JAMMERS: FROM VILLAINS TO DEFENDERS — WHEN INTERFERING CAN HELP PROTECT

From jamming in ZigBee sensor networks to Jammer Networks (DJN) to mitigate DoS in wireless networks

Abstract: This work analyzes the role of jammers in wireless networks, discussing how such devices can act both as attack agents and as potential components of defensive strategies. Based on an experimental study of jamming attacks against a wireless sensor network composed of MicaZ nodes and the IEEE 802.15.4/ZigBee standard, it evaluates the impact of transmission power, node synchronization and hardware limitations on metrics such as packet delivery ratio, latency and RSSI, contrasting real‑world and simulation results. In parallel, it examines Distributed Jammer Network (DJN) models, in which multiple low‑power jammers are organized as an interfering “network layer”, analyzed through percolation theory, Packet Delivery Ratio (PDR) and Packet Success Rate (PSR) to understand their influence on target network connectivity. Combining these two perspectives, the study explores the “jammers as villains and defenders” duality, assessing to what extent controlled interference can be used as a countermeasure in specific scenarios, for example to degrade malicious flows or in educational and CTF environments focused on wireless security. It highlights limitations of purely simulated models, emphasizes technical, legal and ethical risks of jamming, and proposes guidelines to use jamming experiments and metrics responsibly in network design and security training.

Keywords: Jamming; Jammers; Wireless sensor networks; ZigBee; Distributed Jammer Network; Denial of Service(DoS); Anti‑jamming.

INTRODUCTION

The growing dependence on wireless communication in scenarios such as the Internet of Things (IoT), wireless sensor networks and critical infrastructures makes the availability of the radio channel a central security requirement. In this context, jamming attacks — in which an adversary deliberately injects interference to degrade or disrupt legitimate transmissions — stand out as an especially effective form of denial of service because they exploit the open and shared nature of the spectrum rather than protocol-level vulnerabilities.​

Jammers are often portrayed solely as “villains” capable of taking entire networks offline, but experimental results in wireless sensor networks reveal a more nuanced picture. In a sensor network based on MicaZ nodes with CC2420 radios and the IEEE 802.15.4/ZigBee standard, the impact of a proactive jammer on packet delivery ratio and latency depends not only on the attacker’s transmission power, but also on node synchronization and hardware limitations, leading to noticeable discrepancies between real testbeds and simulations. This behavior challenges overly idealized models that treat jamming as a simple binary on/off impairment of the channel.​

At the same time, research on Distributed Jammer Networks (DJNs) has introduced a complementary perspective in which multiple low-power jammers are organized as an interfering “network layer” whose collective effect on the target’s connectivity is studied using percolation theory and metrics such as Packet Delivery Ratio (PDR) and Packet Success Rate (PSR). In this view, controlled interference can be framed not only as an offensive tool, but also as a potential defensive mechanism in carefully constrained scenarios, for example to degrade malicious flows or to create temporary protection zones around critical assets, provided that technical, legal and ethical constraints are respected.​

This work aims to connect these two viewpoints under the theme “jammers: from villains to defenders”. It combines an experimental study of medium-access jamming in a ZigBee-based sensor network with the conceptual analysis of DJNs as an additional “interfering layer” over a wireless system, highlighting how metrics such as PDR, latency, RSSI and channel sensing time can capture jamming effects in both local and large-scale settings. By contrasting real and simulated behavior, and by discussing the Brazilian regulatory framework that strictly limits the deployment of signal blockers to specific public entities, the paper seeks to outline how jamming can be used responsibly in laboratory and CTF environments as an educational and design tool, without encouraging misuse in operational networks.

DEVELOPMENT

JAMMING FUNDAMENTALS IN WIRELESS NETWORKS

Jamming can be defined as an attack in which a device injects radio signals with the explicit goal of degrading or interrupting legitimate communications, typically targeting the physical or MAC layer instead of cryptographic or authentication mechanisms (XU et al., 2005; XU et al., 2006). By reducing the signal-to-noise ratio or persistently occupying the medium, the jammer forces collisions, corrupts frames and may prevent carrier sensing, leading to severe performance degradation even when higher-layer protocols are correctly configured (MPITZIOPOULOS et al., 2009).​

The literature usually distinguishes different jammer profiles, such as constant, random, reactive and deceptive jammers, which range from continuous noise emission to selective interference triggered by specific transmission patterns (MPITZIOPOULOS et al., 2009). Each profile leaves a different “fingerprint” on performance metrics like packet delivery ratio (PDR), latency, received signal strength indicator (RSSI) and carrier sensing time (CST), which in turn affects both the impact of the attack and the complexity of detection (MISRA; SENDRA; GONZÁLEZ, 2010; AL‑MAHDI et al., 2019). With the rise of IoT and pervasive sensing, these threats now affect civilian and industrial environments that rely on low-power technologies such as IEEE 802.15.4/ZigBee, often deployed in hard‑to‑reach locations, where intentional interference becomes a realistic denial-of-service vector (RAMYA; SHANMUGARAJ; PRABAKARAN, 2011; GONZÁLEZ et al., 2021).​​

JAMMERS AS “VILLAINS”: MICAZ/ZIGBEE EXPERIMENTS

In the context of wireless sensor networks, experimental work with MicaZ motes equipped with CC2420 radios and running TinyOS has shown how even a simple proactive jammer can significantly affect medium access (GIELOW; SANTOS; NOGUEIRA, 20–). In this scenario, two nodes periodically broadcast messages using IEEE 802.15.4/ZigBee, while a third node acts as a jammer, physically positioned to interfere with the communication between the legitimate nodes (GIELOW; SANTOS; NOGUEIRA, 20–).

The jammer is implemented by modifying the TinyOS communication stack, particularly the CSMA sublayer, disabling Clear Channel Assessment and reducing backoff intervals so that the node transmits almost continuously even when the channel is busy (LEVIS et al., 2004; GIELOW; SANTOS; NOGUEIRA, 20–). Instead of crafting protocol‑compliant frames, the jammer sends fixed‑content packets to maximize channel occupancy and focus on physical‑layer interference effects (GIELOW; SANTOS; NOGUEIRA, 20–). Experiments vary the jammer’s transmission power while keeping the legitimate nodes at a fixed level, and measure PDR and latency over time (GIELOW; SANTOS; NOGUEIRA, 20–). The results indicate that the impact of jamming does not follow a simple monotonic relationship with power: synchronization effects and MicaZ hardware constraints can cause situations where further increasing jammer power does not proportionally reduce PDR or may even slightly improve it due to altered collision patterns (GIELOW; SANTOS; NOGUEIRA, 20–; GONZÁLEZ et al., 2021).​

When the same code is executed in the Avrora emulator, under tighter timing and more idealized radio models, the observed degradation in PDR tends to be more severe and more strictly correlated with jammer power than in the physical testbed (GIELOW; SANTOS; NOGUEIRA, 20–). This discrepancy suggests that purely simulated environments may overestimate the effectiveness of jammers with capabilities similar to the legitimate nodes, emphasizing the need for cautious interpretation of simulation‑based studies on jamming and for complementary experimental validation (MPITZIOPOULOS et al., 2009; HOSSEIN et al., 2022).​

JAMMERS AS “DEFENDERS”: DISTRIBUTED JAMMER NETWORKS (DJN)

Complementary to the single‑attacker view, the concept of a Distributed Jammer Network (DJN) considers multiple low‑power jammers distributed in space, forming an “interfering layer” over a target network (MOHANRAJ; MUMMOORTHY, 2015). The collective effect of this layer on connectivity is often analyzed using percolation theory, where jammer density and spatial distribution determine whether the target network maintains enough connected components to ensure service or undergoes a phase transition towards global disconnection (MOHANRAJ; MUMMOORTHY, 2015).

In DJN models, performance metrics such as PDR and PSR, as well as indicators like RSSI and CST, are used to characterize and detect the presence of coordinated interference (MOHANRAJ; MUMMOORTHY, 2015; AL‑MAHDI et al., 2019). For example, a region where RSSI remains high while PDR drops sharply, or where CST grows consistently due to a perceived “busy” channel, may reveal intentional jamming rather than natural noise (GONZÁLEZ et al., 2021).

From a defensive standpoint, these ideas inspire conceptual strategies in which friendly or protective jamming is used to disrupt malicious control channels, shield sensitive areas or enforce communication policies, provided that interference is carefully controlled and constrained to specific scenarios (MARTINOVIC; PICHOTA; SCHMITT, 2009; LI et al., 2011; TANG et al., 2016).​

METRICS, ENERGY AND PRACTICAL LIMITS

Bringing together the MicaZ/ZigBee experiments and the DJN perspective offers a richer understanding of jammers in wireless networks. The former highlights that the impact of a jammer built on the same hardware as the victim nodes is highly dependent on protocol details and timing, while the latter stresses how jammer density and topology govern connectivity at larger scales, even when individual devices operate at low power (GIELOW; SANTOS; NOGUEIRA, 20–; MOHANRAJ; MUMMOORTHY, 2015).​

In both cases, performance metrics such as PDR, PSR, latency, RSSI and CST prove complementary and necessary to discriminate between natural interference, constant jamming, reactive jamming and DJN‑induced degradation (MPITZIOPOULOS et al., 2009; MISRA; SENDRA; GONZÁLEZ, 2010; AL‑MAHDI et al., 2019). In sensor networks, energy adds another dimension: routes that appear faster or more resilient to jamming may concentrate retransmissions on a small set of relay nodes, accelerating battery depletion and creating “energy holes” that shorten network lifetime (WERNER‑ALLEN et al., 2006; GONZÁLEZ et al., 2021). Designing routing strategies that balance performance under interference with energy consumption becomes essential for long‑lived deployments (AL‑MAHDI et al., 2019; GONZÁLEZ et al., 2021);

DETECTION AND ENERGY IN WSNS

Recent work on wireless sensor networks indicates that simple performance metrics such as PDR, RSSI and energy consumption can be combined to distinguish natural degradation from jamming scenarios, including collaborative schemes among sensor nodes (AL‑MAHDI et al., 2019; GONZÁLEZ et al., 2021). Newer approaches employ machine learning and TinyML at the edge to analyze these metrics in near real time, enabling low‑power devices to identify anomalous patterns without relying on external infrastructure, which is particularly relevant for IoT and industrial environments (HUSSAIN; SAQIB, 2011; SANTOS; REIS; SILVA, 2022).​

From an energy perspective, jamming detection mechanisms cannot introduce excessive overhead without compromising network lifetime, especially when nodes are battery‑powered or rely on energy harvesting (VIJAYAKUMAR et al., 2021; LANGENDOERFER et al., 2011). Efficient strategies tend to leverage measurements already available at the physical and MAC layers, combining them with duty‑cycling techniques and lightweight monitoring routines, so that channel observation and anomaly detection remain compatible with the stringent resource constraints of sensor platforms (AL‑MAHDI et al., 2019; GONZÁLEZ et al., 2021).

BRAZILIAN REGULATORY FRAMEWORK FOR SIGNAL JAMMING

Any attempt to frame jamming as a defensive tool must also respect regulatory constraints. In Brazil, signal jamming devices are tightly regulated and may be operated only by specific public bodies under the conditions defined by Anatel Resolution nº 760/2023, which approves the Regulation on Radiocommunication Signal Blockers, and by subsequent technical acts that specify authorized entities, frequency ranges, emission limits and deployment requirements (BRASIL, 1997; BRASIL, 2023a; AGÊNCIA NACIONAL DE TELECOMUNICAÇÕES, 2024).

As a consequence, practical uses of jamming in defensive contexts are largely restricted to controlled academic, laboratory or simulated environments, where they can support the design of more resilient networks and the training of security professionals without encouraging illicit interference in operational systems, in line with ITU provisions on harmful interference and unnecessary transmissions (UNIÃO INTERNACIONAL DE TELECOMUNICAÇÕES, 2024).

CONCLUSION

The studies and scenarios discussed in this work show that jamming is no longer confined to classical electronic warfare, but directly impacts wireless sensor networks, IoT deployments and critical infrastructures built on technologies such as IEEE 802.15.4/ZigBee. Experimental results with MicaZ nodes indicate that, even when the jammer has capabilities similar to the legitimate devices, protocol details, timing and hardware limitations can make the attack behaviour more complex than suggested by purely theoretical models, while the Distributed Jammer Network concept highlights the role of jammer density and topology in connectivity loss at larger scales. Taken together, these findings reinforce that jamming should not be viewed solely as an “on–off” blackout of the channel, but rather as a graded degradation that manifests in metrics such as PDR, PSR, latency, RSSI and CST.​

From a practical perspective, the use of performance metrics as a tool for detection and mitigation appears promising, especially when combined with collaborative schemes among network nodes and low‑cost machine learning techniques deployed at the edge. Recent advances in jamming detection for IoT networks using TinyML and adaptive edge‑AI architectures suggest that it is possible to identify attacks with good accuracy and modest overhead, preserving device energy while maintaining service quality in severely resource‑constrained settings. At the same time, the Brazilian regulatory framework, consolidated by Anatel Resolution nº 760/2023 and related acts, makes it clear that the operation of signal blockers is a prerogative of specific public bodies and must follow strict technical limits, which reinforces the academic and experimental character of any proposal that treats jamming as a “defensive tool”.​

Future work naturally points towards three complementary directions. First, controlled experiments that better approximate field conditions, bridging the gap between laboratory testbeds and real deployments in industrial and urban environments. Second, the development of detection mechanisms that integrate multi‑layer metrics with embedded machine learning models capable of near real‑time operation on low‑power devices. Third, the exploration of network designs that are inherently more resilient to jamming, for example through adaptive protocols, spectrum spreading techniques or channel‑hopping schemes, so that WSN and IoT systems become more robust against physical‑layer denial‑of‑service attacks without violating the legal constraints that govern intentional interference in the radio spectrum.

REFERENCES

ASSOCIAÇÃO BRASILEIRA DE NORMAS TÉCNICAS. NBR 6023: Informação e documentação — Referências — Elaboração. Rio de Janeiro: ABNT, 2018. Disponível em: https://funesa.se.gov.br/wp-content/uploads/2024/01/ABNT-NBR-6023-Referencias-Bibliograficas.pdf. Acesso em: 7 nov. 2025.

MPITZIOPOULOS, A. et al. A survey on jamming attacks and countermeasures in WSNs. IEEE Communications Surveys & Tutorials, New York, v. 11, n. 4, p. 42–56, 2009. Disponível em: https://dl.acm.org/doi/10.1109/SURV.2009.090404. Acesso em: 7 nov. 2025.

XU, W. et al. The feasibility of launching and detecting jamming attacks in wireless networks. In: ACM INTERNATIONAL SYMPOSIUM ON MOBILE AD HOC NETWORKING AND COMPUTING (MobiHoc), 6., 2005, Urbana-Champaign. Proceedings […]. New York: ACM, 2005. p. 46–57. Disponível em: https://dl.acm.org/doi/10.1145/1062689.1062697. Acesso em: 7 nov. 2025.

MARTINOVIC, I.; PICHOTA, P.; SCHMITT, J. B. Jamming for good: a fresh approach to authentic communication in WSNs. In: ACM CONFERENCE ON WIRELESS NETWORK SECURITY (WiSec), 2., 2009, Zurich. Proceedings […]. New York: ACM, 2009. p. 161–168. Disponível em: https://dl.acm.org/doi/10.1145/1514274.1514298. Acesso em: 10 nov. 2025.

RAMYA, C.; SHANMUGARAJ, M.; PRABAKARAN, R. Study on ZigBee technology. In: INTERNATIONAL CONFERENCE ON ELECTRONICS AND COMPUTER TECHNOLOGY (ICECT), 3., 2011, Kanyakumari. Proceedings […]. Piscataway: IEEE, 2011. p. 297–301. Disponível em: https://ieeexplore.ieee.org/document/5941985. Acesso em: 11 nov. 2025.

WERNER-ALLEN, G. et al. Fidelity and yield in a volcano monitoring sensor network. In: USENIX SYMPOSIUM ON OPERATING SYSTEMS DESIGN AND IMPLEMENTATION (OSDI), 7., 2006, Seattle. Proceedings […]. Berkeley: USENIX Association, 2006. p. 381–396. Disponível em: https://www.usenix.org/legacy/event/osdi06/tech/full_papers/werner-allen/werner-allen.pdf. Acesso em: 11 nov. 2025.

HUSSAIN, A.; SAQIB, N. A. Protocol aware shot-noise based radio frequency jamming method in 802.11 networks. In: IEEE INTERNATIONAL CONFERENCE ON WIRELESS AND OPTICAL COMMUNICATION NETWORKS (WOCN), 8., 2011, Paris. Proceedings […]. Piscataway: IEEE, 2011. p. 1–6. Disponível em: https://ieeexplore.ieee.org/document/5872884. Acesso em: 13 nov. 2025.

XU, W. et al. Jamming sensor networks: attack and defense strategies. IEEE Network, New York, v. 20, n. 3, p. 41–47, 2006. Disponível em: https://scholarcommons.sc.edu/cgi/viewcontent.cgi?article=1018&context=csce_facpub. Acesso em: 15 nov. 2025.

MOHANRAJ, P.; MUMMOORTHY, A. Use of jammer network to detect denial of services attack in wireless network. International Journal of Game Theory and Technology, Tiruchengode, v. 1, p. 41–45, 2015.

GIELOW, F. H.; SANTOS, A.; NOGUEIRA, M. Uma análise experimental de ataques jamming no acesso ao meio em redes de sensores sem fio. [S.l.: s.n.], [20–].

BRASIL. Lei no 9.472, de 16 de julho de 1997. Dispõe sobre a organização dos serviços de telecomunicações, a criação e o funcionamento de um órgão regulador e outros aspectos institucionais. Diário Oficial da União, Brasília, DF, 17 jul. 1997. Seção 1. Disponível em: https://www.planalto.gov.br/ccivil_03/leis/l9472.htm. Acesso em: 1 dez. 2025.

AGÊNCIA NACIONAL DE TELECOMUNICAÇÕES (Brasil). Resolução no 760, de 6 de fevereiro de 2023. Aprova o Regulamento sobre Bloqueador de Sinais de Radiocomunicações (BSR). Diário Oficial da União, Brasília, DF, 8 fev. 2023. Seção 1. Disponível em: https://informacoes.anatel.gov.br/legislacao/component/content/article/163-resolucoes/2023/1842-resolucao-760. Acesso em: 3 dez. 2025.

AGÊNCIA NACIONAL DE TELECOMUNICAÇÕES (Brasil). Ato no 10.988, de 21 de agosto de 2024. Aprova os requisitos técnicos e operacionais para uso de Bloqueador de Sinais de Radiocomunicações (BSR). Diário Oficial da União, Brasília, DF, 21 ago. 2024. Disponível em: https://www.gov.br/anatel/pt-br/assuntos/noticias/sor-aprova-requisitos-tecnicos-e-operacionais-para-bloqueadores-de-sinais-de-radiocomunicacao-bsr. Acesso em: 3 dez. 2025.

UNIÃO INTERNACIONAL DE TELECOMUNICAÇÕES. Radio Regulations — Article 15: Interferences. Genebra, 2024. Seção 15.1: proibição de transmissões desnecessárias ou sinais supérfluos (jamming). Disponível em: https://www.itu.int/harmful-interference-to-rnss/. Acesso em: 5 dez. 2025.

APPENDICES

SUPPLYMENTARY LIBRARY

AL-MAHDI, M. et al. New detection paradigms to improve wireless sensor network performance under jamming attacks. Sensors, Basel, v. 19, n. 11, p. 1–23, 2019. Disponível em: https://pmc.ncbi.nlm.nih.gov/articles/PMC6603528/. Acesso em: 15 nov. 2025.

GONZÁLEZ, L. et al. A low-cost jamming detection approach using performance metrics in wireless sensor networks. Sensors, Basel, v. 21, n. 4, p. 1–21, 2021. Disponível em: https://pmc.ncbi.nlm.nih.gov/articles/PMC7915737/. Acesso em: 15 nov. 2025.

MISRA, S.; SENDRA, S.; GONZÁLEZ, L. Information warfare-worthy jamming attack detection mechanism for wireless sensor networks. Sensors, Basel, v. 10, n. 4, p. 2799–2820, 2010. Disponível em: https://pmc.ncbi.nlm.nih.gov/articles/PMC3274228/. Acesso em: 20 nov. 2025.

LI, Y. et al. Fight jamming with jamming: a game theoretic analysis of jamming attack in wireless networks and defense strategy. Computer Networks, Amsterdam, v. 55, n. 8, p. 1773–1786, 2011. Disponível em: https://www.sciencedirect.com/science/article/abs/pii/S1389128611000995. Acesso em: 20 nov. 2025.

TANG, Y. et al. Taking advantage of jamming in wireless networks: a survey. Computer Networks, Amsterdam, v. 109, p. 116–131, 2016. Disponível em: https://www.sciencedirect.com/science/article/pii/S1389128616300275. Acesso em: 21 nov. 2025.

KARLSSON, J.; JIANG, L.; WANG, X. Jamming attacks on wireless networks: a taxonomic survey. Journal of Manufacturing Systems, Amsterdam, v. 37, p. 1–12, 2016. Disponível em: https://www.sciencedirect.com/science/article/abs/pii/S092552731500451X. Acesso em: 24 nov. 2025.

CAPKUN, S. et al. Detection of reactive jamming in sensor networks. ACM Transactions on Sensor Networks, New York, v. 7, n. 2, p. 1–29, 2011. Disponível em: https://dl.acm.org/doi/10.1145/1824766.1824772. Acesso em: 24 nov. 2025.

SANTOS, J.; REIS, C.; SILVA, F. Jamming detection in IoT wireless networks: an edge-AI based approach. In: ACM INTERNATIONAL CONFERENCE ON FUTURE NETWORKS AND DISTRIBUTED SYSTEMS, 2022, Dubai. Proceedings […]. New York: ACM, 2022. p. 1–8. Disponível em: https://dl.acm.org/doi/10.1145/3567445.3567456. Acesso em: 25 nov. 2025.

ZENG, H. et al. Enabling jamming-resistant communications in wireless networks. In: IEEE CONFERENCE ON COMMUNICATIONS AND NETWORK SECURITY (CNS), 2017, Las Vegas. Proceedings […]. Piscataway: IEEE, 2017. p. 1–9. Disponível em: https://www.cse.msu.edu/~hzeng/papers/zeng17_cns_jamming.pdf. Acesso em: 29 nov. 2025.

MPITZIOPOULOS, A. et al. Defending wireless sensor networks from jamming attacks. In: IEEE INTERNATIONAL CONFERENCE ON COMMUNICATIONS (ICC), 2007, Glasgow. Proceedings […]. Piscataway: IEEE, 2007. p. 1–6. Disponível em: https://ieeexplore.ieee.org/document/4394775. Acesso em: 29 nov. 2025.