Table 5.

Metrics for detecting attacks and evaluating their effectiveness.

Metric	Attacks
	DoS	SYN-Flood	Black Hole
Dlg (general variance of the network load)	+	+	+
Residual energy (RE)	-	+	*
CPU load (%)	+	+	-
LTotal (total number of network packets)	+	*	-
OFPi (oversupply of forwarded packets (OFP))	+	+	-
ODPi (oversupply of dropped packets)	-	*	+
$De{v}_{N,i,}{}_s$, $De{v}_{N,i,}{}_r$ (deviations from the overall average parameter for the number of packets sent and received)	+	+	+
Ratios,r (ratio of sent to received packets)	+	+	+

+ means that there is a clear sign of an attack and significant changes occur under the influence of an attack; - means that there are no changes in victim parameters when the node is under the influence of an attack; * denotes the indirect sign of an attack that may undergo minor changes.