Enhanced intrusion detection techniques for mobile ad hoc networks

Abstract

In mobile ad hoc networks the nodes are dynamically changing and they have a fully decentralized topology. Hence, security is hard to achieve due to the dynamic nature of the relationships between the participating nodes as well as the vulnerabilities and limitations of the wireless transmissions medium. In this paper we propose an enhancement on intrusion detection systems for ad hoc networks (EIDAN) based on a novel architecture that uses intrusion detection techniques to detect active attacks that an adversary can perform against routing fabric of mobile ad hoc networks. Moreover, the system has been designed to take countermeasures to attacks. The novelties of the system enable the detection of active attacks. The enhancement of intrusion detection system for ad hoc network (EIDAN) system does not introduce any changes to the underlying routing protocol and operates as an intermediate component between the network traffic and the routing protocol. The system was developed and tested to operate in ad hoc on demand distance vector routing (AODV) enabled networks using the network simulator (ns-2). This system has been designed to detect resource consumption attack, packet-dropping attack and fabrication attacks.