The Design And Implementation Of Schemes Against Wormhole Attack In ZigBee Networks

With the development of military information technology,wireless sensor network technology has been acting a more and more important role due to its flexibility and convenience,and ZigBee has a great potential in application of military fields such as battlefield monitoring,situational awareness,adversary identification and target tracing.Meanwhile,ZigBee could be attacked easily during its military application because of its imperfection of security mechanism.Among all of the weakness of ZigBee security,wormhole attack leads to that ZigBee network nodes build up an invalid neighboring relationship via message retransmission,which does harm on network topology and network security seriously.Thus,this paper aims at studying on methods for anti-wormhole attack,then designing both wormhole attack defense scheme and wormhole node detection scheme,and finally realizing a ZigBee network anti-wormhole attack prototype system.After deeply analyzing ZigBee specification security services and the principle of wormhole attack,a frame of anti-wormhole attack on the base of ZigBee protocol stack was built.According to the thought that defense technology cooperates with detection technology during different periods of the network,defense and detection module had been designed to allocate anti-wormhole attack assignments reasonably.Anti-wormhole attack scheme,wormhole node detecting scheme and design of the prototype system had been realized under the instruction of the frame.Aiming at solving the problem that wormhole attacks destroy the process of neighboring node discovering in the stage of ZigBee network initialization,based on the definition of interfacing node,a defense solution on the basis of neighboring discovery information was put forward in accordance with the anti-wormhole attack frame.The scheme designed neighboring node discovery protection algorithm to protect legal nodes from establishing invalid neighboring relationship due to the attacks efficiently and consumed minor node resources in the meanwhile.In view of that wormhole attacks damage routing discovery and resource allocation during ZigBee period in motion.On the basis of the thought that limits the max range of message transmission,a wormhole node detecting scheme had been put forward,based on definitions of explicit wormhole node and implicit wormhole node,in which firstly marking wormhole node and then distinguishing explicit wormhole node from implicit wormhole node.The solution reduced the expense of nodes and detected wormhole nodes in an efficient way.Based on the work mentioned above,ZigBee network anti-wormhole attack prototype system had been designed with the thought of combination of software and hardware.And modules of the system had been tested and analyzed.It turns out in the experiment that every module works normally and it is up to our expectation.This article have solved the problem of anti-wormhole attack and improved the security of the network,which supplies technology support for the application and extension of ZigBee in military fields.