METHOD FOR DETECTING FLOODING ATTACK ON SENSOR AND MOBILE NETWORK

摘要

A method for detecting a flooding attack by using similar entropy in sensor and mobile networks is provided to be capable of offering a high detection rate and fast detection performance even with a small message sample through little calculation, thus economical loss is minimized. Basic detection is performed as follows. Similar entropy is calculated with respect to N messages sent from a node of a self area(S101). If new messages are received, new similar entropy is calculated together with the previously received messages(S102). The difference between two similar entropy values which are consecutively calculated is compared with a predetermined threshold value, and if the difference is bigger, a flooding attack is recognized and detected(S103).