Malicious black hole node detection and circumvention

A method comprising:

• determining a number of drops of a plurality of messages sent to a first node of a plurality of nodes within a mesh network;
• based at least in part on the number of drops of the plurality of messages exceeding a threshold number of drops for a time period, decrementing a first rating assigned to the first node to a second rating assigned to the first node;
• based at least in part on the second rating being below a rating threshold, determining that the first node is a potentially malicious node;
• receiving second location information indicating a second location of a second node;
• determining a distance threshold based at least in part on a second distance determined using the second location information;
• based at least in part on a first distance to a device performing the method calculated based on coordinate information provided by the first node being larger than the distance threshold, identifying that the first node is a malicious node;
• and
• ending communications with the first node.

A non-transitory computer-readable medium storing instructions that, when executed, cause one or more processors to perform operations, comprising:

• determining a number of drops of a plurality of messages sent to a first node of a plurality of nodes within a mesh network;
• based at least in part on the number of drops of the plurality of messages exceeding a threshold number of drops for a time period, decrementing a first rating assigned to the first node to a second rating assigned to the first node;
• based at least in part on the second rating being below a rating threshold, determining that the first node is a potentially malicious node;
• receiving second location information indicating a second location of a second node;
• determining a distance threshold based at least in part on a second distance determined using the second location information;
• based at least in part on a first distance to the one or more processors calculated based on coordinate information provided by the first node being larger than the distance threshold, identifying that the first node is a malicious node;
• and
• ending communications with the first node.