Abstract:Wormhole attack is one of the severe threats to wireless sensor and ad hoc networks. Most of the existing countermeasures either require specialized hardware or demand high network overheads in order to capture the specific symptoms induced by the wormholes, which in result limits their applicability. In this paper, we exploit an inevitable symptom of wormholes and present Pworm, a passive wormhole detection and localization system based upon the key observation that a large amount of network traffic will be attracted by the wormholes. The proposed scheme is passive, real-time, and efficient against both active and passive wormholes. Our approach silently observes the variations in network topology to infer the wormhole existence and solely relies on network routing information. It does not necessitate specialized hardware or poses rigorous assumptions on network features. We evaluate our scheme through extensive simulations of 100 to 800 nodes for various network scales and show that Pworm is well suited for false alarms, scalability, and time delay in terms of activation as well as detection latencies.

Research and Development of Worm Detection Technologies

Host Based Unknown WOrm Detection Using Machine Learning

Research of Characteristics of Worm Traffic

Design and Implementation of Network Worm Detection System for Internal Network

Cooperation System of Worm Detection and Quarantine in Real Time

Worm Intrusion Alarm Modeling Based on Network Traffic Character

Detecting Randomly Scanning Worms Based on Heavy-Tailed Property

A worm behavioral approach to susceptible host detection

The analysis of worm non-linear propagation model and the design of worm distributed detection technology

A New Approach to Automatically Detect Worms

Worm Attack Detection and Response

A Worm Early Detection System Based on Multi-Similarity

Worm Detection and Signature Extraction Based on Communication Characteristics

Active worm countermeasure based on detection

The research of worm distributed detection technology based on network security.

Network Worms Detecting System Based on Failed Connections Analysis

A novel anomaly detection algorithm and prewarning technology of unknown worms

Adaptive method for monitoring network and early detection of internet worms

Designing a framework for worm detection based on similarity

Pworm: Passive and Real-Time Wormhole Detection Scheme for WSNs.

Principle and Design of Active Defense System to Contain Internet Worm