Abstract:While packet loss rate is a crucial indicator of network reliability, abnormal nodes dropping the transit traffic lead to higher packet loss rates. One significant challenge is to efficiently distinguish the abnormal nodes from those with normal packet losses. To address this issue, this paper presents a new detection scheme based on the Likelihood Ratio Test (LRT) for cluster-tree networks - a typical architecture of wireless networks. Due to the hierarchical structure of the networks, LRT is implemented in two phases, i.e., the local detection phase at the non-root nodes and the overall detection phase at the root node. The observed forwarding behaviors of the monitored node are modeled and quantified as log-likelihood ratios where the packet loss rate in the alternative hypothesis is a default value. In this way, the log-likelihood ratios are compared with a threshold under the maximum a posteriori probability criterion to identify the anomalies. The correctness of the proposed scheme is theoretically proved if the packet loss rate in the abnormal node exceeds a critical detection point - whose expression is also formally derived. Simulation results validate the critical detection point and demonstrate the superiority of the proposed detection scheme compared to the state-of-the-art methods.

A New Abnormal Node Detection Method with Dynamic Hoeffding Test

Detecting Suspicious Node Within One Cluster in Wireless Sensor Network Using Game Theoretic Approach

Packet Payload Based Anomalous Network Intrusion Detection

Detecting Abnormal Nodes in Cluster-tree Networks Via the Likelihood Ratio Test of Packet Losses.

Congestion Avoidance, Detection and Alleviation in Wireless Sensor Networks

Anomaly Detection of Wireless Relays Based on Markov Models Through the Wald-Wolfowitz Runs Test.

Threshold Based Distributed Flow Control Scheme in Wireless Ad Hoc Networks

A New Fault Detection Method for Computer Networks

A LoSS based on-line detection of abnormal traffic using dynamic detection threshold

An Accurate Detection Scheme for Selfish Nodes in Wireless Ad Hoc Networks

Cooperative Abnormal Node Detection with Adversary Resistance

An Efficient Detection Algorithm Based on Network Delay Estimation

A Method for Detecting Abnormal Data of Network Nodes Based on Convolutional Neural Network

Abnormal Behavior Detection and Control in High Speed Networks Based on Bidirectional Flow

Data-Driven Packet Loss Estimation For Node Healthy Sensing In Decentralized Cluster

Real-Time and Self-adaptive Method for Abnormal Traffic Detection Based on Self-similarity

Achieving Fast and Stable Failure Detection in Wdm Networks

Network Anomaly Detection Algorithm Based on Lindeberg-Feller Central Limit Theorem

An Adaptive Approach to Detecting Black and Gray Hole Attacks in Ad Hoc Network

A dynamic detecting function deployment in unsafe wireless networks

An Effective Method for Computer Network Anomaly Detection