Abstract
Wireless sensor networks (WSNs) have been increasingly deployed for both civil and military applications under harsh, unpredictable or open environments. Such environments create opportunities for the intruders to launch a variety of attacks on multiple protocol layers in WSNs. This paper proposes a behavior monitoring and analysis framework for large scale WSNs. Within this framework, we address the monitor node selection problem and introduce a dedicated monitor nodes approach and propose a greedy algorithm for selecting monitor nodes. The simulation results show that the greedy algorithm is efficient in terms of monitor node set size.