中文摘要：

在无线传感器网络中，如何准确和迅速地检测拒绝服务攻击，以保障网络设施的可用性，是一个极具挑战性的安全问题．文中采用线性预测技术，为传感器节点建立了简单高效的ARMA（2，1）流量预测模型，进而为传感器网络设计了一种基于流量预测的拒绝服务攻击检测方案——TPDD．在该方案中，每个节点独立地完成流量预测和异常检测，无须特殊的硬件支持和节点之间的合作；为了提高方案的检测准确度，提出了一种报警评估机制，减少预测误差或信道误码所带来的误报．模拟实验结果表明，ARMA（2，1）模型具有较高的预测精度，能够实时地预测传感器网络流量；TPDD方案能够在较少的资源开销下，迅速、有效地检测拒绝服务攻击．

英文摘要：

In wireless sensor networks, how to accurately and rapidly detect denial of service （DOS） attacks, so as to ensure the availability of network infrastructure, is one of the most challenging security problems. This paper proposes a simple and efficient ARMA （2,1） traffic predic- tion model for sensor nodes based on linear prediction technique. Then a lightweight DoS attacks detection scheme, TPDD （Traffic Prediction based DoS attack Detection）, is designe＇d for wireless sensor networks. In TPDD, each node acts independently when predicting the traffic and detecting anomaly. Neither special hardware nor noders cooperation is needed. Furthermore, a mechanism evaluating reliability of alert is developed to reduce the false alerts caused by prediction or channel error. Simulation results show that ARMA （2,1） model can predict sensor network traffic precisely and swiftly; TPDD is an efficient DoS attacks detection scheme which can quickly detect DoS attacks with less resource overhead.