A Trust-based Intrusion Detection System for Mobile RPL Based Networks

Faiza, Medjek; Tandjaoui, Djamel; Romdhani, Imed; Nabil, Djedjig

Abstract

Successful deployment of Low power and Lossy Networks (LLNs) requires self-organising, self-configuring, security, and mobility support. However, these characteristics can be exploited to perform security attacks against the Routing Protocol for Low-Power and Lossy Networks (RPL). In this paper, we address the lack of strong identity and security mechanisms in RPL. We first demonstrate by simulation the impact of Sybil-Mobile attack, namely SybM, on RPL with respect to control overhead, packet delivery and energy consumption. Then, we introduce a new Intrusion Detection System (IDS) scheme for RPL, named Trust-based IDS (T-IDS). T-IDS is a distributed, cooperative and hierarchical trust-based IDS, which can detect novel intrusions by comparing network behaviour deviations. In T-IDS, each node is considered as monitoring node and collaborates with his peers to detect intrusions and report them to a 6LoWPAN Border Router (6BR). In our solution, we introduced a new timer and minor extensions to RPL messages format to deal with mobility, identity and multicast issues. In addition, each node is equipped with a Trusted Platform Module co-processor to handle identification and off-load security related computation and storage.

Citation

Faiza, M., Tandjaoui, D., Romdhani, I., & Nabil, D. (2018). A Trust-based Intrusion Detection System for Mobile RPL Based Networks. In Proceedings of 10th IEEE International Conference on Internet of Things (iThings-2017). https://doi.org/10.1109/iThings-GreenCom-CPSCom-SmartData.2017.113

• Conference Name: 10th IEEE International Conference on Internet of Things (iThings-2017)
• Start Date: Jun 21, 2017
• End Date: Apr 23, 2017
• Acceptance Date: Apr 28, 2017
• Online Publication Date: Feb 1, 2018
• Publication Date: 2018
• Deposit Date: May 1, 2017
• Publicly Available Date: May 1, 2017
• Publisher: Institute of Electrical and Electronics Engineers
• Book Title: Proceedings of 10th IEEE International Conference on Internet of Things (iThings-2017)
• DOI: https://doi.org/10.1109/iThings-GreenCom-CPSCom-SmartData.2017.113
• Keywords: RPL security, Sybil attack, Routing security, Intrusion Detection System, IoT
• Public URL: http://researchrepository.napier.ac.uk/Output/834809