IoT Approach to Detect and Analyze Sinkhole Attack Traces in the RPL Protocol

One of the main tasks within IoT networks is to extend the connectivity of everyday objects such as sensors, computers, televisions, and washing machines so that these objects can exchange information and make decisions that automate everyday tasks. However, many of these objects operate with limited processing, memory, and battery resources. Therefore, in recent years, communication protocols have been studied and proposed that can operate correctly in these types of systems. The most widely used standard for packet routing in systems with limited resources is known as routing protocol for low-power and lossy networks (RPL). One of the aspects that has been neglected in this protocol is security. However, one of the most damaging attacks on the network structure is the sinkhole attack, in which a malicious node is responsible for establishing new routes by modifying its range. In this way, nearby nodes believe they have found a better route and send their traffic through the malicious node. Therefore, this paper proposes an approach to analyze the traces and damages of the sinkhole attack and detect the misbehavior and impact of this attack on the RPL routing protocol, based on a statistical approach to several scenarios.