Designing security systems for wireless sensor networks presents a challenge due to their relatively low computational resources. This has rendered many traditional defense mechanisms based on cryptography infeasible for deployment on such networks. Reputation and anomaly detection systems have been implemented as viable alternatives, but existing implementations still struggle with providing efficient security without a significant impact on energy consumption. To address this trade-off between resource consumption and resiliency, we designed TrustSense, a reputation management protocol for clustered WSNs. It is a semi-centralized family of algorithms that combine periodic trust updates, spatial correlation, and packet sequence validation at the cluster-heads' hierarchy to relieve the sensor nodes of unnecessary opinion queries and trust evaluation computation. We compared the efficiency of TrustSense with legacy reputation systems such as EigenTrust and the results of simulations show a significant improvement in reliability and energy usage while maintaining an acceptable path length with varying numbers of malicious nodes. We believe the approach of combining different techniques from various classes of intrusion detection systems unlocks several possibilities of achieving better results by more complex and versatile composition of these techniques.

中文翻译：

---

TrustSense：一种用于集群无线传感器网络的节能信任方案

由于无线传感器网络的计算资源相对较少，因此为无线传感器网络设计安全系统是一项挑战。这使得许多基于密码学的传统防御机制无法部署在此类网络上。声誉和异常检测系统已作为可行的替代方案实施，但现有实施方案仍难以在不显着影响能源消耗的情况下提供有效的安全性。为了解决资源消耗和弹性之间的这种权衡，我们设计了 TrustSense，一种用于集群 WSN 的声誉管理协议。它是一个半集中式算法系列，结合了簇头的周期性信任更新、空间相关性和数据包序列验证。层次结构来减轻传感器节点不必要的意见查询和信任评估计算。我们将 TrustSense 的效率与 EigenTrust 等传统信誉系统的效率进行了比较，模拟结果显示可靠性和能源使用有显着提高，同时在不同数量的恶意节点下保持可接受的路径长度。我们相信，将来自各种类型的入侵检测系统的不同技术相结合的方法可以通过这些技术的更复杂和通用的组合来实现更好的结果。我们将 TrustSense 的效率与 EigenTrust 等传统信誉系统的效率进行了比较，模拟结果显示可靠性和能源使用有显着提高，同时在不同数量的恶意节点下保持可接受的路径长度。我们相信，将来自各种类型的入侵检测系统的不同技术相结合的方法可以通过这些技术的更复杂和通用的组合来实现更好的结果。我们将 TrustSense 的效率与 EigenTrust 等传统信誉系统的效率进行了比较，模拟结果显示可靠性和能源使用有显着提高，同时在不同数量的恶意节点下保持可接受的路径长度。我们相信，将来自各种类型的入侵检测系统的不同技术结合起来的方法可以通过这些技术的更复杂和通用的组合来解锁获得更好结果的几种可能性。