## 4 Attack Model
This attack can be mounted using two malicious nodes that can transmit messages to each other over a communication channel different from the channel the WSN uses. Note that this attack is also aimed at disrupting the routing process as a whole, and its goal is to modify and eavesdrop on data in the network. The goal of a blackhole attack is to interrupt the communication in the network when the attacking node takes (in fact, loses) received packets, and other nodes begin to look for alternative routes in the network [23; 27]. In this case, the nodes have to resend lost packets, including through other routes. The attack disrupts routing in the network, and due to the need for retransmission, there is unnecessary consumption of communication and computing resources of the network. A Sybil attack consists of generating information on network nodes about the existence of several different nodes, which, in fact, are one attacker node. And this node also violates the routing rules in the network [23]. \begin{table}
\begin{tabular}{c c c c} \hline \hline
**Treat** & \begin{tabular}{c} **Importance of** \\ **the Threat** \\ \end{tabular} & \begin{tabular}{c} **Probability of** \\ **Realization** \\ \end{tabular} & \begin{tabular}{c} **Description and Examples** \\ \end{tabular} \\ \hline \begin{tabular}{c} Disruption of routing in \\ the network \\ \end{tabular} & high & high & \begin{tabular}{c} Forced modification of routing paths in WSNs. Disrupts \\ normal WSN operation. (e.g., Sinkhole, Sybil, \\ Wormhole, Blackhole) \\ \end{tabular} \\ \hline \begin{tabular}{c} Communication protocol \\ violation \\ \end{tabular} & high & middle & \begin{tabular}{c} Changes in the logic of the decentralized functioning \\ protocol leading to loss of WSN operability. \\ (e.g., desynchronization, clock-skewing and \\ data-replay attacks) \\ \end{tabular} \\ \hline \
\begin{tabular}{c} Violation of the algorithm \\ of nodes operation \\ \end{tabular} & high & middle &
\begin{tabular}{c} Modification of software on the nodes. It leads to \\ violation of algorithms of nodes operation and WSN as a \\ whole (e.g., malicious code injection) \\ \end{tabular} \\ \hline \hline \end{tabular}
\end{table} 
Table 3: _Cont._A malicious code injection attack is a type of attack that exploits errors in software and injects malicious code into the host control program, for example, by injecting code into a data packet [28; 29]. The goal is to disrupt the operation algorithms of the node. Data aggregation distortion and node-tampering attacks involve the introduction of malicious code to disrupt the operation of nodes. A data aggregation distortion represents an attack on a node that processes and aggregates data received from other nodes. An example of an interference attack is changing the operating algorithm of a node's control program or adjusting the physical environment of its surroundings. Such an attack can lead to distortion in the readings of its sensors. Hello-flood attacks and Denial-of-Sleep attacks inherent in wireless sensor networks are types of DoS attacks [23; 30; 31]. Hello-flood attacks consist of frequent sending of 'Hello' broadcast messages, informing neighboring nodes about the proposed communication parameters. The nodes receiving such messages are forced to react to them. The receiving node can adjust its list of network nodes available for communication with it and adjust its routing tables. The attack leads to an unnecessary consumption of energy and computing resources of nodes, and, therefore, it can be quite effective in hitting WSNs. Often, a hello-flood attack involves the attacker using a high-power transmitter to hit as many network nodes as possible and, thereby, increase the volume of information flows in the network. The target of the Denial-of-Sleep attack is to prevent a node operating from an autonomous power source in the network from switching to energy-saving mode. This influence leads to an increase in energy consumption of the victim node.