Towards a Distributed Approach for Detection and Mitigation of Denial of Service Attacks within Industrial Internet of Things

Wireless Sensor Networks (WSN) are commonly adopted by the Industrial Internet of Things (IIoT) scenarios due to their easy and fast deployment. However, WSNs are especially vulnerable to security attacks as reflexive packet flooding Denial of Service (DoS) may occur. Admission control and reputation-based strategies are effective for attacks detection. However, mitigation strategies to deal with the effects of these attacks, such as congestion channel transmission is an open issue. Additionally, the resource-constrained nature of nodes, as low bandwidth, limited memory, and battery within WSNs, poses a challenge to develop efficient mechanisms in such scenario. To address this issue, we propose a Distributed Congestion Control by Duty-cycle Restriction (D-ConCReCT) to detect and mitigate DoS in IIoT. The main goal is to investigate its feasibility in large-scale networks, as well as its ability to reduce both the detection and mitigation times when compared to a previous centralized approach, so-called ConCReCT. Our results indicate that D-ConCReCT may be applied in the mitigation of DoS attacks in a sensor network scenario with 500 nodes.