Attack Scenarios Reconstruction and Paths of Packets Transfer Identification in Multihop Wireless Systems

We propose in this paper a framework for digital investigation of security incidents in multi-hop wireless systems. A cooperative observation network, composed of randomly distributed observer nodes, is set up to monitor nodes mobility, topology variation, and patterns of executed actions. A set of techniques to aggregate, merge, and analyze evidences is proposed to reconstruct potential attack scenarios and identify paths of packets transfer.