## 1 Introduction  
Currently, the major focus of research has been on mobile wireless sensor networks (MWSNs), as an advantage of mobile nodes that control the movement by itself. Further, it has been noticed that mobility reduces the problems regarding maximum coverage area and connectivity. However, in MWSNs, the most important task is the position estimation of mobile nodes. Recently, many applications for execution mobility perform an important role in a specific type of Wireless Sensor Network (WSN), which are known as MWSNs. Currently, MWSN has become the main focus of research as it has many issuesregarding connectivity, coverage area and energy consumption. Recent research has shown that the features of mobility reduce many problems instead of making them complex. Nowadays, MWSNs are used in many applications like monitoring, tracking and sensing in different environments. Therefore, mobile nodes are important and necessary modules in a wide range of applications of sensor networks [1]. Typically, the wireless sensor nodes are unattended that contains mobile nodes with low cost features. Mobile nodes are comprised of multiple components, including mobility, memory, power, micro-controller, sensing capabilities and communication features. Nowadays, there are numerous types of security attacks identical to wormhole, clone attacks, DoS, cyber security, routing, Sybil, jamming, privacy factor, physical, black hole and others. A clone node attack is a perilous one in MWSN. An advisory can grab the mobile node in order to capture the information stored in it and later on can generate manifold clones of the captured mobile node. Thus, a clone attack eventually depends on how briskly a malicious activity can initiate in the network. An advisory conquers the cons of the unattended nature of compromised node and attains the whole data from its memory such as its key, identity, communicating information and so on. Additionally, an advisory can imitate the captured mobile node and deploy it again back to the network in the target destination. Afterwards, this compromise mobile node can be used by the advisory to monitor and control the multiple features. Therefore, it can be very harmful if the clone node is not detected on time. In this paper, our major concern is to explore the concept of Danger Theory (DT) for clone node detection. In the primary work [2], we recruited the solution of clone detection which relies upon two methods, specifically, attack detection and security control with respect to the true positive, false negative and false positive rate. A motivation of the proposed enhanced version of the DT method supports the identification of a clone in a secure manner. The multi-steps detection approach is comprised of three stages of recognition; first step (based upon clustering method), second step (correlation of the battery level and random numbers) and third (secure network). For detecting the existence of malicious nodes, the proposed DT method implements the concept of clone detection with multiple stages. The extended version is proposed in this paper to secure the communication from duplicate nodes with addition to password protection. It is crucial to effectively secure the nodes' credentials in terms of communication overhead, frequency, energy, detection rate, life time, delay and false negative. In this paper, the advanced experiments are originated to sort out the weaknesses of previous works [2]. With merging the idea of password protection approach, the security experimental results achieved are more accurate and precise. Furthermore, we have provided the comparison of the proposed method to other existing methods. We observed interesting differences between the DT approach and existing methods, whereby each level shows a unique and efficient analysis of clone detection. Therefore, in this paper, the significances of both methods' voltage comparison and password protection are executed and evaluated. The rest of the proposed paper is classified as follows.