Intrusion detection is an indispensable part of RPL security due to its nature opening to attacks from insider attackers. While there are a good deal of studies that analyze different types of attack and propose intrusion detection systems based on various techniques that are proposed in the literature, how to place such intrusion detection systems on RPL topology is not investigated. This is the main contribution of this study, and three intrusion detection architectures based on central and distributed placement of intrusion detection nodes are analyzed rigorously against different types of attacks and attackers at various locations in the RPL topology and evaluated from different aspects including their effectiveness, cost, and security.

翻译：入侵检测是RPL安全不可或缺的组成部分，因其易受内部攻击者的攻击。尽管已有大量研究分析了不同类型的攻击，并基于文献中提出的各种技术设计了入侵检测系统，但如何将此类入侵检测系统部署至RPL拓扑结构中的问题尚未得到探究。本研究的主要贡献即在于此：针对入侵检测节点在中心化与分布式部署方式下的三种入侵检测架构，系统性地分析了RPL拓扑中不同位置发生的各类攻击及攻击者行为，并从检测有效性、成本与安全性等多维度进行了评估。