The Research Of Wireless Sensor Network Traffic Anomaly Detection Mechanism Based On SDN

Wireless sensor network are involved sensor technology, embedded, wireless communications, distributed and so on. By integrating the sensor nodes among micro sensor chip,mutual cooperation and information in real-time monitoring and control the object information of monitoring area. Widely used in national defense, military, health care, transportation and other fields of human production and life.Unfortunately, WSN lack the most basic protection facilities and difficult to achieve effective protection and facing with a completely open space on the monitoring area, so that the attacker can easily reach the interception, forgery, tampering with the purpose of the data. Therefore, WSN requires not only efficient monitoring mechanism to quickly detect the presence of threats to the network, but also to actively and effectively take defensive measures corresponding robustness to ensure data integrity and network at the same time detected unsafe. Due to space limitations, this paper, the network layer may face invasion, abnormal network traffic as the main orientation, put forwarding a newly and more efficient network traffic anomaly detection.The main research work includes:(1) Summarizes the characteristics of WSN nodes and the network structure, describes the characteristics of the necessary conditions and attack security features and applications of wireless sensor networks, as well as all levels of the protocol stack is likely to face, as well as the formation of a variety of attacks.( 2) Analyzed the shortcomings of traditional intrusion detection programs exist. For example, it can’t detect flexible deployment strategy, deployment testing program to increase the network load, corresponding exception handling mechanism is not perfect. With the SDN technology- thinking of enabling network control and data forwarding logic separation, a new network traffic anomaly detection are put forwarded. Detection strategies needs to be deployed only in the energy supply of adequate cluster head node(logical control node in logical subnets),with high detection efficiency.( 3) Under conditions of allowing very low false detection rate exists, through the deployment of R / S analysis method in cluster head node, can quickly calculate reflect the network traffic self-similarity of Hurst values, you can quickly determine the network in one or a several sub flow is abnormal. This method is highly efficient, is a novel, easy to deploy wireless sensor network anomaly detection scheme based on traffic anomaly detection.