A safe and energy-saving traffic attack detection protocol for WSN

How to accurately and rapidly detect traffic attack is an important security problem in wireless sensor networks. An energy-saving ARMA-based traffic attack detection protocol is proposed in this paper. The detection protocol uses linear prediction to establish easy ARMA(2,1) model for sensor nodes. In the detection protocol, different nodes play different roles, and use different monitor schemes. Virtual cluster head and monitor nodes are elected. Monitor nodes monitor cluster head, and report to virtual cluster head. Virtual cluster head broadcasts abnormal cluster head to all member nodes, and initiates a new cluster head election. Member nodes are monitored by their cluster head. Simulation shows that, the detection protocol can real-time predict traffic attacks, and consume less energy. It not only protects sensor nodes against traffic attacks, but also prolongs the lifetime of network.