Specification-based IDS for securing RPL from topology attacks

Le, Anhtuan, Loo, Jonathan, Luo, Yuan Roger ORCID: https://orcid.org/0000-0002-9812-5543 and Lasebae, Aboubaker ORCID: https://orcid.org/0000-0003-2312-9694 (2011) Specification-based IDS for securing RPL from topology attacks. Wireless Days (WD), 2011 IFIP . pp. 1-3. ISSN 2156-9711 [Article] (doi:10.1109/WD.2011.6098218)

PDF - Published version (with publisher's formatting) Restricted to Repository staff and depositor only Download (248kB)

Abstract

This paper focuses on the security aspect of RPL (Routing Protocol for Low-power and lossy network) by introducing a new type of threat – the topology attack, which changes the node operation for breaking the optimised network topology, and designing a specification-based IDS for detecting it. We present two novel RPL attacks of this type: the rank attack and local repair attack. We also propose an IDS architecture using network monitor backbone, and describe its monitoring mechanisms through a RPL finite state machine implemented in each monitor node. We show that our system can effectively detect these routing operation threats with a reasonable overhead.

Actions (login required)

View Item

Statistics

DownloadsShow export options

Export as CSVXMLJSON

Activity Overview

6 month trend

173Downloads

6 month trend

531Hits

Additional statistics are available via IRStats2.