{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,10]],"date-time":"2026-09-10T05:10:11Z","timestamp":1789017011404,"version":"build-2803163510"},"reference-count":47,"publisher":"MDPI AG","issue":"18","license":[{"start":{"date-parts":[[2026,9,8]],"date-time":"2026-09-08T00:00:00Z","timestamp":1788825600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100007414","name":"Qassim University","doi-asserted-by":"crossref","award":["QU-APC-2026"],"award-info":[{"award-number":["QU-APC-2026"]}],"id":[{"id":"10.13039\/501100007414","id-type":"DOI","asserted-by":"crossref"}]},{"award":["QU-APC-2026"],"award-info":[{"award-number":["QU-APC-2026"]}],"id":[{"id":"https:\/\/ror.org\/01wsfe280","id-type":"ROR","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Wireless sensor networks (WSNs) play a critical role in cyber-physical applications such as industrial monitoring, environmental sensing, and critical infrastructure management. In these environments, security mechanisms must not only detect malicious activities but also explain how compromised measurements propagate through sensing, aggregation, and decision processes while operating under stringent resource constraints. Existing approaches typically address intrusion detection, trust management, provenance analysis, or blockchain-based integrity independently, providing limited support for integrated and explainable security. This paper presents PhyProvTrust-WSN, a physics-aware framework that combines physics-consistency validation, dynamic provenance graphs, evidence-based trust propagation, multi-factor risk fusion, and selective evidence anchoring to improve the transparency and auditability of secure sensor data aggregation. The framework models sensing, forwarding, aggregation, validation, and response events as a bounded provenance directed acyclic graph (DAG), enabling causal tracing of suspicious activities while maintaining low memory and communication overhead. A weighted risk fusion mechanism integrates anomaly evidence, domain-consistency assessment, trust evolution, and inherited provenance risk to support explainable security decisions. Rather than continuously recording all events, only high-risk or decision-relevant evidence hashes are anchored to a permissioned audit layer, reducing storage and communication costs. To avoid overclaiming, the proposed framework is evaluated using a hybrid methodology that combines attack-labeled WSN datasets, real sensor measurements for physics-consistency validation, and simulation-based overhead analysis. The results demonstrate that the integrated framework provides strong detection capability while improving explainability, supporting root-cause analysis, and maintaining bounded communication and storage overhead suitable for resource-constrained WSN deployments.<\/jats:p>","DOI":"10.3390\/s26185695","type":"journal-article","created":{"date-parts":[[2026,9,8]],"date-time":"2026-09-08T13:46:33Z","timestamp":1788875193000},"page":"5695","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["A Provenance-Driven Trust Framework with Physics-Consistent Validation for Secure Wireless Sensor Networks"],"prefix":"10.3390","volume":"26","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9204-7193","authenticated-orcid":false,"given":"Eman","family":"Abouelkheir","sequence":"first","affiliation":[{"name":"Department of Information Technology, College of Computer, Qassim University, Buraidah 51411, Saudi Arabia"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2026,9,8]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"102","DOI":"10.1109\/MCOM.2002.1024422","article-title":"A survey on sensor networks","volume":"40","author":"Akyildiz","year":"2002","journal-title":"IEEE Commun. Mag."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"2292","DOI":"10.1016\/j.comnet.2008.04.002","article-title":"Wireless sensor network survey","volume":"52","author":"Yick","year":"2008","journal-title":"Comput. Netw."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"325","DOI":"10.1016\/j.adhoc.2003.09.010","article-title":"A survey on routing protocols for wireless sensor networks","volume":"3","author":"Akkaya","year":"2005","journal-title":"Ad Hoc Netw."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"2826","DOI":"10.1016\/j.comcom.2007.05.024","article-title":"A survey on clustering algorithms for wireless sensor networks","volume":"30","author":"Abbasi","year":"2007","journal-title":"Comput. Commun."},{"key":"ref_5","unstructured":"Karlof, C., and Wagner, D. (2003, January 11). Secure routing in wireless sensor networks: Attacks and countermeasures. Proceedings of the Proceedings of the First IEEE International Workshop on Sensor Network Protocols and Applications, 2003, Anchorage, AK, USA."},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"521","DOI":"10.1023\/A:1016598314198","article-title":"SPINS: Security protocols for sensor networks","volume":"8","author":"Perrig","year":"2002","journal-title":"Wirel. Netw."},{"key":"ref_7","unstructured":"Przydatek, B., Song, D., and Perrig, A. (2003, January 5\u20137). SIA: Secure information aggregation in sensor networks. Proceedings of the 1st International Conference on Embedded Networked Sensor Systems, Los Angeles, CA, USA."},{"key":"ref_8","unstructured":"Chan, H., Perrig, A., and Song, D. (November, January 30). Secure hierarchical in-network aggregation in sensor networks. Proceedings of the 13th ACM Conference on Computer and Communications Security, Alexandria, VA, USA."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"103118","DOI":"10.1016\/j.jnca.2021.103118","article-title":"Secure data aggregation methods and countermeasures against various attacks in wireless sensor networks: A comprehensive review","volume":"190","author":"Yousefpoor","year":"2021","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"2022","DOI":"10.1016\/j.comnet.2009.02.023","article-title":"Secure data aggregation in wireless sensor networks: A comprehensive overview","volume":"53","author":"Ozdemir","year":"2009","journal-title":"Comput. Netw."},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"4731953","DOI":"10.1155\/2016\/4731953","article-title":"WSN-DS: A dataset for intrusion detection systems in wireless sensor networks","volume":"2016","author":"Almomani","year":"2016","journal-title":"J. Sens."},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"2109","DOI":"10.1109\/JIOT.2023.3292209","article-title":"WSN-BFSF: A new dataset for attacks detection in wireless sensor networks","volume":"11","author":"Dener","year":"2024","journal-title":"IEEE Internet Things J."},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"12699","DOI":"10.1109\/ACCESS.2024.3355312","article-title":"Machine learning solutions for the security of wireless sensor networks: A review","volume":"12","author":"Ghadi","year":"2024","journal-title":"IEEE Access"},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Nguyen, T.M., Vo, H.H.-P., and Yoo, M. (2024). Enhancing Intrusion Detection in Wireless Sensor Networks Using a GSWO-CatBoost Approach. Sensors, 24.","DOI":"10.3390\/s24113339"},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"2139","DOI":"10.1007\/s10207-024-00833-z","article-title":"MLSTL-WSN: Machine learning-based intrusion detection using SMOTETomek in WSNs","volume":"23","author":"Talukder","year":"2024","journal-title":"Int. J. Inf. Secur."},{"key":"ref_16","first-page":"2625922","article-title":"Anomaly-based intrusion detection system in wireless sensor networks using machine learning","volume":"2024","year":"2024","journal-title":"Secur. Commun. Netw."},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Ganeriwal, S., and Srivastava, M.B. (2004, January 25). Reputation-based framework for high integrity sensor networks. Proceedings of the 2nd ACM Workshop on Security of Ad Hoc and Sensor Networks, Washington, DC, USA.","DOI":"10.1145\/1029102.1029115"},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"386","DOI":"10.1002\/ett.1413","article-title":"Trust management in wireless sensor networks","volume":"21","author":"Zahariadis","year":"2010","journal-title":"Eur. Trans. Telecommun."},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"169","DOI":"10.1109\/TCOMM.2012.031912.110179","article-title":"Hierarchical trust management for wireless sensor networks and its applications to trust-based routing and intrusion detection","volume":"9","author":"Bao","year":"2012","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"ref_20","first-page":"1","article-title":"A survey on trust management in wireless sensor networks","volume":"75","author":"Ishmanov","year":"2016","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"19768","DOI":"10.1038\/s41598-025-19768-z","article-title":"Machine learning based dynamic trust estimation framework for securing wireless sensor networks","volume":"15","author":"Goswami","year":"2025","journal-title":"Sci. Rep."},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Gangwani, P., Perez-Pons, A., and Upadhyay, H. (2024). Evaluating trust management frameworks for wireless sensor networks. Sensors, 24.","DOI":"10.3390\/s24092852"},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Dorri, A., Kanhere, S.S., Jurdak, R., and Gauravaram, P. (2017, January 13\u201317). Blockchain for IoT security and privacy: The case study of a smart home. Proceedings of the 2017 IEEE International Conference on Pervasive Computing and Communications Workshops (PerCom Workshops), Kona, HI, USA.","DOI":"10.1109\/PERCOMW.2017.7917634"},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"1184","DOI":"10.1109\/JIOT.2018.2812239","article-title":"Blockchain meets IoT: An architecture for scalable access management in IoT","volume":"5","author":"Novo","year":"2018","journal-title":"IEEE Internet Things J."},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"173","DOI":"10.1016\/j.future.2018.05.046","article-title":"On blockchain and its integration with IoT: Challenges and opportunities","volume":"88","author":"Reyna","year":"2018","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"395","DOI":"10.1016\/j.future.2017.11.022","article-title":"IoT security: Review, blockchain solutions, and open challenges","volume":"82","author":"Khan","year":"2018","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"251","DOI":"10.1016\/j.jnca.2018.10.019","article-title":"Blockchain\u2019s adoption in IoT: The challenges, and a way forward","volume":"125","author":"Makhdoom","year":"2019","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Almarri, S. (2024). Blockchain technology for IoT security and trust. Sustainability, 16.","DOI":"10.3390\/su162310177"},{"key":"ref_29","first-page":"60338","article-title":"BS-SCRM: A novel approach to secure wireless sensor networks using blockchain and swarm intelligence","volume":"14","author":"Xiao","year":"2024","journal-title":"Sci. Rep."},{"key":"ref_30","first-page":"82126","article-title":"A survey on advancements in blockchain-enabled security for spectrum access in 6G cognitive radio IoT networks","volume":"14","author":"Zahary","year":"2024","journal-title":"Sci. Rep."},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"12","DOI":"10.1145\/1629080.1629082","article-title":"Preventing history forgery with secure provenance","volume":"5","author":"Hasan","year":"2009","journal-title":"ACM Trans. Storage"},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"256","DOI":"10.1109\/TDSC.2013.44","article-title":"A lightweight secure scheme for detecting provenance forgery and packet drop attacks in wireless sensor networks","volume":"12","author":"Sultana","year":"2015","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"ref_33","first-page":"3","article-title":"Provenance for wireless sensor networks: A survey","volume":"1","author":"Wang","year":"2016","journal-title":"Cybersecurity"},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"1441","DOI":"10.1007\/s11280-019-00746-1","article-title":"A survey on data provenance in IoT","volume":"23","author":"Hu","year":"2020","journal-title":"World Wide Web"},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"261","DOI":"10.1145\/3718735","article-title":"Security approaches for data provenance in the Internet of Things: A systematic literature review","volume":"57","author":"Faraj","year":"2025","journal-title":"ACM Comput. Surv."},{"key":"ref_36","doi-asserted-by":"crossref","first-page":"83","DOI":"10.1145\/3593294","article-title":"Data provenance in security and privacy","volume":"55","author":"Pan","year":"2023","journal-title":"ACM Comput. Surv."},{"key":"ref_37","unstructured":"Han, X., Pasquier, T., and Seltzer, M. (2018). Provenance-based intrusion detection: Opportunities and challenges. arXiv."},{"key":"ref_38","unstructured":"Rehman, M.U., Ahmadi, H., and Hassan, W.U. (2024, January 19\u201323). Flash: A Comprehensive Approach to Intrusion Detection via Provenance Graph Representation Learning. Proceedings of the IEEE Symposium on Security and Privacy, San Francisco, CA, USA."},{"key":"ref_39","doi-asserted-by":"crossref","unstructured":"Pasquier, T., Han, X., Goldstein, M., Moyer, T., Eyers, D., Seltzer, M., and Bacon, J. (2017, January 24\u201327). Practical whole-system provenance capture. Proceedings of the ACM Symposium on Cloud Computing, Santa Clara, CA, USA.","DOI":"10.1145\/3127479.3129249"},{"key":"ref_40","unstructured":"Madden, S. (2026, August 26). Intel Berkeley Research Lab Sensor Data. MIT CSAIL Database Group, 2004. Available: Public Intel Lab Data repository. Available online: https:\/\/db.csail.mit.edu\/labdata\/labdata.html."},{"key":"ref_41","unstructured":"Barrenetxea, G. (2019). SensorScope Data, Zenodo."},{"key":"ref_42","unstructured":"Henderson, T.R., Lacage, M., Riley, G.F., Dowell, C., and Kopena, J. (2008, January 17\u201322). Network simulations with the ns-3 simulator. Proceedings of the ACM SIGCOMM 2008 Conference on Data Communication, Seattle, VA, USA."},{"key":"ref_43","doi-asserted-by":"crossref","unstructured":"Wu, H., Nain, P., and Tay, Y.C. (2011, January 21\u201325). An energy framework for the network simulator 3 (ns-3). Proceedings of the 4th International ICST Conference on Simulation Tools and Techniques, Barcelona, Spain.","DOI":"10.4108\/icst.simutools.2011.245534"},{"key":"ref_44","doi-asserted-by":"crossref","unstructured":"Varga, A., and Hornig, R. (2008, January 3\u20137). An overview of the OMNeT++ simulation environment. Proceedings of the 1st International ICST Conference on Simulation Tools and Techniques for Communications, Networks and Systems, Marseille, France.","DOI":"10.4108\/ICST.SIMUTOOLS2008.3027"},{"key":"ref_45","unstructured":"Kirsche, M., and Schnurbusch, M. (2014). A new IEEE 802.15.4 simulation model for OMNeT++\/INET. arXiv."},{"key":"ref_46","doi-asserted-by":"crossref","first-page":"105040","DOI":"10.1016\/j.ipm.2026.105040","article-title":"BGA: A noise-immune neural distillation framework for malicious signature extraction in high-entropy encrypted flows","volume":"64","author":"Hong","year":"2026","journal-title":"Inf. Process. Manag."},{"key":"ref_47","doi-asserted-by":"crossref","first-page":"101681","DOI":"10.1016\/j.iot.2025.101681","article-title":"An interpretable deep learning framework for intrusion detection in industrial Internet of Things","volume":"33","author":"Ahmad","year":"2025","journal-title":"Internet Things"}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/26\/18\/5695\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,9,10]],"date-time":"2026-09-10T04:45:49Z","timestamp":1789015549000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/26\/18\/5695"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,9,8]]},"references-count":47,"journal-issue":{"issue":"18","published-online":{"date-parts":[[2026,9]]}},"alternative-id":["s26185695"],"URL":"https:\/\/doi.org\/10.3390\/s26185695","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,9,8]]}}}