{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,12]],"date-time":"2025-10-12T04:30:36Z","timestamp":1760243436170,"version":"build-2065373602"},"reference-count":31,"publisher":"MDPI AG","issue":"4","license":[{"start":{"date-parts":[[2013,3,25]],"date-time":"2013-03-25T00:00:00Z","timestamp":1364169600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/3.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Sensor nodes in wireless sensor networks are easily exposed to open and unprotected regions. A security solution is strongly recommended to prevent networks against malicious attacks. Although many intrusion detection systems have been developed, most systems are difficult to implement for the sensor nodes owing to limited computation resources. To address this problem, we develop a novel distributed network intrusion detection system based on theWu\u2013Manber algorithm. In the proposed system, the algorithm is divided into two steps; the first step is dedicated to a sensor node, and the second step is assigned to a base station. In addition, the first step is modified to achieve efficient performance under limited computation resources. We conduct evaluations with random string sets and actual intrusion signatures to show the performance improvement of the proposed method. The proposed method achieves a speedup factor of 25.96 and reduces 43.94% of packet transmissions to the base station compared with the previously proposed method. The system achieves efficient utilization of the sensor nodes and provides a structural basis of cooperative systems among the sensors.<\/jats:p>","DOI":"10.3390\/s130403998","type":"journal-article","created":{"date-parts":[[2013,3,26]],"date-time":"2013-03-26T04:34:12Z","timestamp":1364272452000},"page":"3998-4016","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":13,"title":["A Distributed Signature Detection Method for Detecting Intrusions in Sensor Systems"],"prefix":"10.3390","volume":"13","author":[{"given":"Ilkyu","family":"Kim","sequence":"first","affiliation":[{"name":"School of Electrical and Electronic Engineering, Yonsei University, Seoul 120-749, Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Doohwan","family":"Oh","sequence":"additional","affiliation":[{"name":"School of Electrical and Electronic Engineering, Yonsei University, Seoul 120-749, Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Myung","family":"Yoon","sequence":"additional","affiliation":[{"name":"School of Electrical and Electronic Engineering, Yonsei University, Seoul 120-749, Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kyueun","family":"Yi","sequence":"additional","affiliation":[{"name":"Software Platform R&D Laboratory, LG Electronics Inc., Seoul 137-130, Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Won","family":"Ro","sequence":"additional","affiliation":[{"name":"School of Electrical and Electronic Engineering, Yonsei University, Seoul 120-749, Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2013,3,25]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"56","DOI":"10.1109\/MWC.2007.4396943","article-title":"Intrusion detection techniques in mobile ad hoc and wireless sensor networks","volume":"14","author":"Sun","year":"2007","journal-title":"IEEE Wirel. Commun."},{"key":"ref_2","first-page":"16","article-title":"Users make a Beeline for ZigBee sensor technology","volume":"38","author":"Geer","year":"2005","journal-title":"Computer"},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"545","DOI":"10.1023\/A:1024600519144","article-title":"Intrusion detection techniques for mobile wireless networks","volume":"9","author":"Zhang","year":"2003","journal-title":"Wirel. Netw."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"468","DOI":"10.1016\/j.comcom.2010.04.008","article-title":"Pattern recognition for detecting distributed node exhaustion attacks in wireless sensor networks","volume":"34","author":"Baig","year":"2011","journal-title":"Comput. Commun."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"1302","DOI":"10.1016\/j.jnca.2011.03.004","article-title":"Anomaly detection in wireless sensor networks: A survey","volume":"34","author":"Xie","year":"2011","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"54","DOI":"10.1109\/MC.2002.1039518","article-title":"Denial of service in sensor networks","volume":"35","author":"Wood","year":"2002","journal-title":"Computer"},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"15:1","DOI":"10.1145\/1541880.1541882","article-title":"Anomaly detection: A survey","volume":"41","author":"Chandola","year":"2009","journal-title":"ACM Comput. Surv."},{"key":"ref_8","unstructured":"Bahrepour, M., Zhang, Y., Meratnia, N., and Havinga, P. (December, January 7\u2013). Use of Event Detection Approaches for Outlier Detection in Wireless Sensor Networks. Melbourne, Australia."},{"key":"ref_9","unstructured":"Coit, C., Staniford, S., and McAlerney, J. (June, January 12\u2013). Towards Faster String Matching for Intrusion Detection or Exceeding the Speed of Snort. Anaheim, CA, USA."},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"222","DOI":"10.1109\/TSE.1987.232894","article-title":"An intrusion-detection model","volume":"SE-13","author":"Denning","year":"1987","journal-title":"IEEE Trans. Softw. Eng."},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"5989","DOI":"10.3390\/s90805989","article-title":"Intrusion-aware alert validation algorithm for cooperative distributed intrusion detection schemes of wireless sensor networks","volume":"9","author":"Shaikh","year":"2009","journal-title":"Sensors"},{"key":"ref_12","unstructured":"Szor, P. (2005). The Art of Computer Virus Research and Defense, Addison-Wesley Professional: Indianapolis."},{"key":"ref_13","unstructured":"Cheng, S.T., Li, S.-Y., and Chen, C.M. (May, January 14\u2013). Distributed Detection in Wireless Sensor Networks. Portland, OR, USA."},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"3447","DOI":"10.3390\/s90503447","article-title":"RIDES: Robust intrusion detection system for IP-based ubiquitous sensor networks","volume":"9","author":"Amin","year":"2009","journal-title":"Sensors"},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"15","DOI":"10.1109\/MNET.2011.5772056","article-title":"Packet traffic: A good data source for wireless sensor network modeling and anomaly detection","volume":"25","author":"Wang","year":"2011","journal-title":"IEEE Netw."},{"key":"ref_16","unstructured":"Martynov, D., Roman, J., Vaidya, S., and Fu, H. (May, January 17\u2013). Design and Implementation of an Intrusion Detection System for Wireless Sensor Networks. Chicago, IL, USA."},{"key":"ref_17","unstructured":"Amin, S., Young, Y.J., Siddiqui, M., and Hong, C.S. (January, January 20\u2013). A Novel Intrusion Detection Framework for IP-Based Sensor Networks. Chiang Mai, Thailand."},{"key":"ref_18","unstructured":"Wang, Q., and Zhang, T. (May, January 21\u2013). Detecting Anomaly Node Behavior in Wireless Sensor Networks. Niagara Falls, Canada."},{"key":"ref_19","unstructured":"Norton, M., and Roelker, D. (2004). Snort 2.0: Hi-Performance Multi-Rule Inspection Engine, Sourcefire Network Security Inc."},{"key":"ref_20","unstructured":"Zaidi, A., Agoulmine, N., and Kenaza, T. (July, January 26\u2013). Piecewise Classification of Attack Patterns for Efficient Network Intrusion Detection. Athens, Greece."},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"1750","DOI":"10.1016\/j.comcom.2011.03.014","article-title":"A fast pattern matching algorithm with multi-byte search unit for high-speed network security","volume":"34","author":"Choi","year":"2011","journal-title":"Comput. Commun."},{"key":"ref_22","unstructured":"Wu, S., and Manber, U. (1994). A Fast Algorithm for Multi-Pattern Searching, University of Arizona. TR-94-17."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"762","DOI":"10.1145\/359842.359859","article-title":"A fast string searching algorithm","volume":"20","author":"Boyer","year":"1977","journal-title":"ACM Commun."},{"key":"ref_24","unstructured":"Antonatos, S., Polychronakis, M., Akritidis, P., Anagnostakis, K., and Markatos, E. (1, January 30). Piranha: Fast and Memory-Efficient Pattern Matching for Intrusion Detection. Chiba, Japan."},{"key":"ref_25","unstructured":"Sy, D., and Bao, L. (April, January 19\u2013). CAPTRA: Coordinated Packet Traceback. Nashville, TN, USA."},{"key":"ref_26","unstructured":"Kim, I.Y., and Kim, K.C. (November, January 11\u2013). A Resource-Efficient IP Traceback Technique for Mobile Ad-hoc Networks Based on Time-Tagged Bloom Filter. Busan, Korea."},{"key":"ref_27","unstructured":"Roesch, M. (1999). Proceedings of the 13th USENIX conference on System Administration."},{"key":"ref_28","unstructured":"Zoumboulakis, M., and Roussos, G. (June, January 22\u2013). Efficient Pattern Detection in Extremely Resource-Constrained Devices. Rome, Italy."},{"key":"ref_29","unstructured":"PCRE: Perl Compatible Regular Expression. Available online: http:\/\/www.pcre.org\/."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"249","DOI":"10.1147\/rd.312.0249","article-title":"Efficient randomized pattern-matching algorithms","volume":"31","author":"Karp","year":"1987","journal-title":"IBM J. Res. Dev."},{"key":"ref_31","unstructured":"Polastre, J., Szewczyk, R., and Culler, D. (April, January 25\u2013). Telos: Enabling Ultra-low Power Wireless Research. Los Angeles, CA, USA."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/13\/4\/3998\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T21:45:44Z","timestamp":1760219144000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/13\/4\/3998"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013,3,25]]},"references-count":31,"journal-issue":{"issue":"4","published-online":{"date-parts":[[2013,4]]}},"alternative-id":["s130403998"],"URL":"https:\/\/doi.org\/10.3390\/s130403998","relation":{},"ISSN":["1424-8220"],"issn-type":[{"type":"electronic","value":"1424-8220"}],"subject":[],"published":{"date-parts":[[2013,3,25]]}}}