Digital Investigation of Wormhole Attacks in Wireless Sensor Networks

Several solutions were proposed by the literature to detect wormhole attacks in wireless sensor networks (WSN) but, to the best of our knowledge, none of them has taken interest to the problem of digital investigation. We propose in this paper a solution for digital investigation of wormhole attacks in WSN. An observed WSN is defined to support generation and secure forwarding of evidences regarding sensor nodes behavior in the network. A set of investigator nodes, called observers, are distributed over the network in charge of monitoring the network topology and datagram forwarding by sensor nodes. A set of algorithms are proposed to aggregate the collected evidences, identify colluding nodes, and reconstruct the potential scenarios of wormholes attacks.