Abstract
The article comprises issues of cyber-physical security of wireless sensor networks (WSN). Modern WSNs are vulnerable to a wide class of attacks, such as sinkhole and wormhole attacks, man-in-the-middle attacks, data substitution attacks, universal network attacks, etc. In practice, the ability to protect WSNs from this type of attacks is hampered by the variety of possible impacts, highly specialized focus of the infrastructure and limited resources of network nodes. This article proposes a comprehensive technique for identifying security incidents in WSNs for effective attack detection and incident response, which will minimize potential damage and ensure uninterrupted network operation. The novelty of the technique includes its complexity, the ability to identify various cyber-physical threats and ensure high accuracy and completeness of incident detection, taking into account the distributed structure and dynamics of changes in the composition of WSN nodes. The technique has been tested on a WSN fragment operating on the ZigBee protocol to monitor the characteristics of the atmospheric air of an industrial facility or a city. The developed technique will help improve the quality and timeliness of detecting security incidents in wireless sensor networks, which will enhance the resilience of networks to external and internal malicious influences and prevent long-term interruptions in the operation of the infrastructure in the event of successful attacks.