{"title":"Sketch Based Anomaly Detection Scheme in Wireless Sensor Networks","authors":"Guorui Li, Y. Wang","doi":"10.1109/CyberC.2013.66","DOIUrl":null,"url":null,"abstract":"The constrained capacity of wireless sensor nodes and harsh, unattended deploy environments make the data collected by sensor nodes usually unreliable. In this paper, we propose a sketch based anomaly detection scheme in order to detect the anomaly data values. It first partitions the whole sensor network into several clusters in which the cluster members are physically adjacent and data correlated. Then, the cluster header collects the count-min sketch of each cluster member and compares it with its own sketch in the form of kullback-leibler divergence. The experiment shows that the proposed anomaly detection scheme can provide a high detection accuracy ratio and a low false alarm ratio.","PeriodicalId":133756,"journal":{"name":"2013 International Conference on Cyber-Enabled Distributed Computing and Knowledge Discovery","volume":"9 3 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2013-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"5","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"2013 International Conference on Cyber-Enabled Distributed Computing and Knowledge Discovery","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/CyberC.2013.66","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 5
Abstract
The constrained capacity of wireless sensor nodes and harsh, unattended deploy environments make the data collected by sensor nodes usually unreliable. In this paper, we propose a sketch based anomaly detection scheme in order to detect the anomaly data values. It first partitions the whole sensor network into several clusters in which the cluster members are physically adjacent and data correlated. Then, the cluster header collects the count-min sketch of each cluster member and compares it with its own sketch in the form of kullback-leibler divergence. The experiment shows that the proposed anomaly detection scheme can provide a high detection accuracy ratio and a low false alarm ratio.