## 4 Security Analysis  
This section presents a security analysis of our proposed E-BIOSARP system. We utilize the security analysis method presented in [PERSON] _et al._[30]. To simplify the analysis, we focus on the critical components of our model, including packet elements and secure transmission. We begin the analysis from the discovery phase, which involves the secure transfer of information between self-nodes to form a private community or to communicate with a new node. When a node broadcasts a route replay request packet, it encrypts the important contents, which can only be decrypted by nodes that can understand the received packets, that is, only self-nodes. These neighboring self-nodes will then replay their encrypted information to the node that broadcasted the packet. In this manner, a secure private community is constructed to monitor the transmission. The monitored encrypted data are then transferred hop by hop to their destination, namely, the sink node, as shown in Figure 5.  
E-BIOSARP combines BIOSARP with the encryption mechanism of SRTLD because BIOSARP offers better packet transfer behavior and the SRTLD encryption mechanism provides better communication security with minimal processing time. Under E-BIOSARP, the packet header fields (_Pkt_ID_, _D_ID_, and _S_ID_) are encrypted instead of the payload or the complete packet, which has already been fragmented. As a result, if malicious nodes and/or adversaries capture a secure packet, they cannot read the packet's movement or its destination, thereby ensuring the integrity and confidentiality of the network. The encryption process is based on a function that verifies the integrity of a message via sender identification and ensures that the data are received exactly as sent. The encryption algorithm is based  
Figure 5: Network simulation grid (source nodes (blue), sensor nodes (green), malicious nodes (red), and sink node (black)). on the maximum value of a 32-bit signed integer, the prime number equal to \(2^{31}-1\). The plaintext in important header fields is encrypted and converted to cipher text at every hop. Therefore, the use of this algorithm counters the possible attacks listed below. * _Attack based on packet dropping_: The proposed encryption mechanism rapidly identifies and only replies to and/or forwards data packets to self-nodes. The authentication process is fast because of the reduced overhead of the proposed encryption mechanism, as elaborated in Section 3, and thus can efficiently handle packet drop attacks. * _Redirection with modified hop counts_: Redirections [41] are avoided because of the E-BIOSARP authentication process; moreover, the E-BIOSARP RTR packet, as described in [35], does not contain a _hopcount_ field. Thus, the network is secure against this type of attack. * _Node replication or cloning attack_: This type of attack is initiated when an adversary takes the complete information of a node, replicates/clones a node with the same information, and inserts the clone into the network to execute further attacks. E-BIOSARP protects the network from remote node replication or cloning attacks by rapidly identifying non-self/compromised nodes and thus avoids the receiving or sending of any packet from or to such a node. * _Brute-force search (or exhaustive key search attack)_: In a brute-force search attack, the adversary attempts to acquire a user ID and password. The proposed encryption mechanism uses a random key (_Pkt_ID_ and _k_) that changes at the processing of every packet. Furthermore, E-BIOSARP's rapid identification process makes it extremely difficult for an attacker to acquire the fragmented data or, if they are acquired, to reconstitute them [29]. * _Eavesdropping attack_: The random-key-based encryption mechanism avoids eavesdropping attacks by encrypting the main contents _S_ID_ and _D_ID_ of the communication; thus, monitoring is secret, and hijacking of confidential data is impossible.