DETONAR: Detection of Routing Attacks in RPL-based IoT


Andrea Agiollo, Mauro Conti, Pallavi Kaliyar, TsungNan Lin, Luca Pajola

IEEE Transactions on Network and Service Management 18(2), pp. 1178–1190, 13 pagine,  2021
IEEE

The Internet of Things (IoT) is a reality that changes several aspects of our daily life, from smart home monitoring to the management of critical infrastructure. The “Routing Protocol for low power and Lossy networks” (RPL) is the only de-facto standardized routing protocol in IoT networks and is thus deployed in environmental monitoring, healthcare, smart building, and many other IoT applications. In literature, we can find several attacks aiming to affect and disrupt RPLbased networks. Therefore, it is fundamental to develop security mechanisms that detect and mitigate any potential attack in RPL-based networks. Current state-of-the-art security solutions deal with very few attacks while introducing heavy mechanisms at the expense of IoT devices and the overall network performance.
In this work, we aim to develop an Intrusion Detection System (IDS) capable of dealing with multiple attacks while avoiding any RPL overhead. The proposed system is called DETONAR - DETector of rOutiNg Attacks in Rpl - and it relies on a packet sniffing approach. DETONAR uses a combination of signature
and anomaly-based rules to identify any malicious behavior in the traffic (e.g., application and DIO packets). To the best of our knowledge, there are no exhaustive datasets containing RPL traffic for a vast range of attacks. To overcome this issue and evaluate our IDS, we propose RADAR - Routing Attacks DAtaset for Rpl: the dataset contains five simulations for each of the 14 considered attacks in 16 static-nodes networks. DETONAR’s attack detection exceeds 80% for 10 attacks out of 14, while maintaining false positives close to zero.

(keywords) Internet of Things, Low Power and Lossy Networks, Routing Protocol, Networking attacks, Intrusion Detection System
 @article{detonar-ieetnsm2021,
author = {Agiollo, Andrea and Conti, Mauro and Kaliyar, Pallavi and Lin, TsungNan and Pajola, Luca},
doi = {10.1109/TNSM.2021.3075496},
keywords = {Internet of Things, Low Power and Lossy Networks, Routing Protocol, Networking attacks, Intrusion Detection System},
journal = {IEEE Transactions on Network and Service Management},
pages = {1178 - 1190},
number = 2,
publisher = {IEEE},
title = {{DETONAR}: Detection of Routing Attacks in {RPL}-based {I}o{T}},
url = {https://ieeexplore.ieee.org/document/9415869},
volume = 18,
year = 2021

Riviste & collane

Tags:

Pubblicazione

— autori/autrici

Andrea Agiollo, Mauro Conti, Pallavi Kaliyar, TsungNan Lin, Luca Pajola

— stato

pubblicato

— tipo

articolo su rivista

Sede di pubblicazione

— rivista

IEEE Transactions on Network and Service Management

— volume

18

— numero

2

— pagine

1178–1190

— data di pubblicazione

2021

URL

pagina originale  |  PDF originale

Identificatori

— DOI

10.1109/TNSM.2021.3075496

— IEEE

9415869

— IRIS

11585/842654

— WoS / ISI

000660636700006

— print ISSN

1932-4537

BibTeX

— BibTeX ID
detonar-ieetnsm2021
— BibTeX category
article

Partita IVA: 01131710376 - Copyright © 2008-2022 APICe@DISI Research Group - PRIVACY