kaz29Вестник Казахстанско-Британского технического университетаHerald of the Kazakh-British Technical University1998-66882959-8109Казахстанско-Британский Технический Университет10.55452/1998-6688-2025-22-4-40-59kaz29-2279Research ArticleКОМПЬЮТЕРНЫЕ НАУКИCOMPUTER SCIENCEКОМПЛЕКСНАЯ МЕТОДИКА ВЫЯВЛЕНИЯ И АНАЛИЗА ИНЦИДЕНТОВ БЕЗОПАСНОСТИ В БЕСПРОВОДНЫХ СЕНСОРНЫХ СЕТЯХCOMPLEX TECHNIQUE FOR DETECTION AND ANALYSIS OF SECURITY INCIDENTS IN WIRELESS SENSOR NETWORKShttps://orcid.org/0000-0001-6345-5211ЖукабаеваТ. К.ZhukabayevaТ. К.

PhD, профессор

г. Астана 

PhD, Professor

Astana

zhukabayevatk@enu.kzhttps://orcid.org/0000-0001-9284-9797МарденовЕ. М.MardenovE. M.

магистр

г. Астана 

MSc

Astana

emardenov@gmail.comhttps://orcid.org/0009-0000-8401-5434ТанирбергеновА. Ж.ТanirbergenovA.

к.т.н., и.о. доцента

г. Астана 

PhD, acting Associate Professor

Astana

t.adilbek@mail.ruМеждународный научный комплекс «Астана»; Евразийский национальный университет им. Л.Н. ГумилеваКазахстанInternational Scientific Complex «Astana»; L.N. Gumilyov Eurasian National UniversityKazakhstanМеждународный научный комплекс «Астана»; Astana International UniversityКазахстанInternational Scientific Complex «Astana»; Astana International UniversityKazakhstanЕвразийский национальный университет им. Л.Н. ГумилеваКазахстанL.N. Gumilyov Eurasian National UniversityKazakhstan2025231220252244059Copyright © Жукабаева Т.К., Марденов Е.М., Танирбергенов А.Ж., 20252025Жукабаева Т.К., Марденов Е.М., Танирбергенов А.Ж.Zhukabayeva Т.К., Mardenov E.M., Тanirbergenov A.Данная работа распространяется под лицензией Creative Commons Attribution 4.0.This work is licensed under a Creative Commons Attribution 4.0 License.https://vestnik.kbtu.edu.kz/jour/article/view/2279

Статья посвящена вопросам киберфизической безопасности беспроводных сенсорных сетей (БСС). Современные БСС уязвимы к широкому классу атак, таких как sinkhole и wormhole-атаки, атаки «человек посередине», атаки подмены данных, универсальные сетевые атаки и др. На практике возможности по защите БСС от данного вида атак затруднены вследствие разнообразия возможных воздействий, узкоспециализированной направленности инфраструктуры и ограниченности ресурсов узлов сети. В настоящей статье предлагается комплексная методика выявления инцидентов безопасности в БСС для эффективного обнаружения атак и реагирования на инциденты, что позволит минимизировать потенциальный ущерб и обеспечить бесперебойную работу таких сетей. К элементам новизны методики относится ее комплексность, способность выявлять разнообразные киберфизические воздействия и обеспечивать высокую точность и полноту обнаружения инцидентов, учитывая распределенную структуру и динамику изменений в составе узлов БСС. Методика апробирована на фрагменте сети, функционирующей по протоколу ZigBee для контроля характеристик состояния атмосферного воздуха промышленного объекта, города. Разработанная методика будет способствовать повышению качества и своевременности обнаружения инцидентов безопасности в беспроводных сенсорных сетях, что позволит улучшить устойчивость сетей к внешним и внутренним злонамеренным воздействиям и предотвращать длительные перебои в работе инфраструктуры в случае успешных атак.

The article comprises issues of cyber-physical security of wireless sensor networks (WSN). Modern WSNs are vulnerable to a wide class of attacks, such as sinkhole and wormhole attacks, man-in-the-middle attacks, data substitution attacks, universal network attacks, etc. In practice, the ability to protect WSNs from this type of attacks is hampered by the variety of possible impacts, highly specialized focus of the infrastructure and limited resources of network nodes. This article proposes a comprehensive technique for identifying security incidents in WSNs for effective attack detection and incident response, which will minimize potential damage and ensure uninterrupted network operation. The novelty of the technique includes its complexity, the ability to identify various cyber-physical threats and ensure high accuracy and completeness of incident detection, taking into account the distributed structure and dynamics of changes in the composition of WSN nodes. The technique has been tested on a WSN fragment operating on the ZigBee protocol to monitor the characteristics of the atmospheric air of an industrial facility or a city. The developed technique will help improve the quality and timeliness of detecting security incidents in wireless sensor networks, which will enhance the resilience of networks to external and internal malicious influences and prevent long-term interruptions in the operation of the infrastructure in the event of successful attacks.

беспроводная сенсорная сетьинцидент безопасностивыявлениемоделированиеметодикаwireless sensor networksecurity incidentdetectionmodelingtechniqueРабота проводится в рамках AP23489127 «Модели и алгоритмы повышения защищенности киберфизических систем промышленного интернета вещей с использованием граничных вычислений».ReferencesAlansari, Z., Anuar, N.B., Kamsin, A., Belgaum, M.R. A systematic review of routing attacks detection in wireless sensor networks. PeerJ Computer Science, 8, e1135 (2022).Alansari, Z., Anuar, N.B., Kamsin, A., Belgaum, M.R. A systematic review of routing attacks detection in wireless sensor networks. PeerJ Computer Science, 8, e1135 (2022).Kaushal, K., Kaur, T. A survey on attacks of WSN and their security mechanisms. International Journal of Computer Applications, 118 (18) (2015).Kaushal, K., Kaur, T. A survey on attacks of WSN and their security mechanisms. International Journal of Computer Applications, 118 (18) (2015).Ali, A., Ming, Y., Chakraborty, S., Iram, S. A comprehensive survey on real-time applications of WSN. Future Internet, 9 (4), 77 (2017).Ali, A., Ming, Y., Chakraborty, S., Iram, S. A comprehensive survey on real-time applications of WSN. Future Internet, 9 (4), 77 (2017).Kamaruzzaman, M., Chandra, A. Integration of wireless sensor network in robotics. Machine Learning for Robotics Applications, 71–84 (2021).Kamaruzzaman, M., Chandra, A. Integration of wireless sensor network in robotics. Machine Learning for Robotics Applications, 71–84 (2021).Elsadig, M.A. Detection of denial-of-service attack in wireless sensor networks: A lightweight machine learning approach. IEEE Access, 11, 83537–83552 (2023).Elsadig, M.A. Detection of denial-of-service attack in wireless sensor networks: A lightweight machine learning approach. IEEE Access, 11, 83537–83552 (2023).Ismail, S., El Mrabet Z., Reza, H. An ensemble-based machine learning approach for cyber-attacks detection in wireless sensor networks. Applied Sciences, 13 (1), 30 (2022).Ismail, S., El Mrabet Z., Reza, H. An ensemble-based machine learning approach for cyber-attacks detection in wireless sensor networks. Applied Sciences, 13 (1), 30 (2022).Sharma, N., Kaushik, I., Agarwal, V.K., Bhushan, B., Khamparia, A. Attacks and security measures in wireless sensor network. Intelligent Data Analytics for Terror Threat Prediction: Architectures, Methodologies, Techniques and Applications, 237–268 (2021).Sharma, N., Kaushik, I., Agarwal, V.K., Bhushan, B., Khamparia, A. Attacks and security measures in wireless sensor network. Intelligent Data Analytics for Terror Threat Prediction: Architectures, Methodologies, Techniques and Applications, 237–268 (2021).Oztoprak, A., Hassanpour, R., Ozkan, A., Oztoprak, K. Security challenges, mitigation strategies, and future trends in wireless sensor networks: A review. ACM Computing Survey, 57 (4), 1–29 (2024).Oztoprak, A., Hassanpour, R., Ozkan, A., Oztoprak, K. Security challenges, mitigation strategies, and future trends in wireless sensor networks: A review. ACM Computing Survey, 57 (4), 1–29 (2024).Monjur, M.M.R., Heacock, J., Calzadillas, J., Mahmud, M.S., Roth, J., Mankodiya, K., Yu, Q. Hardware security in sensor and its networks. Frontiers in Sensors, 3, 850056 (2022).Monjur, M.M.R., Heacock, J., Calzadillas, J., Mahmud, M.S., Roth, J., Mankodiya, K., Yu, Q. Hardware security in sensor and its networks. Frontiers in Sensors, 3, 850056 (2022).Chen, Y.Y., Xu, B., Long, J. Information security assessment of wireless sensor networks based on bayesian attack graphs. Journal of Intelligent & Fuzzy Systems, 41 (3), 4511–4517 (2021).Chen, Y.Y., Xu, B., Long, J. Information security assessment of wireless sensor networks based on bayesian attack graphs. Journal of Intelligent & Fuzzy Systems, 41 (3), 4511–4517 (2021).Subasini, C.A., Karuppiah, S.P., Sheeba, A., Padmakala, S. Developing an attack detection framework for wireless sensor network- based healthcare applications using hybrid convolutional neural network. Transactions on Emerging Telecommunications Technologies, 32 (11), e4336 (2021).Subasini, C.A., Karuppiah, S.P., Sheeba, A., Padmakala, S. Developing an attack detection framework for wireless sensor network- based healthcare applications using hybrid convolutional neural network. Transactions on Emerging Telecommunications Technologies, 32 (11), e4336 (2021).Delwar, T.S., Aras, U., Mukhopadhyay, S., Kumar, A., Kshirsagar, U., Lee, Y., et al. The intersection of machine learning and wireless sensor network security for cyber-attack detection: a detailed analysis. Sensors, 24 (19), 6377 (2024).Delwar, T.S., Aras, U., Mukhopadhyay, S., Kumar, A., Kshirsagar, U., Lee, Y., et al. The intersection of machine learning and wireless sensor network security for cyber-attack detection: a detailed analysis. Sensors, 24 (19), 6377 (2024).Premkumar, M., Ashokkumar, S.R., Jeevanantham, V., Mohanbabu, G., AnuPallavi, S. Scalable and energy efficient cluster based anomaly detection against denial of service attacks in wireless sensor networks. Wireless Personal Communications, 129 (4), 2669–2691 (2023).Premkumar, M., Ashokkumar, S.R., Jeevanantham, V., Mohanbabu, G., AnuPallavi, S. Scalable and energy efficient cluster based anomaly detection against denial of service attacks in wireless sensor networks. Wireless Personal Communications, 129 (4), 2669–2691 (2023).Chen, N., Qiu, T., Daneshmand, M., Wu, D.O. Robust networking: Dynamic topology evolution learning for Internet of Things. ACM Transactions on Sensor Networks (TOSN),17 (3), 1–23 (2021).Chen, N., Qiu, T., Daneshmand, M., Wu, D.O. Robust networking: Dynamic topology evolution learning for Internet of Things. ACM Transactions on Sensor Networks (TOSN),17 (3), 1–23 (2021).Duan, G., Lv H., Wang H., Feng G., Li X. Practical cyber attack detection with continuous temporal graph in dynamic network system. IEEE Transactions on Information Forensics and Security (2024).Duan, G., Lv H., Wang H., Feng G., Li X. Practical cyber attack detection with continuous temporal graph in dynamic network system. IEEE Transactions on Information Forensics and Security (2024).Nguyen, V.L., Lin, P.C., Hwang, R.H. Energy depletion attacks in low power wireless networks. IEEE Access, 7, 51915–51932 (2019).Nguyen, V.L., Lin, P.C., Hwang, R.H. Energy depletion attacks in low power wireless networks. IEEE Access, 7, 51915–51932 (2019).Poornima, I.G.A., Paramasivan, B. Anomaly detection in wireless sensor network using machine learning algorithm. Computer Communications, 151, 331–337 (2020).Poornima, I.G.A., Paramasivan, B. Anomaly detection in wireless sensor network using machine learning algorithm. Computer Communications, 151, 331–337 (2020).Ayadi, A., Ghorbel, O., Obeid, A.M., Abid, M. Outlier detection approaches wireless sensor networks: A survey. Computer Networks, 129, 319–333 (2017).Ayadi, A., Ghorbel, O., Obeid, A.M., Abid, M. Outlier detection approaches wireless sensor networks: A survey. Computer Networks, 129, 319–333 (2017).Rajasegarar, S., Leckie, C., Palaniswami, M. Anomaly detection in wireless sensor networks. IEEE Wireless Communications, 15 (4), 34–40 (2008).Rajasegarar, S., Leckie, C., Palaniswami, M. Anomaly detection in wireless sensor networks. IEEE Wireless Communications, 15 (4), 34–40 (2008).Lakshmi, H.N., Anand, S., Sinha, S. Flooding attack in wireless sensor network-analysis and prevention. International Journal of Engineering and Advanced Technology, 8 (5), 1792–1796 (2019).Lakshmi, H.N., Anand, S., Sinha, S. Flooding attack in wireless sensor network-analysis and prevention. International Journal of Engineering and Advanced Technology, 8 (5), 1792–1796 (2019).Dubey, A., Meena, D., Gaur, S. A survey in hello flood attack in wireless sensor networks. International Journal of Engineering Research and Technology, 3, 1882–1887 (2014).Dubey, A., Meena, D., Gaur, S. A survey in hello flood attack in wireless sensor networks. International Journal of Engineering Research and Technology, 3, 1882–1887 (2014).Hu, Y.C., Perrig, A., Johnson, D.B. Wormhole attacks in wireless networks // IEEE Journal on Selected Areas in Communications, 24 (2), 370–380 (2006).Hu, Y.C., Perrig, A., Johnson, D.B. Wormhole attacks in wireless networks // IEEE Journal on Selected Areas in Communications, 24 (2), 370–380 (2006).Rehman, A.U., Rehman, S.U., Raheem, H. Sinkhole attacks in wireless sensor networks: A survey. Wireless Personal Communications, 106, 2291–2313 (2019).Rehman, A.U., Rehman, S.U., Raheem, H. Sinkhole attacks in wireless sensor networks: A survey. Wireless Personal Communications, 106, 2291–2313 (2019).Xiao, L., Greenstein, L.J., Mandayam, N.B., Trappe, W. Channel-based detection of sybil attacks in wireless networks. IEEE Transactions on Information Forensics and Security, 4 (3), 492–503 (2009).Xiao, L., Greenstein, L.J., Mandayam, N.B., Trappe, W. Channel-based detection of sybil attacks in wireless networks. IEEE Transactions on Information Forensics and Security, 4 (3), 492–503 (2009).de Oliveira, M.S., Steffen, V., de Francisco, A.C., Trojan, F. Integrated data envelopment analysis, multi-criteria decision making, and cluster analysis methods: Trends and perspectives. Decision Analytics Journal, 8, 100271 (2023).de Oliveira, M.S., Steffen, V., de Francisco, A.C., Trojan, F. Integrated data envelopment analysis, multi-criteria decision making, and cluster analysis methods: Trends and perspectives. Decision Analytics Journal, 8, 100271 (2023).Jiang, Y., Atif, Y., Ding, J. Cyber-physical systems security based on a cross-linked and correlated vulnerability database. International Conference on Critical Information Infrastructures Security (Cham: Springer International Publishing, 2019), pp. 71–82.Jiang, Y., Atif, Y., Ding, J. Cyber-physical systems security based on a cross-linked and correlated vulnerability database. International Conference on Critical Information Infrastructures Security (Cham: Springer International Publishing, 2019), pp. 71–82.Marsh, D.W., Baldwin, R.O., Mullins, B.E., Mills, R.F., Grimaila, M.R. A security policy language for wireless sensor networks. Journal of Systems and Software, 82 (1), 101–111 (2009).Marsh, D.W., Baldwin, R.O., Mullins, B.E., Mills, R.F., Grimaila, M.R. A security policy language for wireless sensor networks. Journal of Systems and Software, 82 (1), 101–111 (2009).Livani, M.A., Abadi, M. A PCA-based distributed approach for intrusion detection in wireless sensor networks. 2011 International Symposium on Computer Networks and Distributed Systems (CNDS) (IEEE, 2011), pp. 55–60.Livani, M.A., Abadi, M. A PCA-based distributed approach for intrusion detection in wireless sensor networks. 2011 International Symposium on Computer Networks and Distributed Systems (CNDS) (IEEE, 2011), pp. 55–60.Luo, T., Nagarajan, S.G. Distributed anomaly detection using autoencoder neural networks in WSN for IoT. 2018 IEEE International Conference on Communications (ICC) (IEEE, 2018), pp. 1–6.Luo, T., Nagarajan, S.G. Distributed anomaly detection using autoencoder neural networks in WSN for IoT. 2018 IEEE International Conference on Communications (ICC) (IEEE, 2018), pp. 1–6.John, A., Isnin, I.F.B., Madni, S.H.H., Faheem, M. Cluster-based wireless sensor network framework for denial-of-service attack detection based on variable selection ensemble machine learning algorithms. Intelligent Systems with Applications, 22, 200381 (2024).John, A., Isnin, I.F.B., Madni, S.H.H., Faheem, M. Cluster-based wireless sensor network framework for denial-of-service attack detection based on variable selection ensemble machine learning algorithms. Intelligent Systems with Applications, 22, 200381 (2024).Zahra, F., Jhanjhi, N.Z., Brohi, S.N., Khan, N.A., Masud, M., AlZain, M.A. Rank and wormhole attack detection model for RPL-based internet of things using machine learning. Sensors, 22 (18), 6765 (2022).Zahra, F., Jhanjhi, N.Z., Brohi, S.N., Khan, N.A., Masud, M., AlZain, M.A. Rank and wormhole attack detection model for RPL-based internet of things using machine learning. Sensors, 22 (18), 6765 (2022).Alghamdi, R., Bellaiche, M. A cascaded federated deep learning based framework for detecting wormhole attacks in IoT networks. Computers & Security, 125, 103014 (2023).Alghamdi, R., Bellaiche, M. A cascaded federated deep learning based framework for detecting wormhole attacks in IoT networks. Computers & Security, 125, 103014 (2023).Zhukabayeva, T., et al. A traffic analysis and node categorization-aware machine learning-integrated framework for cybersecurity intrusion detection and prevention of WSNs in smart grids. IEEE Access, 2024.Zhukabayeva, T., et al. A traffic analysis and node categorization-aware machine learning-integrated framework for cybersecurity intrusion detection and prevention of WSNs in smart grids. IEEE Access, 2024.Adamova, A., Zhukabayeva, T., Mardenov, Y. Machine learning in action: An analysis of its application for fault detection in wireless sensor networks. 2023 IEEE International Conference on Smart Information Systems and Technologies (SIST) (IEEE, 2023), pp. 506–511.Adamova, A., Zhukabayeva, T., Mardenov, Y. Machine learning in action: An analysis of its application for fault detection in wireless sensor networks. 2023 IEEE International Conference on Smart Information Systems and Technologies (SIST) (IEEE, 2023), pp. 506–511.Mardenov, Y., Adamova, A., Zhukabayeva, T., Othman, M. Enhancing fault detection in wireless sensor networks through support vector machines: A comprehensive study. Journal of Robotics and Control (JRC), 4 (6), 868–877 (2023).Mardenov, Y., Adamova, A., Zhukabayeva, T., Othman, M. Enhancing fault detection in wireless sensor networks through support vector machines: A comprehensive study. Journal of Robotics and Control (JRC), 4 (6), 868–877 (2023).Zhukabayeva, T., Adamova, A., Karabayev, N., Mardenov, Y., Satybaldina, D. Comprehensive vulnerability analysis and penetration testing approaches in smart city ecosystems. 2024 8th International Symposium on Innovative Approaches in Smart Technologies (ISAS) (IEEE, 2024), pp. 1–6.Zhukabayeva, T., Adamova, A., Karabayev, N., Mardenov, Y., Satybaldina, D. Comprehensive vulnerability analysis and penetration testing approaches in smart city ecosystems. 2024 8th International Symposium on Innovative Approaches in Smart Technologies (ISAS) (IEEE, 2024), pp. 1–6.

The authors declare that there are no conflicts of interest present.