Introduce detection node to establish hop gradient field, which determine the hop coordinates of nodes. Make use of the hop coordinates to find suspicious node and broadcast suspicious packages. Finally, using reply messages find Sybil node. 通过引入少数检测节点建立跳数梯度场,确定节点的跳数坐标,再通过跳数坐标找出可疑节点并广播可疑消息包,最后利用可疑节点的周围节点的邻居列表找出Sybil节点。