A Robust Joint RSS and Doppler Shift-Based Sybil Attack Detection Scheme for Mobile Networks

In this paper, a robust enhanced Sybil attack detection scheme is proposed using both the Doppler shift and received signal strength (RSS) as physical layer parameters to identify Sybil nodes in a mobile network. The proposed scheme employs the absolute value of the difference between Doppler shift and RSS values for all pairs of nodes as test statistics, where threshold-based statistical hypothesis testing is performed to detect Sybil nodes. A performance evaluation of the scheme is provided in terms of its true positive rate (TPR) and false positive rate (FPR), and where an approximate expression for both metrics is provided for the particular two-user case. The proposed scheme yields a significant security enhancement compared to its single-attribute Doppler shift- and RSS-based schemes, where the proposed scheme's TPR manifests an increase surpassing 32% and 255%, with respect to the two aforementioned schemes, respectively. The performance evaluation shows the potential of incorporating multiple channel-based features for a robust Sybil attack detection scheme in mobile networks.