzantine attack), or due to other factors such as node failure resulting from hardware or software degradation. In this paper, we consider the problem of decentralized detection in wireless sensor networks in the presence of one or more classes of misbehaving nodes. Binary hypothesis testing is considered where the honest nodes transmit their binary decisions to the fusion center (FC), while the misbehaving nodes transmit fictitious messages. The goal of the FC is to identify the misbehaving nodes and to detect the state of nature. We identify each class of nodes with an operating point (false alarm and detection probabilities) on the receiver operating characteristic (ROC) curve. Maximum likelihood estimation of the nodes' operating points is then formulated and solved using the expectation maximization (EM) algorithm with the nodes' identities as latent variables. The solution from the EM algorithm is then used to classify the nodes and to solve the decentralized hypothesis testing problem. Numerical results compared with those from the reputation-based schemes show a significant improvement in both classification of the nodes and hypothesis testing results. We also discuss an inherent ambiguity in the node classification problem which can be resolved if the honest nodes are in majority.

Wireless Sensor Networks (WSNs) are essential for real-time monitoring and control, but sensor faults can compromise data integrity and reduce the reliability of decisions. Supervised fault detection techniques typically require large amounts of labeled data, which are often unavailable in real-world scenarios. This paper proposes a data-efficient, unsupervised fault detection method that combines an LSTM-Attention Autoencoder with a dynamic thresholding mechanism. The model captures temporal patterns in normal sensor behavior and detects anomalies through context-aware reconstruction error analysis. Unlike conventional static thresholds, the dynamic approach adapts to changing sensor conditions, enhancing robustness in noisy or drifting environments. Experimental results on a synthetic dataset generated from real temperature sensor readings show that the proposed method achieves an F1-score of 98.90% and a recall of 99.24%, outperforming baseline methods including plain autoencoders, LSTM autoencoders, isolation forest, and one-class SVM. These findings demonstrate the model's effectiveness for real-time, label-free fault detection in resource-constrained WSNs.

Outlier detection is an important task for intrusion detection and fault diagnosis in wireless sensor networks (WSNs). Outliers in sensed data may be caused due to compromised or malfunctioning sensor nodes. In this paper, we propose a centralized and a distributed approach based on the principal component analysis (PCA) for outlier detection in WSNs. In the distributed approach, we partition the network into multiple groups of sensor nodes. Each group has a group head and several member nodes. Every member node uses a fixed- width clustering algorithm and sends a description of its local sensed data to the group head. The group head then applies a distributed PCA to establish a global normal pattern and detect outliers. This pattern is periodi- cally updated using weighted coefficients. We compare the performance of the centralized and distributed approaches based on the real sensed data collected by 54 Mica2Dot sensors deployed in Intel Berkeley Re- search Lab. The experimental results show that the distributed approach reduces both communication over- head and energy consumption, while achieving comparable accuracy.

How to sense and monitor the environment with high quality is an important research subject in the Internet of Things (IOT). This paper deals with the important issue of the balance between the quality of target detection and lifetime in wireless sensor networks. Two target-monitoring schemes are proposed. One scheme is Target Detection with Sensing Frequency K (TDSFK), which distributes the sensing time that currently is only on a portion of the sensing period into the entire sensing period. That is, the sensing frequency increases from 1 to K. The other scheme is Target Detection with Adjustable Sensing Frequency (TDASF), which adjusts the sensing frequency on those nodes that have residual energy. The simulation results show that the TDASF scheme can improve the network lifetime by more than 17.4% and can reduce the weighted detection delay by more than 101.6%.

In this paper, we explore two important issues for distributed target detection in wireless sensor network (WSN): (1) How to increase efficient-energy for each sensor; (2) How to improve the detection precision about whether a target is occurring in the event region. We present a neighbor collaboration detection (NCD) scheme that introduces a clustered fusion into target detection process. Based on MAP decision criterion, we propose an optimal fusion decision. We mathematically show that the NCD Scheme vastly improves the target detection precision, when the number of neighbor sensor is large.

A blockchain-empowered authentication scheme for worm detection in wireless sensor network

Event detection in wireless sensor networks is a sophisticated method for processing sampled data directly on the sensor nodes, thereby reducing the need for multihop communication with the base station of the network. In contrast to application-agnostic compression or aggregation techniques, event detection pushes application-level knowledge into the network. In-network event detection - especially the distributed form involving multiple sensor nodes - has thus an exceptional potential to increase energy efficiency, thus prolonging the lifetime of the network. In this article, we summarize recently proposed system architectures and algorithms employed for event detection in wireless sensor networks. On the example of the AVS-Extrem platform, we illustrate how energy-efficient event detection can be implemented through a combination of custom hardware design and distributed event detection algorithms. We then continue to present a brief evaluation of the detection accuracy and the energy consumption that is achievable by current systems.

A wireless sensor network (WSN) is defined as a set of spatially distributed and interconnected sensor nodes. WSNs allow one to monitor and recognize environmental phenomena such as soil moisture, air pollution, and health data. Because of the very limited resources available in sensors, the collected data from WSNs are often characterized as unreliable or uncertain. However, applications using WSNs demand precise readings, and uncertainty in data reading can cause serious damage (e.g., health monitoring data). Therefore, an efficient local/distributed data processing algorithm is needed to ensure: (1) the extraction of precise and reliable values from noisy readings; (2) the detection of anomalies from data reported by sensors; and (3) the identification of outlier sensors in a WSN. Several works have been conducted to achieve these objectives using several techniques such as machine learning algorithms, mathematical modeling, and clustering. The purpose of this paper is to conduct a systematic literature review to report the available works on outlier and anomaly detection in WSNs. The paper highlights works conducted from January 2004 to October 2018. A total of 3520 papers are reviewed in the initial search process. Later, these papers are filtered by title, abstract, and contents, and a total of 117 papers are selected. These papers are examined to answer the defined research questions. The current paper presents an improved taxonomy of outlier detection techniques. This will help researchers and practitioners to find the most relevant and recent studies related to outlier detection in WSNs. Finally, the paper identifies existing gaps that future studies can fill.

A Wireless Sensor network (WSN) consists of large number of low cost low power sensor nodes. The nature of wireless sensor networks makes them very attractive to attackers. One of the most popular and serious attacks in wireless sensor networks is sink hole attack and most existing protocols to defend against this attack used cryptographic methods with keys. In sink hole attack a sensor node will have a lot of false neighbors. Wireless Sensor Network has a dynamic topology, intermittent connectivity, and resource constrained device nodes. Researchers over the past years have encouraged the use of mobile agent to overcome these challenges. The proposed scheme is to defend against sink hole attacks using mobile agents. Mobile agent is a program segment which is self controlling. They navigate from node to node not only transmitting data but also doing computation. They are an effective paradigm for distributed applications, and especially attractive in a dynamic network environment. A routing algorithm with multiple constraints is proposed based on mobile agents. It uses mobile agents to collect information of all mobile sensor nodes to make every node aware of the entire network so that a valid node will not listen the cheating information from malicious or compromised node which leads to sink hole attack. The significant feature of the proposed mechanism is that it does not need any encryption or decryption mechanism to detect the sink hole attack. This mechanism does not require more energy than normal routing protocols like AODV. Here we implement a simulation-based model of our solution to recover from a Sinkhole attack in a Wireless Sensor Network. The mobile agents were developed using the Aglet.

One-class support vector machines (OCSVM) have been recently applied to detect anomalies in wireless sensor networks (WSNs). Typically, OCSVM is kernelized by radial bais functions (RBF, or Gausian kernel) whereas selecting Gaussian kernel hyperparameter is based upon availability of anomalies, which is rarely applicable in practice. This article investigates the application of OCSVM to detect anomalies in WSNs with data-driven hyperparameter optimization. Specifically, the information of the farthest and the nearest neighbors of each sample is used to construct the objective cost instead of labeling based metrics such as geometric mean accuracy (G-mean) or area under the receiver operating characteristic (AUROC). The efficiency of this method is illustrated over the IBRL dataset whereas the resulting estimated boundary as well as anomaly detection performance are comparable with existing methods.

Due to the major operating restrictions, ensuring security is the fundamental problem of Wireless Sensor Networks (WSNs). Because of their inadequate security mechanisms, WSNs are indeed a simple point for malware (worms, viruses, malicious code, etc.). According to the epidemic nature of worm propagation, it is critical to develop a worm defense mechanism in the network. This concept aims to establish novel malware detection in WSN that consists of several phases: “(i) Preprocessing, (ii) feature extraction, as well as (iii) detection”. At first, the input data is subjected for preprocessing phase. Then, the feature extraction takes place, in which principal component analysis (PCA), improved linear discriminant analysis (LDA), and autoencoder-based characteristics are retrieved. Moreover, the retrieved characteristics are subjected to the detection phase. The detection is performed employing combined shallow learning and DL. Further, the shallow learning includes decision tree (DT), logistic regression (LR), and Naive Bayes (NB); the deep learning (DL) includes deep neural network (DNN), convolutional neural network (CNN), and recurrent neural network (RNN). Here, the DT output is given to the DNN, LR output is subjected to CNN, and the NB output is given to the RNN, respectively. Eventually, the DNN, CNN, and RNN outputs are averaged to generate a successful outcome. The combination can be thought of as an Ensemble classifier. The weight of the RNN is optimally tuned through the Self Improved Shark Smell Optimization with Opposition Learning (SISSOOL) model to improve detection precision and accuracy. Lastly, the outcomes of the suggested approach are computed in terms of different measures.

Widely used computer systems have always become a target for different type of attacks. With the specifications of easiness in deploying and setting up low cost and low power consumption systems, Wireless Sensor Networks (WSN) have also become a specific target for attackers. The WSNs, which consist of sensor nodes that sends information they perceive and forward to a base station/sink, cannot be directly protected by the traditional security precautions because of low resources of nodes, such as memory and computing capability. Hence, it is tried to find out different methods for intrusion detection in WSNs. This paper surveys frameworks for intrusion detection in WSNs by using a swarm optimization algorithm as ant colony approach.

Rare events detection is one of the main applications in Wireless Sensor Networks (WSN) and is currently a central concern of a vast literature. Compressed Sensing (CS) theory has been proved to be quite adapted to this objective. Although this is not the first work on applying CS to sparse events detection in WSN, it is the first to highly justify the validity of the targets detection and counting problem formulation. In order to enhance the CS recovery capacity in WSN, this work considers an approach based on a coherence reduction of the sensing matrix premised on the transmitted power control (PC). Simulation results prove that, under the constraint of equal power consumption, the detection and counting performance is improved when the proposed power control scheme is employed compared to the case without PC.

Wireless Sensor Networks (WSNs) have grown to become one of the most promising and interesting fields over the past few years. WSNs are wireless networks consisting of distributed sensor nodes which cooperatively monitor physical or environmental conditions. A sensor node is a tiny and simple device with limited computational resources. Sensor nodes are randomly and densely deployed in a sensed environment. WSN is designed to detect events or phenomena, and collect and return sensed data to the user. WSNs have been used inmany applications such as battlefield surveillance, trafficmonitoring, health-care, environment monitoring, etc. Some basic features of sensor networks are (Ilyas & Mahgoub, 2005):

Summary Congestion in WSN increases the energy dissipation rates of sensor nodes as well as the loss of packets and thereby hinders fair and reliable event detection. We find that one of the key reasons of congestion in WSN is allowing sensing nodes to transfer as many packets as possible. This is due to the use of CSMA/CA that gives opportunistic medium access control. In this paper, we propose an energy efficient congestion avoidance protocol that includes source count based hierarchical and load adaptive medium access control and weighted round robin packet forwarding. We also propose in-node fair packet scheduling to achieve fair event detection. The results of simulation show our scheme exhibits more than 90% delivery ratio even under bursty traffic condition which is good enough for reliable event perception. Key words: Sensor Network, Congestion Avoidance, Hierarchical Medium Access, Fair Event Detection. 1. Introduction Wireless Sensor Networks (WSNs) are densely deployed for a wide range of applications in the military, health, environment, agriculture and smart office domain. These networks deliver numerous types of traffic, from simple periodic reports to unpredictable bursts of packets triggered by sensed events. Therefore, congestion happens due to contention caused by concurrent transmissions, buffer overflows and time varying wireless channel condition [1][2][3]. As WSN is a multi-hop network, congestion taking place at a single node may diffuse to the whole network and degrades its performance drastically [4]. Congestion causes many folds of drawbacks: (i) it increases energy dissipation rates of sensor nodes, (ii) it causes a lot of packet loss, which in turn diminish the network throughput, and (iii) it hinders fair event detections and reliable data transmissions. Therefore, congestion avoidance and fair packet delivery become a crucial research issue for the practical realization of WSN based envisioned applications.