ABSTRACT
Ioannis Krontiris etc. are the first to describe the conditions WSN IDS should satisfy [3,4]. And based on the assumption that the amount of normal nodes is larger than malicious nodes, they proposed a basic architecture of distributed IDS. But the proposed local detection technology is not suitable for constantly updated network. But it is instructive when to design a new detection method based on collaboration between neighbour nodes.
