Abstract: False data injection attack is one of serious threats in wireless sensor networks. For most of false data filtering schemes do not consider the identifiers（IDs） attack and the intermediate nodes captured by the attacker, this paper proposes an identifiers（IDs） attack-resilient false data filtering scheme for wireless sensor network. The proposed scheme not only validates and filters the forwarding data, but also verifies the identity of the endorsement nodes in the data forwarding process. The security and performance analysis shows that the proposed scheme can resist many attacks, and is lower in storage requirement than the other schemes, and with the number of hops for report packet forwarding increasing, the filtering capability of the false data and the energy savings significantly increase also.

Key words: wireless sensor network, false data injection attack, node-ID attack, bilinear pairings

摘要： 虚假数据注入攻击是无线传感器网络的一种严重威胁，针对大多数虚假数据过滤方案没考虑节点身份攻击和中间节点被攻击者俘获的问题，提出了一种抗节点身份攻击的虚假数据过滤方案，方案不仅在数据转发过程中对转发的数据进行验证、过滤，同时对协作产生感知数据的节点的身份进行验证。安全性分析和性能评价表明，该方案不仅能抵抗各种攻击，而且在存储开销方面与其他方案相比，具有明显优势，并且随着数据包被转发跳数的增加，该方案的虚假数据过滤能力和能量节省也显著增加。

关键词: 无线传感器网络, 虚假数据注入攻击, 节点身份攻击, 双线性对