Low-Power and Lossy Networks (LLNs) run on resource-constrained devices and play a key role in many Industrial Internet of Things and Cyber-Physical Systems based applications. But, achieving an energy-efficient routing in LLNs is a major challenge nowadays. This challenge is addressed by Routing Protocol for Low-power Lossy Networks (RPL), which is specified in RFC 6550 as a "Proposed Standard" at present. In RPL, a client node uses Destination Advertisement Object (DAO) control messages to pass on the destination information towards the root node. An attacker may exploit the DAO sending mechanism of RPL to perform a DAO Insider attack in LLNs. In this paper, it is shown that an aggressive attacker can drastically degrade the network performance. To address DAO Insider attack, a lightweight defense solution is proposed. The proposed solution uses an early blacklisting strategy to significantly mitigate the attack and restore RPL performance. The proposed solution is implemented and tested on Cooja Simulator.

翻译：低功耗有损网络（LLNs）运行于资源受限设备上，并在众多工业物联网与信息物理系统应用中发挥关键作用。然而，当前在LLNs中实现节能路由是一大挑战。该挑战由低功耗有损网络路由协议（RPL）解决，该协议目前作为RFC 6550中的"提议标准"被规范。在RPL中，客户端节点使用目标广告对象（DAO）控制消息向根节点传递目的地信息。攻击者可能利用RPL的DAO发送机制在LLNs中发起DAO内部攻击。本文证明，激进攻击者可严重降低网络性能。为应对DAO内部攻击，本文提出一种轻量级防御方案。该方案采用早期黑名单策略显著缓解攻击并恢复RPL性能。所提方案已在Cooja模拟器上实现并测试。