1. A method, comprising: sending a training request to a plurality of nodes in a network, wherein the training request causes the nodes to generate statistics regarding unicast and broadcast message reception rates associated with the nodes; receiving the statistics from the nodes; generating a statistical model using the received statistics, wherein the statistical model is configured to detect a network attack by comparing unicast and broadcast message reception rate statistics; providing the statistical model to the nodes; and receiving, from a particular node, an indication that a network attack was detected by the particular node.