Detection of IP Spoofing attack based on RSS spatial correlation in wireless network

Computer Engineering

IP spoofing-based flooding attacks are a open and serious security problem on the current Internet. The best current anti-spoofing practices have been implemented long in modern routers. The proposed system detect the spoofing attacks using the spatial correlation of Received Signal Strength (RSS) inherited from wireless nodes. Then it determines the problem of determining the number of attackers as a multiclass detection problem. Cluster-based mechanisms are developed to determine the number of attackers to achieve monotonically increasing deployment incentives for all types of spoofing attacks, and the system design is lightweight and practical.GADE: A Generalized Attack Detection Model (GADE) that can both determine the number of adversaries using cluster analysis methods and detect spoofing attacks grounded on RSS among normal devices and adversaries IDOL: An Integrated Detection and Localization (IDOL) system that can detect both attacks and find the positions of multiple adversaries even when the adversaries vary their transmission power levels.

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.