# An Efficient Three-Phase Fuzzy Logic Clone Node Detection Model

Authors: Sachin Lalar; Shashi Bhushan; Surender Jangra; Mehedi Masud; Jehad F. Al-Amri
Journal: Security and Communication Networks
 (2021)

---

## Abstract

Wireless sensor networks have been deployed in the open and unattended environment where the attacker can capture the sensors and create the replica of captured nodes. As the clone nodes have been considered legitimate nodes, clone nodes can initiate different network attacks. We have designed a three-phase clone node detection method named fuzzy logic clone node detection (FLCND). The first phase of FLCND checks whether any node is missing from the network or not. In the next phase, FLCND finds out whether any missing node has arisen in the network in a stipulated time. If any missing node is alive, there is a possibility the node may be cloned. The information of suspected nodes is entered into the Hot-List, which has been maintained in the network. Phase III uses the suspected list and finds out the possibility of clone node using fuzzy logic. Two different scenarios have been simulated in NS2 to evaluate FLCND. The simulation result shows that the proposed method increases the packet delivery ratio (PDR) and reduces packet loss, end-to-end delay, and energy consumption. The simulation results illustrate that the FLCND method reduces the average power consumption by 27% and increases the detection rate by 46% compared to the existing techniques.


---

## Body

## 1. Introduction

Wireless sensor networks (WSNs) have small, low-cost, and resource-limited sensor nodes that have frequently been used in numerous surveillance functions. The sensor node is an active device that has a processor, memory, low-power supply, radio link, and actuators [1]. WSNs are susceptible to many types of attacks due to the network’s open nature [2]. These attacks are classified into two types: application-based attacks and application-independent attacks. Application-based attacks target any network functions, such as data aggregation, localization, and routing [3]. This paper focuses on a clone node (replication) attack, which is recognized as an independent application attack. In some applications, sensor networks are deployed in an open and unattended environment where an attacker can access and capture the sensors. The attacker creates the replica of captured nodes by collecting the information, such as key and encrypted content, and places the clone nodes inside the network [4]. Adversaries insert these duplicate nodes into the tactical network position and commence more internal attacks. The clone node attack can happen either in a static wireless sensor network (SWSN) or in a mobile wireless sensor network (MWSN). In the former type of WSN, the sensor position is fixed in the network, whereas in MWSN, a sensor can change its position. Sensor nodes can move and exchange information with other sensor nodes in mobile sensor networks [5]. If any network communication channel is weak, the mobile node can be connected to the lost communication channel and improve channel efficiency. Mobility performs an essential factor in the sensor network [6].An example of a mobile sensor network for wildfire tracking is shown in Figure1. The motion sensor will preserve a certain distance from the fire and provide updated information to the firefighters. Similarly, if the flame spreads, the motion sensor can track and send the information to the base station. In this example, the sensor node has been replicated and inserted into various positions in the network. These clone nodes may produce false information regarding the fire. Mobile WSNs are vulnerable to clone node attacks. Clones can affect network performance if they cannot remove/detect from the network [7]. Some techniques have been proposed to detect clone node attacks in SWSN [8–21], but these methods do not apply to mobile WSNs. In this paper, we will propose a new clone node detection method for MWSN.Figure 1
Clone node attack example.The clone node can also change its position in MWSN, so node replication attacks in MWSNs are more challenging to resolve. Attackers can use these mobile replicated nodes to initiate more covert attacks [22]. The discovery strategy may be used to check whether sensor nodes are found in their original position. However, sensor nodes appear at different locations at different times. Node replication attacks are dangerous in MWSN if it has not been eliminated from the network. It will prompt us to find the solution to detect a replicated node in MWSN. The attacker launches the clone node attack in three steps. In the first step, the attackers steal the sensor node from the network. The next step will generate the clone of the stolen node and then place it in the network. After that, the clone nodes can produce a different type of attack in the network. If we maintain the missing node information in the network, when replicated nodes are inserted back into the network, it will be detected.A new method, FLCND, is proposed. It works in three phases with the step of generating the clone nodes. Initially, the proposed algorithm finds the node which is missing from the network. After that, the proposed algorithm finds out whether any missing node is to come alive in the network. If any missing node is alive, there is a possibility the node may be cloned. The suspected node’s information is entered into the suspected list, which is maintained within the network. Phase III uses the suspected list and finds out the clone node by applying fuzzy logic. In the fuzzy method, the parameters are speed, packet delivery ratio (PDR), false input value, residual power, and delay, which are processed as fuzzy logic input and depend on the outcome module; the clone node is detected from the network.There are the following contributions that are as follows:(i)
The paper proposes an FLCND-based distributed clone node detection method(ii)
The proposed method can increase the packet delivery ratio and reduce packet loss, energy consumption, and end-to-end delay(iii)
The proposed method does not increase the additional communication cost while increasing the detection rate compared to EDD, XED, HO, and CBCD methodsThe remainder of the paper is organized as follows. Section2 reviews existing detection schemes for identifying mobile network cloned nodes. Section 3 describes the system and the attacking model. Section 4 explains the proposed method, fuzzy logic clone node detection (FLCND). Section 5 describes the simulation of the proposed method and the comparison of FLCND with the existing methods. Finally, the paper is concluded in Section 6.


## 2. Related Work

Different techniques have been invented to detect clone nodes in MWSN, which can be divided into two parts: centralized and distributed. In the centralized MWSN system, all mobile nodes receive information about the clone nodes and transmit the information to the base station, which makes the final decision about the detection of the clone node. On the other hand, the distribution system for identifying a clone node is locally identified by the node [23, 24].Chia [25] designed the clone node detection method using location information. In this method, each sensor will interchange log lists with neighboring nodes to avoid unauthorized operations. Each node sustains a table that stores information about the nodes used to detect the clone nodes. When monitored nodes meet with each other and exchange recorded information about their IDs, they may find the clone node’s conflicting information. Each node acts as a normal node as well as a monitoring node. However, for this method, each node must store a message of each monitored node. The storage overhead of the sensor nodes is high.Ho et al. [26] proposed a detection scheme based on a probability ratio test. This method’s idea is based on the speed of movement not exceeding the maximum speed set in the network for a mobile node. In contrast, clone nodes move much faster than normal nodes as the new clone node’s measurement speed appears high to the node’s configured maximum speed. When the node speed exceeds the configured speed value, the node’s probability value as the clone node is increased. When using SPRT, if the speed is equal to or lower than the maximum speed of the configured system, the null hypothesis is used. If the alternative hypothesis is accepted, then the duplicate node is removed from the network. However, SPRT relies on the base station, which has limitations such as rapid power loss of nodes near the base station and a single point of failure.Chia et al. [27] proposed a new method, XED, to detect clone node attacks in MWSNs. The idea behind XED is that, in a nonreplicating network, sensor node, A, encountered another sensor node, B, and A sends a random number, r, to B. When node A meets Bnode again, A will ask for a random number, r, to determine if it is already a matching node. Based on these observations, a “strategy for learning and challenge” has been proposed. The sensor node generates a random number. When sensor nodes want to communicate, they will exchange the generated random number. Each node maintains a table containing the generated received random number and node ID. For a pair of nodes that have already been matched, perform the above steps to replace the random number with the new one.Yu et al. [28] projected two methods, i.e., EDD and SEDD, to identify replication attacks. It works on an approach that node T that encounters node B must be limited to a number for a given time interval. Each node has the potential to detect duplicates. In EDD, the first phase has calculated the parameters and threshold, which is used to distinguish the actual nodes from the duplicates. In an online phase, each meeting of the node is computed by the node. In EDD, we can see that each node must maintain the list S, resulting in On storage overhead. The basic idea of SEDD is to monitor the subset of nodes instead of all nodes. The number of monitored nodes will be equal to the SEDD program’s storage, so the storage overhead is diminished in it.Deng et al. [29] proposed two schemes, ULTSE and MDLSD, to identify mobile WSN node replication vulnerabilities. As with any agreement, the witness will communicate over the network after receiving the time location statement. The basic idea is to use motion properties. When a node communicates with others, it will track time and location requirements. In other words, if the request for time location is tracked, the witnesses receive and reflect the communication, if they are outside, immediately when the status request witnesses are not sent, but the witness finds the status request for UTLSE multiple locations requiring each of the location claims. The data observed by the node described in the position claim extension are introduced by the method of saving only in the position of the MTLSD claim.Deng and Xiong [30] projected a new protocol for detecting mobile replicated nodes. Bloom filter and polynomial-based key predelivery schemes are used to find the clone node. The base station finds how many time keys are used. This method runs in four steps: node initialization, pairing, side creation, and discovery. Before setting up the network, symmetric polynomial keys are formed for each node generated by the key server. Each node generates a statement periodically, which contains the ID and the number of keys used. The report was forwarded to the base station. The base station calculates each node’s Bloom filter and collects the number of pairs of keys used. Nodes that exceed the limit of the key count are considered clone nodes.Wang and Shi [31] used the mobile node as a patrol to find distributed clones in various areas of the network. Two detection mechanisms for fixed and mobile systems have been proposed, which include patrol methods. The proposed method identifies duplicates using fixed sensors; if more than two sensors in the same location have equal node ID, then sensors of the same ID will be considered clones. When using a patrol sensor, when the mobile sensor moves at a momentum that exceeds the specified maximum speed, it is considered an attacker node.Lou et al. [32] proposed a node cloning attack detection protocol for mobile WSN, called single-hop detection (SHD). The node’s neighborhood is distinguished by a list of one-hop neighbors available in the regular WSN. Neighboring nodes will be known when the sensor node communicates with other nodes. Each node must sign its neighbor list. When getting a fingerprint complaint from a nearby claim sensor, the receiving node determines that the monitoring node is a clone node.Shaukat et al. [33] proposed a hybrid method to detect clones in MWSN-based danger theory in the human immune system. The fundamental strategy is to determine the cloned node by the observed abnormal behavior of mobile nodes in the MWSN.Cheng et al. [34] proposed the NI-LEACH protocol, an improved version of the LEACH protocol. The authors influenced the power consumption of the data transmission and improved the clone node’s detection efficiency.Dong et al. [35] presented a new distributed clone detection protocol known as LSCD. The protocol projects the discovered path of the witness node in which the distance between any two detection paths should be less than the length of the tracking path. The clone detection is also performed in non-hot spot areas and maintains high energy levels that improve energy efficiency and network lifetime.Anthoniraj and Razak [36] proposed a cluster-based clone detection method, CBCD. In this method, the network is divided into clusters, and each cluster has a cluster head. When the cloned node moves from one cluster to the other, it is identified by the cluster head. Rajesh and Shanmugam [37] proposed the RE-GSASA method in which the authors investigate the simulated model based on GSA to identify clone attack nodes in the network.Sankar and Roy [38] proposed a CND algorithm based on a Cuckoo filter. The algorithm considers the maximum similarity statements of collaboration spectrum realization decision. The authors enhanced QoS using SDN-based algorithms and located the clones domestically and geographically with a low-cost authentication system.Conti et al. [39] proposed two clone node detection methods known as HIP and HOP to identify the cloned node in MWNs, which uses the local information and node mobility. The nodes maintain the neighbor information and update the location claim after r number of rounds. The nodes compare their location claims with location claims received from the neighbor. In the HIP, the node compares its location claim only with its neighbor whereas in the HOP, the node compares the received location claim with the other neighbors. The limitation of this algorithm is that it has high communication, computing, and storage cost.Manickavasagam and Padmanabhan [40] proposed a new algorithm in mobile WSN to detect the clone nodes. The algorithm is based on the concept that different physical resources are proliferating when multiple clone nodes transmit data with the same source node ID. The algorithm uses the source number in each transmission of the message. If the intermediate node encounters any out-of-order message, it will check whether the source ID is cloned or not. The algorithm’s limitation is that it has high communication and memory overload.Jamshidi et al. proposed a new algorithm in [41] to detect the cloned nodes in a mobile WSN in which watchdog nodes use the learning agent. The watchdog nodes monitor the movement of nodes as well as network traffic. The watchdog changes the status of the learning agent after each monitoring round. The algorithm detects the cloned node by checking the status of the learning agent. The algorithm suffers from low detection and high communication rate when the network consists of a large number of sensor nodes. Jamshidi et al. proposed another watchdog-based algorithm in [42], which uses the node speed to determine the clone nodes in MWSN. If the watchdog node determines that a node is moving faster than a certain limit, the node is considered a replica node. The disadvantages of the algorithm are slow speed, high memory, and computing cost in a dense network.Jamshidi et al. suggested one more clone node detection algorithm in [43], which uses the mobility model. The sensor node will meet with the same node in each monitoring round. If the node number is higher than a probability value, the node is considered a clone node. The algorithm works in three steps, and in the first step configuration of the watchdog, nodes are there. In the second step, each watchdog monitors the network traffic and records the observation process to estimate the probability value. Watchdog finds the replication node using the probability value calculated in the second step. The proposed method’s limitation is that the cloned node cannot be detected if some calculation error is on the probability value. The communication cost is also high.Anitha et al. [44] proposed three methods, i.e., exponential moving average-based replica detection (EMABRD), SACOP, and FZKA methods, to detect the cloned nodes in MWSN. The main work of the EMARBD algorithm is to compare the actual energy consumption and estimated energy consumption of the sensor node to identify the replication node. A SACOP-based algorithm calculates the trust value of a sensor node from the recommendations of its neighbors. FZKA algorithm relies on fingerprints to identify the clone nodes. The first level is used to verify each node’s unique fingerprint, and the second level is used to verify each node’s authenticity without sending a personal value. SACOP has a higher clone detection rate as compared to EMABRD and FZKA.Many of the mobile network’s early detection algorithms rely on node mobility and node-to-node communication, which reduces detection if the node moves slowly. This paper is a distributed replica detection program inspired by Ho et al. [26]. Related research of clone node detection in MWSN can be found in [45, 46].


## 3. System Model

This section explains the network and attack model for the proposed method.


### 3.1. Network Model

Each mobile sensor node has assigned a unique node ID. We have assumed that the network has a node replica, replicating with the same ID of a node [47, 48]. Each sensor communicates symmetrically and has an information radius. The network is deployed and used the random way motion model. We have assumed that the network is divided into different clusters, and each cluster has a cluster head. The sensor node belongs to anyone cluster. Cluster heads maintain various parameters, i.e., speed, residual energy, delay, packet delivery ratio, and the suspected node’s false input value. It has been assumed that all nodes in the MWSN have the same initial energy and the same transmission power. Vmax is the upper limit of the speed of node movement. During the simulation, each node begins to move from the starting point to the selected random object point in the simulation area. Table 1 mentions the notations used in the paper [49].Table 1
Notations and their meanings.
NotationsMeaningnTotal number of sensor nodeskTotal number of cluster heads in the networkr0ThresholdEtpTransmitter energyRDistance between transmitter and receiverEEleThe energy required to operate the transceiverEfTransmitter energy for free spaceEmMultipath transmitter energyCHCluster headEmsgThe energy required to transmit hello messageHNumber of cluster heads in the node transmitter rangeEmsg_CHThe energy required by the cluster head to transmit hello messageCHtRelay nodeCHrReceiver cluster headEClone_DetectEnergy required to detect clone nodeESEThe initial energy of the sensor nodeNFNumber of packets received by a sensor nodeNRNumber of packets received by neighbor nodesVmaxMaximum speed of sensor node


### 3.2. Attack Model

It has been assumed that the attacker can compromise sensors in the network, and the attacker can execute only a clone node attack. Clone nodes can be set up anywhere in the hostile network [50]. We can only copy legitimate node. It has been assumed that no node with a new node ID cannot insert into the network. Besides, we can use an identity-based public key to allow such nodes to be recognized.


## 3.1. Network Model

Each mobile sensor node has assigned a unique node ID. We have assumed that the network has a node replica, replicating with the same ID of a node [47, 48]. Each sensor communicates symmetrically and has an information radius. The network is deployed and used the random way motion model. We have assumed that the network is divided into different clusters, and each cluster has a cluster head. The sensor node belongs to anyone cluster. Cluster heads maintain various parameters, i.e., speed, residual energy, delay, packet delivery ratio, and the suspected node’s false input value. It has been assumed that all nodes in the MWSN have the same initial energy and the same transmission power. Vmax is the upper limit of the speed of node movement. During the simulation, each node begins to move from the starting point to the selected random object point in the simulation area. Table 1 mentions the notations used in the paper [49].Table 1
Notations and their meanings.
NotationsMeaningnTotal number of sensor nodeskTotal number of cluster heads in the networkr0ThresholdEtpTransmitter energyRDistance between transmitter and receiverEEleThe energy required to operate the transceiverEfTransmitter energy for free spaceEmMultipath transmitter energyCHCluster headEmsgThe energy required to transmit hello messageHNumber of cluster heads in the node transmitter rangeEmsg_CHThe energy required by the cluster head to transmit hello messageCHtRelay nodeCHrReceiver cluster headEClone_DetectEnergy required to detect clone nodeESEThe initial energy of the sensor nodeNFNumber of packets received by a sensor nodeNRNumber of packets received by neighbor nodesVmaxMaximum speed of sensor node


## 3.2. Attack Model

It has been assumed that the attacker can compromise sensors in the network, and the attacker can execute only a clone node attack. Clone nodes can be set up anywhere in the hostile network [50]. We can only copy legitimate node. It has been assumed that no node with a new node ID cannot insert into the network. Besides, we can use an identity-based public key to allow such nodes to be recognized.


## 4. Fuzzy Logic-Based Clone Node Detection (FLCND) Scheme

This section explains the new node replication detection method in MWSN. As we know, the clone node attack consists of three main steps as follows:(a)
Attacker first captures the legitimate node from the network(b)
Attacker creates the clone by extracting the information from the captured node and then deploying the network’s clones(c)
Then, clone nodes can launch the different attacks inside the networkFLCND method works in three phases, and in each phase, the FLCND method works towards detecting the cloned node in WSN. The FLCND method is divided into three phases, which is explained as follows:Phase I: find the missing node from the networkThe base station initiates the detection phase after deployment of the sensor network. When an attacker steals any node from the network and creates the replica of legitimate nodes, the complete process of replication will take time, which will be greater than the node’s sleeping time. In WSN, the sensor node uses the sleeping time to save the energy/battery. In this phase, each node will check the presence of its neighbor. If any node is not missing from its position or does not give a response after sleeping time, the node will store the suspected node’s information and send the information of that node to the cluster head. We will use that information in the second phase for further processing.Phase II: create the Hot-ListIn phase II, the node will check whether any missing node is coming alive or not. If any missing node is alive, that node may be a clone node [51, 52]. The sensor broadcasts the message containing the node ID in the network. The receiving sensors will determine whether the same ID exists in their neighbors or not. If any node ID is presented in the network, then the clone node has been detected from WSN. The information of clone nodes has been sent to the base station for further processing. If the same ID is not in the network, then the information of suspected nodes is entered into the network’s Hot-List. There may be a possibility to add the cloned node later in the network. We will use the information entered in the Hot-List in the next phase.Phase III: fuzzy-based clone node detectionPhase III of the proposed method finds the cloned node using fuzzy logic (Algorithm1). The identification of clone nodes is predicted based on five parameters such as speed (SP), residual energy (RE), delay (DL), packet delivery rate (PDR), and false input value (FIV). The proposed method FLCND based on the fuzzy system will determine whether the node is a clone or not [53, 54]. The proposed method assumes that each node in MWSN has the same initial energy and transmission range. The four basic components are required to implement the FLCND method are shown in Figure 2 and explained below.(1)
Information: the sensor node sends all the information of suspected nodes from Hot-List in the form of a hello message. This communication occurs between nodes within the framework containing the parameters SP, RE, DL, PDR, and FIV.(2)
Data collection: the cluster head identifies and generates a list based on the hello message. The Hot-Lists, along with parameters, are stored in the database, as is the information for other nodes.(3)
Fuzzy interference system: while collecting data, the information of each suspected node is analyzed using the state of the parameter set. These parameters determine if a clone node exists on the network.(4)
Intra- and intercluster communication: after detecting the cloned node, the clone node’s information has been sent to other cluster heads and base stations for further processing. After sending the information, the cloned node will be removed from the sink node’s sensor network.Figure 2
Information flow of the proposed method FLCND.Algorithm 1: Phase III of the proposed method FLCND.
Algorithm: proposed clone node detection algorithm for FLCNDPhase I and II(1)
Begin(2)
for each noden of the network(3)
n = Encrypt (IDi,Li)//initialize each node with ID and Location(4)
for each noden of the network(5)
n[neighbor] = {idj, Lj,Timej }//each node finds its neighbor(6)
For each nodex(7)
Check the response from its neighbor(8)
if any nodex does not respond(9)
Wait for sleep time(10)
If response does not come(11)
Wait forXn time(12)
If response comes(13)
Check the clone ofx(14)
if clone present(15)
Send information to BS and initiate the trigger revocation procedure(16)
else(17)
Addxin the suspected list(18)
else(19)
Nodexwill be dead and send information to BS and go to step 6(20)
else(21)
go to step 6Phase III(22)
N = total suspected nodes(23)
W = alive sensor node in the current round(24)
for each node N(25)
Cluster head receives message from neighbor ofN(26)
nodeN.Info and calculate input parameter: nodeN.RE, nodeN.PDR nodeN.SP, nodeN.DL, nodeN.FIV //analysis through fuzzy inference system (FIS)(27)
nodeN.probability =  FISnodeN.RE,nodeN.PDR nodeN.SP,nodeN.DL,nodeN.FIV(28)
IfnodeN.probability==High(29)
nodeN.state=Clone(30)
AdvertiseClone_Message and initiate the trigger revocation procedure(31)
else(32)
go to step 24(33)
EndThe flowchart of the fuzzy logic-based clone node detection scheme is shown in Figure3.Figure 3
Flowchart of the proposed method FLCND.


### 4.1. Estimation of Metrics

This section calculates the fuzzification value of each input parameter. First, we will calculate the energy consumption of the sensor node.


#### 4.1.1. Energy Model Analysis

The first step of the analysis is to find the sensor node’s energy consumption during the transmission of data. Then, the residual energy is calculated by subtracting the energy consumption from the node’s initial energy. Different methods have been proposed to reduce the energy consumption in WSN [55, 56]. The energy consumption is found out by using a first-order radio model, as mentioned in [57, 58]. When the distance between the transmitter and receiver is less than the threshold r0, then the data directly communicate between nodes. Otherwise, it will use the multipath fading channel. Equation (1) expresses the transmitter energy (Etp) required for sending an l-bit packet at a distance r between transmitter and receiver. EEle needs the energy to operate the transceiver, which depends on factors, i.e., digital encoding and modulation, εf is the transmitter energy for free space, and εm stands for multipath transmitter energy.(1)Etpl,r=lEEle+lεrβ,(2)Etpl,r=lEEle+lεfr2,r<r0lEEle+lεmr4,r≥r0.The thresholdr0 is calculated according to the following formula:(3)r0=εfεm.The energy consumed by a node after receiving the message is given by(4)Erpl,r=lEEle.Furthermore, the detection process’s energy consumption is divided into two phases: clone detection phase and data transmission phase. First, we will compute the energy required to detect the cloned node. When any node is suspected on any node, it will send the information to the cluster headCH. The nodes will select the CH by sending the hello message among neighbor nodes. The energy required to transmit the hello message by CH is provided by equation (5). The first part calculates the energy required for transmitting the message. The next part represents the energy required to receive a message from other nodes h:(5)Emsg=mlEEle+lεfDt2+hπDt2A2lEEle.In equation (5), h indicates the number of CH in the range of CHr, where A is the network region and it also refers to the energy consumed by the CH to transmit the hello message to the other cluster head.(6)Emsg_CH=klEEle+lεfDt2+nπDt2A2klEEle.Similarly, equations (5)–(7) state the non-CH energy consumption where n is total nodes and k is cluster heads.(7)Emsg_mem=n−kEEle+lεfDt2+kπDtA22lEEle.When data have been received from the non-CH node, the cluster head (CH) is aggregated, compressed, and sent to the BS or another cluster head. The data are forwarded to the next cluster head or BS that depends on the threshold. For example, if a data packet is transmitted to the CH and its distance from the BS is smaller than TH-BS, the data packet is directly transmitted to the BS. Otherwise, CH forwards to a chosen/relay node from its neighbor. SupposeCHt as relay/forwarding node. As the free space propagation model has been using, CHt will directly interact with the BS. The energy consumed by CHr and CHt can be given by(8)EIM=Etpl,rCHr,CHt+Erpl,rCHt,BS+Erp=lEEle+εfr2CHr,CHt+lEEle+εfr2CHr,BS+lEEle=lεfr2CHr,CHt+r2CHr,BS+3lEEle.Obviously,r2CHr,CHt+r2CHr,BS plays a huge role in the total energy consumed during data transmission. Therefore, energy requires more for transmission when the distance is large. Thus, the entire detection phase of total energy consumption is given by(9)EClone_Detect=Emsg+2Emsg_ch+Emsg_mem.Each node transmits the data to its CH during the data transfer phase, which is given by(10)Emsg_data=ln−kEEle+εfD2.Therefore, the estimation of the remaining energy of each noden using data communication is given by (11)Eres=ESE−Eclone_Detect−Emsg_data,where ESE = initial energy node, EClone_Detect = energy consumed during detection, and Emsg_data = energy required for transmission of data.


#### 4.1.2. Packet Delivery Ratio (PDR)

PDR is the ratio packet forwarded by a node to receive from the neighboring nodes.(12)PDR=NFNR,where NF is the number of packets sent by the node and NR is the total packets received from its neighbor nodes. The fuzzification of N is based on the following equation:(13)PDRf=PDRNR<NF1−PDRNR=NF−1PDRNR>NF.


#### 4.1.3. Delay (DL)

It is the delay by a suspected node to the delay by its neighboring nodes.(14)DL=DFDR,where DF is a delay caused by the node and DR is the delay by the neighboring nodes. The fuzzification of DL is given by(15)DLf=DLDR<DF1−DLDR=DF−1DLDR>DF.


#### 4.1.4. False Input Data (FIP)

It is the ratio of the number of invalid inputs forwarded by a node to the number of packets forwarded by the neighbor nodes. The fuzzification of FIP is given by(16)FIPf=FIP.


#### 4.1.5. Speed (SP)

This parameter is used to measure the speed of the node. The following equation gives the fuzzification of SP:(17)SPf=SP.


### 4.2. Fuzzy Inference System

The fuzzy interference system’s first step consists of fuzzifications that determine the appropriate uncertainty for the input parameters. Figures4(a)–4(f) show the input and output variables’ members, respectively.Figure 4
Proposed method input variable for membership function (MF). (a) MF and residual energy. (b) MF and delay. (c) MF and packet delivery ratio. (d) MF versus false input value. (e) MF versus speed. (f) Output variables, membership function, and probability.
(a)(b)(c)(d)(e)(f)The knowledge base consists of the evaluation of rules and the integration of rule results. In the rule evaluation, fuzzy rules were applied to the inputs and obtained the output. Then result aggregation is performed, as shown in Table2. We have considered the five parameters to find the cloned node. When any clone node is inserted into the network, the node’s speed and residual energy will be higher than with the existing node in the network. When any node wants to launch an attack in the network, the PDR of that node will be low, and the delay will be high. The attacker node will give the false sensing value in the network. If more than two states meet the above condition, then a node’s probability as a clone node is high. When any two conditions satisfy, then the probability of clone node is medium. Otherwise, the node will consider as a normal node.Table 2
Aggregation of fuzzy rules.
InputsOutputFalse input dataSpeedPDRDelayResidual energyProbability to become clone node1LowHighLowHighLowMedium2HighHighLowHighLowHigh3LowHighLowLowLowLow4HighHighLowLowLowMedium5LowLowHighLowLowLow6HighLowHighLowLowMedium7LowHighHighLowLowMedium8HighHighHighLowLowHigh9LowLowLowHighLowLow10HighLowLowHighLowMedium11LowHighLowHighLowMedium12HighHighLowHighLowHigh13LowLowHighHighLowMedium14HighLowHighHighLowHigh15LowHighHighHighLowHigh16HighHighHighHighLowHigh17LowLowLowLowHighLow18HighLowLowLowHighMedium19LowHighLowLowHighMedium20HighHighLowLowHighHigh21LowLowHighLowHighMedium22HighLowHighLowHighHigh23LowHighHighLowHighHigh24HighHighHighLowHighHigh25LowLowLowHighHighMedium26HighLowLowHighHighHigh27LowHighLowHighHighHigh28HighHighLowHighHighHigh29LowLowHighHighHighHigh30HighLowHighHighHighHigh31LowHighHighHighHighHigh32HighHighHighHighHighHighThe ideal conditions of the node to become a clone node will be the following:(1)
Speed (SP) of the node will be higher than that of the normal node(2)
Delay (DL) will be high(3)
Packet delivery ratio (PDR) will be low(4)
Residual energy (RE) will be high(5)
False input value (FIV) will be highThe value ofP0, P1, P2, P3, and P4 is taken as 0, 0.3, 0.6, 0.8, and 1 in Figure 4(f). There are three output values, i.e., low, medium, and high, obtained from the output membership function and probability as symbolized in Figure 4(f). The probability of cloned nodes considers the medium value as best because the false detection will be low. If the proposed method considers the high probability value, the chance of false-positive detection will be high, which decreases the effectiveness of the proposed method.


## 4.1. Estimation of Metrics

This section calculates the fuzzification value of each input parameter. First, we will calculate the energy consumption of the sensor node.


### 4.1.1. Energy Model Analysis

The first step of the analysis is to find the sensor node’s energy consumption during the transmission of data. Then, the residual energy is calculated by subtracting the energy consumption from the node’s initial energy. Different methods have been proposed to reduce the energy consumption in WSN [55, 56]. The energy consumption is found out by using a first-order radio model, as mentioned in [57, 58]. When the distance between the transmitter and receiver is less than the threshold r0, then the data directly communicate between nodes. Otherwise, it will use the multipath fading channel. Equation (1) expresses the transmitter energy (Etp) required for sending an l-bit packet at a distance r between transmitter and receiver. EEle needs the energy to operate the transceiver, which depends on factors, i.e., digital encoding and modulation, εf is the transmitter energy for free space, and εm stands for multipath transmitter energy.(1)Etpl,r=lEEle+lεrβ,(2)Etpl,r=lEEle+lεfr2,r<r0lEEle+lεmr4,r≥r0.The thresholdr0 is calculated according to the following formula:(3)r0=εfεm.The energy consumed by a node after receiving the message is given by(4)Erpl,r=lEEle.Furthermore, the detection process’s energy consumption is divided into two phases: clone detection phase and data transmission phase. First, we will compute the energy required to detect the cloned node. When any node is suspected on any node, it will send the information to the cluster headCH. The nodes will select the CH by sending the hello message among neighbor nodes. The energy required to transmit the hello message by CH is provided by equation (5). The first part calculates the energy required for transmitting the message. The next part represents the energy required to receive a message from other nodes h:(5)Emsg=mlEEle+lεfDt2+hπDt2A2lEEle.In equation (5), h indicates the number of CH in the range of CHr, where A is the network region and it also refers to the energy consumed by the CH to transmit the hello message to the other cluster head.(6)Emsg_CH=klEEle+lεfDt2+nπDt2A2klEEle.Similarly, equations (5)–(7) state the non-CH energy consumption where n is total nodes and k is cluster heads.(7)Emsg_mem=n−kEEle+lεfDt2+kπDtA22lEEle.When data have been received from the non-CH node, the cluster head (CH) is aggregated, compressed, and sent to the BS or another cluster head. The data are forwarded to the next cluster head or BS that depends on the threshold. For example, if a data packet is transmitted to the CH and its distance from the BS is smaller than TH-BS, the data packet is directly transmitted to the BS. Otherwise, CH forwards to a chosen/relay node from its neighbor. SupposeCHt as relay/forwarding node. As the free space propagation model has been using, CHt will directly interact with the BS. The energy consumed by CHr and CHt can be given by(8)EIM=Etpl,rCHr,CHt+Erpl,rCHt,BS+Erp=lEEle+εfr2CHr,CHt+lEEle+εfr2CHr,BS+lEEle=lεfr2CHr,CHt+r2CHr,BS+3lEEle.Obviously,r2CHr,CHt+r2CHr,BS plays a huge role in the total energy consumed during data transmission. Therefore, energy requires more for transmission when the distance is large. Thus, the entire detection phase of total energy consumption is given by(9)EClone_Detect=Emsg+2Emsg_ch+Emsg_mem.Each node transmits the data to its CH during the data transfer phase, which is given by(10)Emsg_data=ln−kEEle+εfD2.Therefore, the estimation of the remaining energy of each noden using data communication is given by (11)Eres=ESE−Eclone_Detect−Emsg_data,where ESE = initial energy node, EClone_Detect = energy consumed during detection, and Emsg_data = energy required for transmission of data.


### 4.1.2. Packet Delivery Ratio (PDR)

PDR is the ratio packet forwarded by a node to receive from the neighboring nodes.(12)PDR=NFNR,where NF is the number of packets sent by the node and NR is the total packets received from its neighbor nodes. The fuzzification of N is based on the following equation:(13)PDRf=PDRNR<NF1−PDRNR=NF−1PDRNR>NF.


### 4.1.3. Delay (DL)

It is the delay by a suspected node to the delay by its neighboring nodes.(14)DL=DFDR,where DF is a delay caused by the node and DR is the delay by the neighboring nodes. The fuzzification of DL is given by(15)DLf=DLDR<DF1−DLDR=DF−1DLDR>DF.


### 4.1.4. False Input Data (FIP)

It is the ratio of the number of invalid inputs forwarded by a node to the number of packets forwarded by the neighbor nodes. The fuzzification of FIP is given by(16)FIPf=FIP.


### 4.1.5. Speed (SP)

This parameter is used to measure the speed of the node. The following equation gives the fuzzification of SP:(17)SPf=SP.


## 4.1.1. Energy Model Analysis

The first step of the analysis is to find the sensor node’s energy consumption during the transmission of data. Then, the residual energy is calculated by subtracting the energy consumption from the node’s initial energy. Different methods have been proposed to reduce the energy consumption in WSN [55, 56]. The energy consumption is found out by using a first-order radio model, as mentioned in [57, 58]. When the distance between the transmitter and receiver is less than the threshold r0, then the data directly communicate between nodes. Otherwise, it will use the multipath fading channel. Equation (1) expresses the transmitter energy (Etp) required for sending an l-bit packet at a distance r between transmitter and receiver. EEle needs the energy to operate the transceiver, which depends on factors, i.e., digital encoding and modulation, εf is the transmitter energy for free space, and εm stands for multipath transmitter energy.(1)Etpl,r=lEEle+lεrβ,(2)Etpl,r=lEEle+lεfr2,r<r0lEEle+lεmr4,r≥r0.The thresholdr0 is calculated according to the following formula:(3)r0=εfεm.The energy consumed by a node after receiving the message is given by(4)Erpl,r=lEEle.Furthermore, the detection process’s energy consumption is divided into two phases: clone detection phase and data transmission phase. First, we will compute the energy required to detect the cloned node. When any node is suspected on any node, it will send the information to the cluster headCH. The nodes will select the CH by sending the hello message among neighbor nodes. The energy required to transmit the hello message by CH is provided by equation (5). The first part calculates the energy required for transmitting the message. The next part represents the energy required to receive a message from other nodes h:(5)Emsg=mlEEle+lεfDt2+hπDt2A2lEEle.In equation (5), h indicates the number of CH in the range of CHr, where A is the network region and it also refers to the energy consumed by the CH to transmit the hello message to the other cluster head.(6)Emsg_CH=klEEle+lεfDt2+nπDt2A2klEEle.Similarly, equations (5)–(7) state the non-CH energy consumption where n is total nodes and k is cluster heads.(7)Emsg_mem=n−kEEle+lεfDt2+kπDtA22lEEle.When data have been received from the non-CH node, the cluster head (CH) is aggregated, compressed, and sent to the BS or another cluster head. The data are forwarded to the next cluster head or BS that depends on the threshold. For example, if a data packet is transmitted to the CH and its distance from the BS is smaller than TH-BS, the data packet is directly transmitted to the BS. Otherwise, CH forwards to a chosen/relay node from its neighbor. SupposeCHt as relay/forwarding node. As the free space propagation model has been using, CHt will directly interact with the BS. The energy consumed by CHr and CHt can be given by(8)EIM=Etpl,rCHr,CHt+Erpl,rCHt,BS+Erp=lEEle+εfr2CHr,CHt+lEEle+εfr2CHr,BS+lEEle=lεfr2CHr,CHt+r2CHr,BS+3lEEle.Obviously,r2CHr,CHt+r2CHr,BS plays a huge role in the total energy consumed during data transmission. Therefore, energy requires more for transmission when the distance is large. Thus, the entire detection phase of total energy consumption is given by(9)EClone_Detect=Emsg+2Emsg_ch+Emsg_mem.Each node transmits the data to its CH during the data transfer phase, which is given by(10)Emsg_data=ln−kEEle+εfD2.Therefore, the estimation of the remaining energy of each noden using data communication is given by (11)Eres=ESE−Eclone_Detect−Emsg_data,where ESE = initial energy node, EClone_Detect = energy consumed during detection, and Emsg_data = energy required for transmission of data.


## 4.1.2. Packet Delivery Ratio (PDR)

PDR is the ratio packet forwarded by a node to receive from the neighboring nodes.(12)PDR=NFNR,where NF is the number of packets sent by the node and NR is the total packets received from its neighbor nodes. The fuzzification of N is based on the following equation:(13)PDRf=PDRNR<NF1−PDRNR=NF−1PDRNR>NF.


## 4.1.3. Delay (DL)

It is the delay by a suspected node to the delay by its neighboring nodes.(14)DL=DFDR,where DF is a delay caused by the node and DR is the delay by the neighboring nodes. The fuzzification of DL is given by(15)DLf=DLDR<DF1−DLDR=DF−1DLDR>DF.


## 4.1.4. False Input Data (FIP)

It is the ratio of the number of invalid inputs forwarded by a node to the number of packets forwarded by the neighbor nodes. The fuzzification of FIP is given by(16)FIPf=FIP.


## 4.1.5. Speed (SP)

This parameter is used to measure the speed of the node. The following equation gives the fuzzification of SP:(17)SPf=SP.


## 4.2. Fuzzy Inference System

The fuzzy interference system’s first step consists of fuzzifications that determine the appropriate uncertainty for the input parameters. Figures4(a)–4(f) show the input and output variables’ members, respectively.Figure 4
Proposed method input variable for membership function (MF). (a) MF and residual energy. (b) MF and delay. (c) MF and packet delivery ratio. (d) MF versus false input value. (e) MF versus speed. (f) Output variables, membership function, and probability.
(a)(b)(c)(d)(e)(f)The knowledge base consists of the evaluation of rules and the integration of rule results. In the rule evaluation, fuzzy rules were applied to the inputs and obtained the output. Then result aggregation is performed, as shown in Table2. We have considered the five parameters to find the cloned node. When any clone node is inserted into the network, the node’s speed and residual energy will be higher than with the existing node in the network. When any node wants to launch an attack in the network, the PDR of that node will be low, and the delay will be high. The attacker node will give the false sensing value in the network. If more than two states meet the above condition, then a node’s probability as a clone node is high. When any two conditions satisfy, then the probability of clone node is medium. Otherwise, the node will consider as a normal node.Table 2
Aggregation of fuzzy rules.
InputsOutputFalse input dataSpeedPDRDelayResidual energyProbability to become clone node1LowHighLowHighLowMedium2HighHighLowHighLowHigh3LowHighLowLowLowLow4HighHighLowLowLowMedium5LowLowHighLowLowLow6HighLowHighLowLowMedium7LowHighHighLowLowMedium8HighHighHighLowLowHigh9LowLowLowHighLowLow10HighLowLowHighLowMedium11LowHighLowHighLowMedium12HighHighLowHighLowHigh13LowLowHighHighLowMedium14HighLowHighHighLowHigh15LowHighHighHighLowHigh16HighHighHighHighLowHigh17LowLowLowLowHighLow18HighLowLowLowHighMedium19LowHighLowLowHighMedium20HighHighLowLowHighHigh21LowLowHighLowHighMedium22HighLowHighLowHighHigh23LowHighHighLowHighHigh24HighHighHighLowHighHigh25LowLowLowHighHighMedium26HighLowLowHighHighHigh27LowHighLowHighHighHigh28HighHighLowHighHighHigh29LowLowHighHighHighHigh30HighLowHighHighHighHigh31LowHighHighHighHighHigh32HighHighHighHighHighHighThe ideal conditions of the node to become a clone node will be the following:(1)
Speed (SP) of the node will be higher than that of the normal node(2)
Delay (DL) will be high(3)
Packet delivery ratio (PDR) will be low(4)
Residual energy (RE) will be high(5)
False input value (FIV) will be highThe value ofP0, P1, P2, P3, and P4 is taken as 0, 0.3, 0.6, 0.8, and 1 in Figure 4(f). There are three output values, i.e., low, medium, and high, obtained from the output membership function and probability as symbolized in Figure 4(f). The probability of cloned nodes considers the medium value as best because the false detection will be low. If the proposed method considers the high probability value, the chance of false-positive detection will be high, which decreases the effectiveness of the proposed method.


## 5. Experiment Result and Performance Evaluation

The suggested FLCND method has been analyzed using Network Simulator (NS2). The simulation network consists of 100 mobile sensor nodes that have been propagated in a 750 × 750-meter area with a simulation time of 10 seconds. Table3 summarizes the simulation parameters. Two different simulation cases have been implemented to verify the efficiency of the proposed method. In the first case, the standard network without the proposed method has been simulated, in which the attacker node exists in the network that will lodge different types of attacks inside the network. The second case consists of the same network, but the proposed method has been used in it. The network also has a clone node inside the network.Table 3
Simulation parameters.
ParametersValuesPacket size512 bytesSimulation time10 sTrafficCBRNumber of nodes100Mobility moduleRandom waypointTransmission range150 metersSpeed10–40 m/sWe evaluate the performance of the network in both cases using four performance parameters: PDR, packet loss, end-to-end (E-E) delay, and residual power .(a)
PDR: the second parameter is PDR, which measures the packet’s ratio arriving at the receiver node to the number of packets sent. The comparison of the PDR of both scenarios is shown in Figure5. The green line in the figure represents the PDR of the 1st scenario where the proposed method has not been used in the network and replicate nodes are present. The red line in the figure represents the PDR of the 2nd scenario where the proposed method has been implemented in a sensor network when the attacker node is in the network, and the packet delivery rate is low compared to the 2nd scenario where the proposed method has been implemented. The 2nd scenario using the FLCND method delivers 57% more packets compared to the 1st scenario.(b)
End-to-end delay: the average time of a packet sent to the destination node from the source node. The comparison of the end-to-end delay for both scenarios is shown in Figure6. The first scenario consists of the network containing the cloned nodes without the proposed method, and the 2nd scenario is the network having the clone nodes with the proposed method. The green line in the figure indicates the end-to-end delay in the first scenario. The E-E delay is high in this case at the attacker node. The red line in the figure shows the E2E delay for the second scenario. The E-E delay is low compared to the first scenario as clone nodes are detected by the proposed method and cannot affect the network’s performance. Therefore, we can say that the clone node attack does not affect the second scenario of the network by using the proposed method.(c)
Packet loss: it is represented by the packet which does not reach the target node. Figure7 shows a comparison of the packet loss in both situations. In the first case, the packet loss is higher due to clone nodes, while in the second scenario, the packet loss rate is lower due to the detection of clone nodes. Based on this result, we can conclude that the cloned node does not affect the network using the FLCND method.(d)
Residual energy: the next parameter is the residual energy [51, 56, 58], which is calculated as the total energy minus the power consumed by the node during data transmission. When the proposed method is not implemented in the network containing replicated nodes, the green line in the figure represents the residual energy in Figure 8. The red line in the figure shows the residual energy of the proposed method. However, the scenario using the FLCND method consumes 37% less energy than the 1st scenario. Therefore, the proposed method is also optimal in energy consumption.Figure 5
Comparison of packet delivery ratio.Figure 6
Comparison of end-to-end delay.Figure 7
Comparison of packet loss.Figure 8
Comparison of residual energy.


### 5.1. Comparison of FLCND with Existing Methods

To calculate the proposed solution’s effectiveness, we compared the work of FLCND with existing methods HO, XED, CBCD, and EDD. All five methods have been simulated by using an NS2 simulator by varying the speed and number of sensors from 20 to 200 and 10 m/s to 40 m/s. We have compared the FLCND method with HO, XED, CBCD, and EDD methods in total energy consumption, detection rate, and false-negative rate. Figures9–11 demonstrate the result of the comparison of the proposed method with existing methods.Figure 9
Comparison of total energy consumed at a speed of (a) 10 m/s, (b) 20 m/s, (c) 30 m/s, and (d) 40 m/s.
(a)(b)(c)(d)Figure 10
Comparison of detection rate at a speed of (a) 10 m/s, (b) 20 m/s, (c) 30 m/s, and (d) 40 m/s.
(a)(b)(c)(d)Figure 11
Comparative analysis of false-positive rate at a speed of (a) 10 m/s, (b) 20 m/s, (c) 30 m/s, and (d) 40 m/s.
(a)(b)(c)(d)


#### 5.1.1. Energy Consumption

First, we have compared the total energy consumption of the detection methods by varying the total sensor from 20 to 200. We know that when any sensor transfers or processes the data using any detection method, the node will consume some energy. The lower energy cost indicates the higher efficiency of the detection method. Figures9(a)–9(d) show the energy consumption of five clone node detection methods, where the number of nodes varies from 20 to 200, and the speed has changed from 10 to 40 m/s. The figures conclude that the total energy consumed of the proposed FLCND method has less among HO, XED, CBCD, and EDD methods. We calculate the total energy consumed for each case and determine the FLCND consumes 41% lower energy to the HO method, 27% lower than the XED method, 46% lower than the CBCD method, and 54% lower than to EDD method. The less energy consumption in FLCND may be due to its approach for the detection of clone nodes. The detection method of the FLCND method focuses only on those nodes which are suspected, whereas that of the HO, XED, CBCD, and EDD methods focuses on the complete network.


#### 5.1.2. Clone Detection Rate

The second parameter is the detection rate of clone nodes. The detection rate of a clone node is calculated as the number of clone nodes detected from the total number of clone nodes existing in the network and then multiply it by 100. Figures10(a)–10(d) show the detection rate of HO, XED, CBCD, EDD, and FLCND methods by varying the number of nodes and the speed of nodes. The figure shows that the proposed method, FLCND, has a 67% higher detection rate than the HO method, 65% higher detection rate than the XED method, 46% higher detection rate than the CBCD method, and 53% higher detection rate than the EDD method. For generating the cloned node, the legitimate node must be stolen from the network. FLCND method finds the missing node from the network so that it may be the reason for the higher detection rate in FLCND.


#### 5.1.3. False-Positive Rate

The next parameter is the wrongly detected clones known as false positive. Figures11(a)–11(d) show the false-positive detection rate of XED, FLCND, HO, CBCD, and EDD methods concerning the number of sensor nodes and speed. In all cases, the false detection rate of the proposed FLCND approach is 21% greater than the XED approach, 19% greater than the HO approach, 16% greater than the CBCD approach, and 15% of the EDD method. As the detection rate of FLCND is higher than other existing methods, the false-positive rate of FLCND is also higher.


#### 5.1.4. False-Negative Rate

The next parameter is the false-negative detection rate in which the clone mobile node is not identified as a clone. Figures12(a)–12(d) show the false detection rate of XED, FLCND, HO, CBCD, and EDD methods concerning the number of sensor nodes and speed. In all cases, the false detection rate of the proposed FLCND approach is 31% less than the XED approach, 28% less than the HO approach, 29% less than the CBCD approach, and 29% of the EDD method.Figure 12
Comparative analysis of false-negative rate at a speed of (a) 10 m/s, (b) 20 m/s, (c) 30 m/s, and (d) 40 m/s.
(a)(b)(c)(d)


## 5.1. Comparison of FLCND with Existing Methods

To calculate the proposed solution’s effectiveness, we compared the work of FLCND with existing methods HO, XED, CBCD, and EDD. All five methods have been simulated by using an NS2 simulator by varying the speed and number of sensors from 20 to 200 and 10 m/s to 40 m/s. We have compared the FLCND method with HO, XED, CBCD, and EDD methods in total energy consumption, detection rate, and false-negative rate. Figures9–11 demonstrate the result of the comparison of the proposed method with existing methods.Figure 9
Comparison of total energy consumed at a speed of (a) 10 m/s, (b) 20 m/s, (c) 30 m/s, and (d) 40 m/s.
(a)(b)(c)(d)Figure 10
Comparison of detection rate at a speed of (a) 10 m/s, (b) 20 m/s, (c) 30 m/s, and (d) 40 m/s.
(a)(b)(c)(d)Figure 11
Comparative analysis of false-positive rate at a speed of (a) 10 m/s, (b) 20 m/s, (c) 30 m/s, and (d) 40 m/s.
(a)(b)(c)(d)


### 5.1.1. Energy Consumption

First, we have compared the total energy consumption of the detection methods by varying the total sensor from 20 to 200. We know that when any sensor transfers or processes the data using any detection method, the node will consume some energy. The lower energy cost indicates the higher efficiency of the detection method. Figures9(a)–9(d) show the energy consumption of five clone node detection methods, where the number of nodes varies from 20 to 200, and the speed has changed from 10 to 40 m/s. The figures conclude that the total energy consumed of the proposed FLCND method has less among HO, XED, CBCD, and EDD methods. We calculate the total energy consumed for each case and determine the FLCND consumes 41% lower energy to the HO method, 27% lower than the XED method, 46% lower than the CBCD method, and 54% lower than to EDD method. The less energy consumption in FLCND may be due to its approach for the detection of clone nodes. The detection method of the FLCND method focuses only on those nodes which are suspected, whereas that of the HO, XED, CBCD, and EDD methods focuses on the complete network.


### 5.1.2. Clone Detection Rate

The second parameter is the detection rate of clone nodes. The detection rate of a clone node is calculated as the number of clone nodes detected from the total number of clone nodes existing in the network and then multiply it by 100. Figures10(a)–10(d) show the detection rate of HO, XED, CBCD, EDD, and FLCND methods by varying the number of nodes and the speed of nodes. The figure shows that the proposed method, FLCND, has a 67% higher detection rate than the HO method, 65% higher detection rate than the XED method, 46% higher detection rate than the CBCD method, and 53% higher detection rate than the EDD method. For generating the cloned node, the legitimate node must be stolen from the network. FLCND method finds the missing node from the network so that it may be the reason for the higher detection rate in FLCND.


### 5.1.3. False-Positive Rate

The next parameter is the wrongly detected clones known as false positive. Figures11(a)–11(d) show the false-positive detection rate of XED, FLCND, HO, CBCD, and EDD methods concerning the number of sensor nodes and speed. In all cases, the false detection rate of the proposed FLCND approach is 21% greater than the XED approach, 19% greater than the HO approach, 16% greater than the CBCD approach, and 15% of the EDD method. As the detection rate of FLCND is higher than other existing methods, the false-positive rate of FLCND is also higher.


### 5.1.4. False-Negative Rate

The next parameter is the false-negative detection rate in which the clone mobile node is not identified as a clone. Figures12(a)–12(d) show the false detection rate of XED, FLCND, HO, CBCD, and EDD methods concerning the number of sensor nodes and speed. In all cases, the false detection rate of the proposed FLCND approach is 31% less than the XED approach, 28% less than the HO approach, 29% less than the CBCD approach, and 29% of the EDD method.Figure 12
Comparative analysis of false-negative rate at a speed of (a) 10 m/s, (b) 20 m/s, (c) 30 m/s, and (d) 40 m/s.
(a)(b)(c)(d)


## 5.1.1. Energy Consumption

First, we have compared the total energy consumption of the detection methods by varying the total sensor from 20 to 200. We know that when any sensor transfers or processes the data using any detection method, the node will consume some energy. The lower energy cost indicates the higher efficiency of the detection method. Figures9(a)–9(d) show the energy consumption of five clone node detection methods, where the number of nodes varies from 20 to 200, and the speed has changed from 10 to 40 m/s. The figures conclude that the total energy consumed of the proposed FLCND method has less among HO, XED, CBCD, and EDD methods. We calculate the total energy consumed for each case and determine the FLCND consumes 41% lower energy to the HO method, 27% lower than the XED method, 46% lower than the CBCD method, and 54% lower than to EDD method. The less energy consumption in FLCND may be due to its approach for the detection of clone nodes. The detection method of the FLCND method focuses only on those nodes which are suspected, whereas that of the HO, XED, CBCD, and EDD methods focuses on the complete network.


## 5.1.2. Clone Detection Rate

The second parameter is the detection rate of clone nodes. The detection rate of a clone node is calculated as the number of clone nodes detected from the total number of clone nodes existing in the network and then multiply it by 100. Figures10(a)–10(d) show the detection rate of HO, XED, CBCD, EDD, and FLCND methods by varying the number of nodes and the speed of nodes. The figure shows that the proposed method, FLCND, has a 67% higher detection rate than the HO method, 65% higher detection rate than the XED method, 46% higher detection rate than the CBCD method, and 53% higher detection rate than the EDD method. For generating the cloned node, the legitimate node must be stolen from the network. FLCND method finds the missing node from the network so that it may be the reason for the higher detection rate in FLCND.


## 5.1.3. False-Positive Rate

The next parameter is the wrongly detected clones known as false positive. Figures11(a)–11(d) show the false-positive detection rate of XED, FLCND, HO, CBCD, and EDD methods concerning the number of sensor nodes and speed. In all cases, the false detection rate of the proposed FLCND approach is 21% greater than the XED approach, 19% greater than the HO approach, 16% greater than the CBCD approach, and 15% of the EDD method. As the detection rate of FLCND is higher than other existing methods, the false-positive rate of FLCND is also higher.


## 5.1.4. False-Negative Rate

The next parameter is the false-negative detection rate in which the clone mobile node is not identified as a clone. Figures12(a)–12(d) show the false detection rate of XED, FLCND, HO, CBCD, and EDD methods concerning the number of sensor nodes and speed. In all cases, the false detection rate of the proposed FLCND approach is 31% less than the XED approach, 28% less than the HO approach, 29% less than the CBCD approach, and 29% of the EDD method.Figure 12
Comparative analysis of false-negative rate at a speed of (a) 10 m/s, (b) 20 m/s, (c) 30 m/s, and (d) 40 m/s.
(a)(b)(c)(d)


## 6. Conclusion

An FLCND method to detect the cloned node is designed. The parameters of FLCND are falsely input value, speed, PDR, delay, and residual power, which are processed as fuzzy logic inputs, and based on the outcome, a clone node is detected in WSN. The FLCND method’s performance was evaluated using PDR, packet loss, E-E delay, and residual energy parameters in the NS2 simulator. Two different scenarios have been implemented in NS2, where the first scenario is a normal network which is having clone nodes, and the second case consists of the proposed method and the cloned nodes in the network. After comparing the results, the FLCND method consumes less energy and high packet delivery rate. We can conclude that the cloned node does not affect the network due to the FLCND method. We have also compared the proposed method with EDD, HO, CBCD, and XED in terms of total energy consumed, false-negative rate, and detection rate. FLCNDS consumes less than 27% energy with each method. FLCND has a 67% higher detection rate than the HO method, 65% higher detection rate than the XED method, 46% higher detection rate than the CBCD method, and 53% higher detection rate than the EDD method. The false-negative detection rate of the proposed FLCND approach is less than 28% of each method. We have found that the FLCND has less energy consummation and a better detection rate compared to XED, HO, CBCD, and EDD methods. In the future, we will simulate the proposed algorithm by changing the number of nodes from 1000 to 10000. We will evaluate the FLCND method’s performance with other parameters and compare it with other existing methods.In the near future, we will utilize various metaheuristic techniques to enhance the results further. Also, the proposed model will be tested on other kinds of wireless technologies.



---

*Source: 9924478-2021-04-26.xml*