{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,18]],"date-time":"2026-07-18T13:53:12Z","timestamp":1784382792792,"version":"3.55.0"},"reference-count":51,"publisher":"MDPI AG","issue":"21","license":[{"start":{"date-parts":[[2020,10,27]],"date-time":"2020-10-27T00:00:00Z","timestamp":1603756800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100011665","name":"Deanship of Scientific Research, King Saud University","doi-asserted-by":"publisher","award":["G-1439-021"],"award-info":[{"award-number":["G-1439-021"]}],"id":[{"id":"10.13039\/501100011665","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>In this paper, we investigate the problem of selective routing attack in wireless sensor networks by considering a novel threat, named the upstream-node effect, which limits the accuracy of the monitoring functions in deciding whether a monitored node is legitimate or malicious. To address this limitation, we propose a one-dimensional one-class classifier, named relaxed flow conservation constraint, as an intrusion detection scheme to counter the upstream node attack. Each node uses four types of relaxed flow conservation constraints to monitor all of its neighbors. Three constraints are applied by using one-hop knowledge, and the fourth one is calculated by monitoring two-hop information. The latter is obtained by proposing two-hop energy-efficient and secure reporting scheme. We theoretically analyze the security and performance of the proposed intrusion detection method. We also show the superiority of relaxed flow conservation constraint in defending against upstream node attack compared to other schemes. The simulation results show that the proposed intrusion detection system achieves good results in terms of detection effectiveness.<\/jats:p>","DOI":"10.3390\/s20216106","type":"journal-article","created":{"date-parts":[[2020,10,27]],"date-time":"2020-10-27T09:22:45Z","timestamp":1603790565000},"page":"6106","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":10,"title":["Two-Hop Monitoring Mechanism Based on Relaxed Flow Conservation Constraints against Selective Routing Attacks in Wireless Sensor Networks"],"prefix":"10.3390","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6498-1528","authenticated-orcid":false,"given":"Abdelouahid","family":"Derhab","sequence":"first","affiliation":[{"name":"Center of Excellence in Information Assurance (CoEIA), King Saud University, Riyadh 11451, Saudi Arabia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1372-9725","authenticated-orcid":false,"given":"Abdelghani","family":"Bouras","sequence":"additional","affiliation":[{"name":"Department of Industrial Engineering, College of Engineering, Alfaisal University, Riyadh 11533, Saudi Arabia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9412-1959","authenticated-orcid":false,"given":"Mohamed","family":"Belaoued","sequence":"additional","affiliation":[{"name":"LICUS Laboratory, Department of Computer Science, University of 20 August 1955, Skikda 21000, Algeria"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5360-9782","authenticated-orcid":false,"given":"Leandros","family":"Maglaras","sequence":"additional","affiliation":[{"name":"School of Computer Science and Informatics, De Montfort University, Leicester LE1 9BH, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7023-7172","authenticated-orcid":false,"given":"Farrukh Aslam","family":"Khan","sequence":"additional","affiliation":[{"name":"Center of Excellence in Information Assurance (CoEIA), King Saud University, Riyadh 11451, Saudi Arabia"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2020,10,27]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"393","DOI":"10.1016\/S1389-1286(01)00302-4","article-title":"Wireless sensor networks: A survey","volume":"38","author":"Akyildiz","year":"2002","journal-title":"Comput. Netw."},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Becher, A., Benenson, Z., and Dornseif, M. (2006, January 18\u201321). Tampering with motes: Real-world physical attacks on wireless sensor networks. Proceedings of the Third international Conference on Security in Pervasive Computing (SPC\u201906), York, UK.","DOI":"10.1007\/11734666_9"},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"21947","DOI":"10.1007\/s11042-017-5540-x","article-title":"Malicious insiders attack in IoT based multi-cloud e-healthcare environment: A systematic literature review","volume":"77","author":"Ahmed","year":"2018","journal-title":"Multimed. Tools Appl."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"33","DOI":"10.1007\/s10916-014-0033-1","article-title":"A broadcast-based key agreement scheme using set reconciliation for wireless body area networks","volume":"38","author":"Ali","year":"2014","journal-title":"J. Med. Syst."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"28956","DOI":"10.1109\/ACCESS.2020.2971024","article-title":"Two-Factor Mutual Authentication Offloading for Mobile Cloud Computing","volume":"8","author":"Derhab","year":"2020","journal-title":"IEEE Access"},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"608162","DOI":"10.1155\/2014\/608162","article-title":"Fortifying intrusion detection systems in dynamic Ad Hoc and wireless sensor networks","volume":"10","author":"Derhab","year":"2014","journal-title":"Int. J. Distrib. Sens. Netw."},{"key":"ref_7","first-page":"201","article-title":"Lightweight Anomaly-based Intrusion Detection System for Multi-feature Traffic in Wireless Sensor Networks","volume":"30","author":"Derhab","year":"2016","journal-title":"Ad Hoc Sens. Wirel. Netw."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"444","DOI":"10.1016\/j.future.2018.09.022","article-title":"Toward an optimal solution against denial of service attacks in software defined networks","volume":"92","author":"Imran","year":"2019","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Derhab, A., Guerroumi, M., Gumaei, A., Maglaras, L., Ferrag, M.A., Mukherjee, M., and Khan, F.A. (2019). Blockchain and random subspace learning-based IDS for SDN-enabled industrial IoT security. Sensors, 19.","DOI":"10.3390\/s19143119"},{"key":"ref_10","unstructured":"Ioannis, K., Dimitriou, T., and Freiling, F.C. (2007, January 1\u20134). Towards intrusion detection in wireless sensor networks. Proceedings of the 13th European Wireless Conference, Paris, France."},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"da Silva, A.P.R., Martins, M.H.T., Rocha, B.P.S., Loureiro, A.A.F., Ruiz, L.B., and Wong, H.C. (2005, January 13). Decentralized intrusion detection in wireless sensor networks. Proceedings of the 1st ACM International Workshop on Quality of Service & Security in Wireless and Mobile Networks (Q2SWinet\u201905), Montreal, QC, Canada.","DOI":"10.1145\/1089761.1089765"},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Stetsko, A., Folkman, L., and Matyas, V. (2010, January 20\u201325). Neighbor-based intrusion detection for wireless sensor networks. Proceedings of the 6th International Conference on Wireless and Mobile Communications (ICWMC), Valencia, Spain.","DOI":"10.1109\/ICWMC.2010.61"},{"key":"ref_13","unstructured":"Yu, B., and Xiao, B. (2006, January 25\u201329). Detecting selective forwarding attacks in wireless sensor networks. Proceedings of the 20th International on Parallel and Distributed Processing Symposium (IPDPS 2006), Rhodes Island, Greece."},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Kaplantzis, S., Shilton, A., Mani, N., and Sekercioglu, Y. (2007, January 3\u20136). Detecting Selective Forwarding Attacks in Wireless Sensor Networks using Support Vector Machines. Proceedings of the 3rd International Conference on Intelligent Sensors, Sensor Networks and Information, (ISSNIP 2007), Melbourne, Australia.","DOI":"10.1109\/ISSNIP.2007.4496866"},{"key":"ref_15","unstructured":"Wang, X.-S., Zhan, Y.-Z., Xiong, S.-M., and Wang, L.-M. (2009, January 10\u201311). Lightweight defense scheme against selective forwarding attacks in wireless sensor networks. Proceedings of the International Conference on Cyber-Enabled Distributed Computing and Knowledge Discovery (CyberC \u201909), Zhangjiajie, China."},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Brown, J., and Du, X. (2008, January 19\u201323). Detection of Selective Forwarding Attacks in Heterogeneous Sensor Networks. Proceedings of the IEEE International Conference on Communications (ICC \u201908), Beijing, China.","DOI":"10.1109\/ICC.2008.306"},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"1218","DOI":"10.1016\/j.jpdc.2007.04.014","article-title":"CHEMAS: Identify suspect nodes in selective forwarding attacks","volume":"67","author":"Xiao","year":"2007","journal-title":"J. Parallel Distrib. Comput."},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Li, G., Liu, X., and Wang, C. (2010, January 10\u201312). A sequential mesh test based selective forwarding attack detection scheme in wireless sensor networks. Proceedings of the International Conference on Networking, Sensing and Control (ICNSC), Chicago, IL, USA.","DOI":"10.1109\/ICNSC.2010.5461599"},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Reddy, Y.B., and Srivathsan, S. (2009, January 24\u201326). Game theory model for selective forward attacks in wireless sensor networks. Proceedings of the 2009 17th Mediterranean Conference on Control and Automation, Thessaloniki, Greece.","DOI":"10.1109\/MED.2009.5164584"},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Deng, H., Sun, X., Wang, B., and Cao, Y. (2009, January 8\u20139). Selective forwarding attack detection using watermark in WSNs. Proceedings of the ISECS International Colloquium on Computing, Communication, Control, and Management (CCCM 2009), Sanya, China.","DOI":"10.1109\/CCCM.2009.5268016"},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"yin Zhang, D., Xu, C., and Siyuan, L. (2011, January 9\u201311). Detecting selective forwarding attacks in WSNs using watermark. Proceedings of the International Conference on Wireless Communications and Signal Processing (WCSP), Nanjing, China.","DOI":"10.1109\/WCSP.2011.6096939"},{"key":"ref_22","unstructured":"Mukherjee, S., Chattopadhyay, M., Chattopadhyay, S., Bose, P., and Bakshi, A. (December, January 30). Detection of selective forwarding attack in wireless ad hoc networks using binary search. Proceedings of the Third International Conference on Emerging Applications of Information Technology (EAIT), Kolkata, India."},{"key":"ref_23","unstructured":"Onat, I., and Miri, A. (2005, January 22\u201324). An intrusion detection system for wireless sensor networks. Proceedings of the IEEE International Conference on Wireless and Mobile Computing, Networking and Communications (WiMob\u20192005), Montreal, QC, Canada."},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Bagaa, M., Derhab, A., Lasla, N., Ouadjaout, A., and Badache, N. (2012, January 25\u201330). Semi-structured and unstructured data aggregation scheduling in wireless sensor networks. Proceedings of the 2012 IEEE INFOCOM, Orlando, FL, USA.","DOI":"10.1109\/INFCOM.2012.6195676"},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"331","DOI":"10.1016\/j.comnet.2014.10.018","article-title":"Intertwined path formation and MAC scheduling for fast delivery of aggregated data in WSN","volume":"75","author":"Bagaa","year":"2014","journal-title":"Comput. Netw."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/2744198","article-title":"Distributed low-latency data aggregation scheduling in wireless sensor networks","volume":"11","author":"Bagaa","year":"2015","journal-title":"ACM Trans. Sens. Netw. (TOSN)"},{"key":"ref_27","unstructured":"Wang, Y., Wong, J., and Miner, A. (2004, January 10\u201311). Anomaly intrusion detection using one class SVM. Proceedings of the Fifth Annual IEEE SMC Information Assurance Workshop, West Point, NY, USA."},{"key":"ref_28","unstructured":"Karlof, C., and Wagner, D. (2003, January 11). Secure routing in wireless sensor networks: Attacks and countermeasures. Proceedings of the IEEE International Workshop on Sensor Network Protocols and Applications, Anchorage, AK, USA."},{"key":"ref_29","first-page":"63","article-title":"The sequential mesh test for a proportion","volume":"1","author":"Yan","year":"2006","journal-title":"J. East China Norm. Univ."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"58","DOI":"10.5573\/IEIESPC.2020.9.1.058","article-title":"DSLA: Defending against Selective Forwarding Attack in Wireless Sensor Networks using Learning Automaton","volume":"9","author":"Jamshidi","year":"2020","journal-title":"IEIE Trans. Smart Process. Comput."},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Fu, H., Liu, Y., Dong, Z., and Wu, Y. (2020). A Data Clustering Algorithm for Detecting Selective Forwarding Attack in Cluster-Based Wireless Sensor Networks. Sensors, 20.","DOI":"10.3390\/s20010023"},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"1313","DOI":"10.1007\/s10586-017-1622-9","article-title":"Detection and prevention of black hole and selective forwarding attack in clustered WSN with Active Trust","volume":"22","author":"Mehetre","year":"2019","journal-title":"Clust. Comput."},{"key":"ref_33","doi-asserted-by":"crossref","first-page":"77","DOI":"10.1145\/959060.959074","article-title":"Distributed deviation detection in sensor networks","volume":"32","author":"Palpanas","year":"2003","journal-title":"SIGMOD Rec."},{"key":"ref_34","unstructured":"Subramaniam, S., Palpanas, T., Papadopoulos, D., Kalogeraki, V., and Gunopulos, D. (2006, January 12\u201315). Online outlier detection in sensor data using non-parametric models. Proceedings of the 32nd International Conference on Very Large Data Bases, Seoul, Korea."},{"key":"ref_35","unstructured":"Khan, S.S., and Madden, M.G. (2009, January 19\u201321). A survey of recent trends in one class classification. Proceedings of the 20th Irish Conference on Artificial Intelligence and Cognitive Science (AICS\u201909), Dublin, Ireland."},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Tax, D.M.J., and Juszczak, P. (2002, January 10). Kernel Whitening for One-Class Classification. Proceedings of the First International Workshop on Pattern Recognition with Support Vector Machines (SVM\u201902), Niagara Falls, Canada, ON.","DOI":"10.1007\/3-540-45665-1_4"},{"key":"ref_37","doi-asserted-by":"crossref","unstructured":"Lin, S., Zhou, G., Whitehouse, K., Wu, Y., Stankovic, J.A., and He, T. (2009, January 1\u20134). Towards Stable Network Performance in Wireless Sensor Networks. Proceedings of the IEEE Real-Time Systems Symposium (RTSS), Washington, DC, USA.","DOI":"10.1109\/RTSS.2009.19"},{"key":"ref_38","doi-asserted-by":"crossref","unstructured":"Burri, N., von Rickenbach, P., and Wattenhofer, R. (2007, January 25\u201327). Dozer: Ultra-low power data gathering in sensor network. Proceedings of the 6th International Conference on Information Processing in Sensor Networks (IPSN), Cambridge, MA, USA.","DOI":"10.1145\/1236360.1236417"},{"key":"ref_39","doi-asserted-by":"crossref","unstructured":"Musaloiu-E, R., Liang, C.J.M., and Terzis, A. (2008, January 22\u201324). Koala: Ultra-Low Power Data Retrieval in Wireless Sensor Networks. Proceedings of the 7th international Conference on information Processing in Sensor Networks (IPSN), St. Louis, MO, USA.","DOI":"10.1109\/IPSN.2008.10"},{"key":"ref_40","doi-asserted-by":"crossref","unstructured":"Colesanti, U.M., Santiniy, S., and Vitaletti, A. (2011, January 27\u201329). Dissense: An adaptive ultralow-power communication protocol for wireless sensor networks. Proceedings of the 7th IEEE International Conference on Distributed Computing in Sensor Systems (DCOSS 2011), Barcelona, Spain.","DOI":"10.1109\/DCOSS.2011.5982162"},{"key":"ref_41","first-page":"297","article-title":"Practical Efficiency of Maximum Flow Algorithms Using MA Orderings and Preflows","volume":"48","author":"Matsuoka","year":"2005","journal-title":"J. Oper. Res. Soc. Jpn."},{"key":"ref_42","unstructured":"Cormen, T.H., Leiserson, C.E., Rivest, R.L., and Stein, C. (2009). Introduction to Algorithms, MIT Press. [3rd ed.]."},{"key":"ref_43","doi-asserted-by":"crossref","unstructured":"Lasla, N., Derhab, A., Ouadjaout, A., Bagaa, M., and Challal, Y. (2014, January 22\u201327). SMART: Secure Multi-pAths Routing for wireless sensor neTworks. Proceedings of the 13th International Conference on Ad-Hoc, Mobile, and Wireless Networks (ADHOC-NOW), Benidorm, Spain.","DOI":"10.1007\/978-3-319-07425-2_25"},{"key":"ref_44","doi-asserted-by":"crossref","first-page":"50","DOI":"10.1145\/961268.961287","article-title":"Topology Properties of Ad Hoc Networks with Random Waypoint Mobility","volume":"7","author":"Bettstetter","year":"2003","journal-title":"ACM Sigmobile Mob. Comput. Commun. Rev."},{"key":"ref_45","doi-asserted-by":"crossref","unstructured":"Farhadi, G., and Beaulieu, N.C. (2006, January 11\u201315). On the Connectivity and Average Delay of Mobile Ad Hoc Networks. Proceedings of the IEEE International Conference on Communications (ICC 2006), Istanbul, Turkey.","DOI":"10.1109\/ICC.2006.255675"},{"key":"ref_46","doi-asserted-by":"crossref","unstructured":"Vellore, P., Gillard, P., and Venkatesan, R. (December, January 30). Probability Distribution of Multi-Hop Multipath connection in a Random Network. Proceedings of the IEEE Global Telecommunications Conference (GLOBECOM 2009), Honolulu, HI, USA.","DOI":"10.1109\/GLOCOM.2009.5425384"},{"key":"ref_47","unstructured":"Heinzelman, W., Chandrakasan, A., and Balakrishnan, H. (2000, January 7). Energy-efficient communication protocols for wireless microsensor networks. Proceedings of the Hawaii International Conference on System Sciences, Maui, HI, USA."},{"key":"ref_48","doi-asserted-by":"crossref","first-page":"260","DOI":"10.1016\/j.sysarc.2012.12.003","article-title":"Informer homed routing fault tolerance mechanism for wireless sensor networks","volume":"59","author":"Qiu","year":"2013","journal-title":"J. Syst. Archit."},{"key":"ref_49","doi-asserted-by":"crossref","unstructured":"Zeng, X., Bagrodia, R., and Gerla, M. (1998, January 29). GloMoSim: A library for parallel simulation of large-scale wireless networks. Proceedings of the 12th Workshop on Parallel and Distributed Simulation (PADS), Banff, AB, Canada.","DOI":"10.1145\/278009.278027"},{"key":"ref_50","unstructured":"Sakellariou, I. (2020, October 19). An Attempt to Simulate FIPA ACL Message Passing in NetLogo. Available online: http:\/\/users.uom.gr\/~iliass\/projects\/NetLogo\/FIPA_ACL_MessagesInNetLogo.pdf."},{"key":"ref_51","unstructured":"(2020, October 19). Two-Hop IDS WSN Dataset. Available online: https:\/\/fac.ksu.edu.sa\/abderhab\/announcement\/333117."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/20\/21\/6106\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T10:29:09Z","timestamp":1760178549000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/20\/21\/6106"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,10,27]]},"references-count":51,"journal-issue":{"issue":"21","published-online":{"date-parts":[[2020,11]]}},"alternative-id":["s20216106"],"URL":"https:\/\/doi.org\/10.3390\/s20216106","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,10,27]]}}}