An Efficient Hybrid IDS Deployment Architecture for Multi-Hop Clustered Wireless Sensor Networks

Deploying Intrusion Detection Systems (IDSs) is an essential way to enhance the security of Multi-hop Clustered Wireless Sensor Networks (MCWSNs). The conventional IDS deployment architectural designs show limitations in ensuring the security of MCWSNs due to the limited monitoring range of the nodes. This paper proposes an efficient IDS deployment architecture for MCWSNs. The architecture is a hybrid design, in which the cluster heads and the sink collaboratively act as IDS agents to monitor the entire network and perform intrusion detection. Based on the new architecture, this paper proposes a resource allocation model to optimally allocate resources among the IDS agents so that the network's security metric can be maximized. A comprehensive analytical framework is proposed to analyze the optimality of the model's solution, and an efficient computational approach is developed to obtain the optimal resource allocation strategy. Extensive numerical simulation and comparison studies are conducted to validate the proposed method.

Automated summary

This paper proposes a new IDS deployment architecture for enhancing the security of MCWSNs. The cluster heads and the sink act as IDS agents to monitor and detect intrusions in the entire network. A resource allocation model is introduced to optimize the allocation of resources among the IDS agents to maximize the network's security metric. Extensive simulation and comparison studies are conducted to validate the effectiveness of the proposed method.