Attacks In Mobile Ad Hoc Networks Research Articles

Design Methodology For The Development Of A Multi-Agent Intrusion Detection System For Countering Distributed Denial Of Service (Ddos) Attacks In Mobile Ad-Hoc Networks.

The proliferation of wireless mobile devices has revolutionized the world, leading to the popularity of the mobile ad hoc networking technology [1]. This emergence of the mobile ad hoc network (MANET) has facilitated the drift from personal computing to ubiquitous computing in our society. Today, mobile devices such as smartphones, laptops, notebooks and tablets are fast becoming an integral part of man’s life and a good number of those in the academia and industry now access the Internet on-the-go, through a wide range of mobile devices. In this paper, we provide our design methodology for the development of a multi-agent intrusion detection system for countering distributed denial of service (DDOS) attacks in mobile ad-hoc networks. Keywords: DDOS, Mult-agent intrusion detection, security, MANET, Attacks.

An enhanced detection system against routing attacks in mobile ad-hoc network

An enhanced detection system against routing attacks in mobile ad-hoc network

Intrusion Detection in Manet Through Machine Learning Approach

Mobile ad hoc networks (MANETs) have evolved into a leading multi-hop infrastructure less wireless communication technology where every node performs the function of a router. Ad- hoc networks have been spontaneously and specifically designed for the nodes to communicate with each other in locations where it is either complex or impractical to set up an infrastructure. The overwhelming truth is that with IoT emergence, the number of devices being connected every single second keeps increasing tremendously on account of factors like scalability, cost factor and scalability which are beneficial to several sectors like education, disaster management, healthcare, espionage etc., where the identification and allocation of resources as well as services is a major constraint. Nevertheless, this infrastructure with dynamic mobile nodes makes it more susceptible to diverse attack scenarios especially in critical circumstances like combat zone communications where security is inevitable and vulnerabilities in the MANET could be an ideal choice to breach the security. Therefore, it is crucial to select a robust and reliable system that could filter malicious activities and safeguard the network. Network topology and mobility constraints poses difficulty in identifying malicious nodes that can infuse false routes or packets could be lost due to certain attacks like black hole or worm hole. Hence our objective is to propose a security solution to above mentioned issue through ML based anomaly detection and which detects and isolates the attacks in MANETs. Most of the existing technologies detect the anomalies by utilizing static behavior; this may not prove effective as MANET portrays dynamic behavior. Machine learning in MANETs helps in constructing an analytical model for predicting security threats that could pose enormous challenges in future. Machine learning techniques through its statistical and logical methods offers MANETs the learning potential and encourages towards adaptation to different environments. The major objective of our study is to identify the intricate patterns and construct a secure mobile ad-hoc network by focusing on security aspects by identifying malicious nodes and mitigate attacks. Simulation-oriented results establish that the proposed technique has better PDR and EED in comparison to the other existing techniques.

A Fuzzy Knowledge-Based Approach for End-2-End Behavioural Analysis of Wormhole Attacks on Mobile Ad-Hoc Networks

Mobile Ad hoc Networks (MANETs) involves series of travelling nodes communicating with each other without a fixed Set-up. Certainly, MANETs are networks that utilize communication peripatetic nodes such as; Personal Digital Assistants (PDAs), mobile phones, laptops which enable wireless transmission across an area and forwarding data packets to the other nodes resulting in frequent change in topology. MANETs are exposed to several communication assaults such as active attack and passive attack. The active attack disrupts network operations while the passive attack obtains information without upsetting normal networks operation. Wormhole is a typical case of active attack. Indeed, an attacker receives packets at one end of the network, tunnels them to another end of the network, and then replays them into the networks from that point resulting in a collapse in communication across wireless setups. This research work simulates and models a typical wormhole attack in MANET using Network Simulator (NS-2.35) and Fuzzy Inference System (FIS). The End-2-End behavioural analysis of wormhole attacks on the transmitting networks layer of MANET was realized. To detect the level of wormhole attack in the network several parameters such as Packet Delivery Ratio, Packet Forwarding Probability and Packet Dropping Probability were considered by determining the degree of severity of wormhole attack which may upset the Quality of Service (QOS) delivery. The aim of this research paper is in the direction of Network security optimization.

TMTACS: Two-Tier Multi-Trust-Based Algorithm to Countermeasure the燬ybil Attacks

Mobile Ad hoc Networks (MANETs) have always been vulnerable to Sybil attacks in which users create fake nodes to trick the system into thinking they’re authentic. These fake nodes need to be detected and deactivated for security reasons, to avoid harming the data collected by various applications. The MANET is an emerging field that promotes trust management among devices. Transparency is becoming more essential in the communication process, which is why clear and honest communication strategies are needed. Trust Management allows for MANET devices with different security protocols to connect. If a device finds difficulty in sending a message to the destination, the purpose of the communication process won’t be achieved and this would disappoint both that device and all of your devices in general. This paper presents, the Two-Tier Multi-Trust based Algorithm for Preventing Sybil Attacks in MANETs (TMTACS). The TMTACS provides a two-tier security mechanism that can grant or revoke trust in the Nodes of the MANET. It’s a smart way to identify Sybil nodes in the system. A proficient cluster head selection algorithm is also defined, which selects cluster head efficiently and does load balancing to avoid resource consumption from a single node only. Also, for routing efficient path is selected to deteriorate energy consumption and maximize throughput. The recent technique is compared with Secured QoS aware Energy Efficient Routing (SQEER), Adaptive Trust-Based Routing Protocol (ATRP), and Secure Trust-Aware Energy-Efficient Adaptive Routing (STEAR) in terms of Packet Delivery Ratio (PDR), consumption of energy etc. The simulation was performed on MATrix LABoratory (MATLAB) and the results achieved by the present scheme are better than existing techniques.

Performance Analysis of Machine Learning-based Detection of Sinkhole Network Layer Attack in MANET

This paper proposes an Intrusion Detection System (IDS) against Sinkhole attacks in Mobile Adhoc Networks (MANET) with mobile sinks. A sinkhole attack is where a hacked node advertises a false routing update to draw network traffic. One effect of a sinkhole attack is that it may be used to launch further attacks, such as drops or changed routing information. Sinkhole nodes attempt to forge the source–destination routes to attract the surrounding network traffic. For this purpose, they modify routing control packets to publish fake routing information that makes sinkhole nodes appear as the best path to some destinations. Several machine learning techniques, including Decision Tree (DT), K-Nearest Neighbor (KNN), Convolution neural network (CNN), and Support Vector Machine (SVM), are used to do the categorization. Furthermore, the MANET’s node’s characteristics, particularly speed, are used for feature extraction. Totally 3997 unique samples, including 256 malicious samples and 3604 normal samples are collected. The categorization results demonstrate the accuracy of DT, KNN, CNN, and SVM at 98.4%, 96.7%, 98.6%, and 97.8%, respectively. The CNN approach is more accurate than other methods, at 98.6%, based on the data. After that, Priority, SVM, KNN, and CNN, in that order, each denotes excellent accuracy.

Comparison between Black Hole and Flooding Attack in Mobile Ad-hoc Network and their Simulation Study

Mobile ad hoc network (MANET) is dynamic in nature and vulnerable for several attacks to be arising in it. Mobile nodes frequently disconnect and join the network; they can arbitrarily moves from one place to another. In present-day wireless communication scenario, Mobile ad hoc network (MANET) plays a very important role, as it consists of many autonomous nodes which communicate together to form a proper communication network. Each node in a network will move in random path, so that nodes direction will change frequently. This paper describes the features, application, flooding attack and black hole attack in the MANET implemented on AODV protocol. The simulation work is carried out in Network Simulator (NS2.34). The performance analysis is done Nodes with 20 to 60 nodes were used in the AODV routing protocol simulation to produce energy-efficient outcomes, with the flooding attacks and the interruption of blackhole attacks. The average delay, routing overhead, packet drop rate and packet delivery rate are calculated. By the simulation it has been evaluated that in flooding attack the routing overhead is more as compared to the black hole attack. A comparative study is also done on these parameters for all three scenarios. Also we simulated the attack in various wireless ad-hoc network scenarios and have tried to find a response system in simulations.

Countering of Black Hole Attack on Manet with AODV Protocol

Abstract: Security in mobile ad-hoc network (MANET) is the most serious issue impacting performance of network. In general, routing methods is one of the complicated and exciting analysis places. In black hole attack, a harmful node uses its routing technique to be able to promote itself for having the quickest direction to the place node or to the bundle it wants to identify. In this research, performance of one of the most efficient solutions for preventing single black hole attack in MANET using AODV routing protocol will be investigated in terms of packet delivery ratio, packet loss percentage, average end-to-end delay, and route request overhead. This chapter describes the introduction, background of the study, research objectives and questions, the scope of the study and its primary objectives.

Secure intrusion detection system routing protocol for mobile ad‐hoc network

With the recent advancements in the field of wireless networks or Mobile Ad-hoc networks (MANETs), mobile computing is the most powerful use for network communication and connectivity. Effective networks come across with numerous difficulties. Networks need to be able to transmit data with acceptable precision from one system to another. A framework must ensure that the retrieved data is consistent with the transmitted data for most applications. If the frame between the two nodes is distorted in the data-link layer, it must be corrected before having driven to other nodes. However, most protocols with the link-layer simply dismiss the frame and allow the high-layer protocols to pass down the frame. In other words, information is a valuable commodity, since asset information must be protected from threats. Some applications require a network mechanism for detecting and preventing these attacks in MANETs. An important challenge in MANET is building the secure intrusion detection system in network providing security to the nodes and route paths in network. The attacks in network can threaten the security issues which have been identified in the intrusion detection system engine, later it is prevented by intrusion prevention engine in the network. A henceforth new technique to implement the security goals and prevent attacks is implemented by introducing the Secure-Intrusion Detection System (S-IDS) in the network. The research work introduced the Secure Energy Routing (SER) protocol for the MANETs. The protocol solves the issue of security in network by detecting the attacks and preventing them in the network. The simulation results show the higher packet delivery ratio and low end-to-end delay with and without attacks. The protocol performance is good in terms of its packet delivery ratio and low end-to-end delay respectively.

Mitigation of black hole attack in MANETs: A sequence no-based approach

MANET (Mobile Ad-hoc network) is type of network which is comprised of moveableness vertices which are connected to form a wireless network. The connected vertices can move very freely as there is no fixed infrastructure for the network. Black hole attack is a DOS attack where one of the vertices in the network is mischievous which tries to capture all the datagrams passing through it by sending a false reply to the origin vertex. In this paper an improvement is made to the existing AODV protocol to mitigate the black hole attack in Manets. The proposed method finds the mischievous vertex and avoids the delivery route through the mischievous vertex. The simulations were experimented in ns2 and the observations prove that the implemented approach works well for various performance metrices like Packet delivery ratio, End to End delay and throughput.

Smart detection and prevention procedure for DoS attack in MANET

A self-organized wireless communication short-lived network containing collection of mobile nodes is mobile ad hoc network (MANET). The mobile nodes communicate with each other by wireless radio links without the use of any pre-established fixed communication network infrastructure or centralized administration, such as base stations or access points, and with no human intervention. In addition, this network has potential applications in conference, disaster relief, and battlefield scenario, and have received important attention in current years. There is some security concern that increases fear of attacks on the mobile ad-hoc network. The mobility of the NODE in a MANET poses many security problems and vulnerable to different types of security attacks than conventional wired and wireless networks. The causes of these issues are due to their open medium, dynamic network topology, absence of central administration, distributed cooperation, constrained capability, and lack of clear line of defense. Without proper security, mobile hosts are easily captured, compromised, and attacked by malicious nodes. Malicious nodes behavior may deliberately disrupt the network so that the whole network will be suffering from packet losses. One of the major concerns in mobile ad-hoc networks is a traffic DoS attack in which the traffic is choked by the malicious node which denied network services for the user. Mobile ad-hoc networks must have a safe path for transmission and correspondence which is a serious testing and indispensable issue. So as to provide secure communication and transmission, the scientist worked explicitly on the security issues in versatile impromptu organizations and many secure directing conventions and security measures within the networks were proposed. The goal of the work is to study DoS attacks and how it can be detected in the network. Existing methodologies for finding a malicious node that causes traffic jamming is based on node’s retains value. The proposed approach finds a malicious node using reliability value determined by the broadcast reliability packet (RL Packet). In this approach at the initial level, every node has zero reliability value, specific time slice, and transmission starts with a packet termed as reliability packet, node who responded properly in specific time, increases its reliability value and those nodes who do not respond in a specific time decreases their reliability value and if it goes to less than zero then announced that it’s a malicious node. Reliability approach makes service availability and retransmission time.

A new efficient approach for detecting single and multiple black hole attacks

Mobile Ad hoc NETworks (MANET) are networks without infrastructure. The communication range among nodes is limited, where several hops are needed to transmit a packet from the source to the destination. These networks have a constantly changing topology due to its mobile nodes and their arbitrary connections, which make it vulnerable for different attacks. One of the most important attacks in MANET is the black hole attack which degrades the performance of the network by removing all the packets passing through it. There are several techniques for detecting black hole attacks in the ad hoc on demand vector protocol. In this paper, a new approach based on AACK is proposed. The proposed system is to detect the single and multiple black hole attacks by intrusion detection system with SPlitted AACK technique. The system is robust enough to detect all black hole attacks by using an iterative split of the main path until the detection of the malicious nodes. Network simulator 2 is used for simulation. We tested our system on different networks with different network sizes and different numbers of attacks, and we compared our results with some existing intrusion detection system techniques.

A Novel Integrated Scheme for Detection and Mitigation of Route Diversion Attack in MANET

With the involvement of Mobile Adhoc Network (MANET) in many upcoming technologies and applications, there is an increasing concern about secure data transmission. Until the last decade, various solutions have evolved to circumvent this threat; however, the security issue is still a more significant threat. The problems studied during the review are usage of Complex Cryptographic Usage, Less Energy Efficient, Fewer studies towards Route Diversion Attack, and Less Emphasis towards Securing Beacon. An analytical method has been used to study these problems. This paper introduces a novel scheme that carries out dual operation viz. i) assessing the link legitimacy for detection of route diversion attack, and ii) cost-effective countermeasures for the same attack. The key findings of proposed study is token generation process when associated with link legitimacy offers more routing security from various ranges of threats. The broader implication of this finding is that proposed system when characterized by lightweight encryption operation, it is capable of excelling better balance between data transmission and security performance unlike existing security solutions in MANET.

Game Theory Analysis and Modeling of Sophisticated Multi-Collusion Attack in MANETs

Mobile Adhoc Network (MANET) has been a core topic of research since the last decade. Currently, this form of networking paradigm is increasingly being construed as an integral part of upcoming urban applications of Internet-of-Things (IoT), consisting of massive connectivity of diverse types of nodes. There is a significant barrier to the applicability of existing routing approaches in conventional MANETs when integrated with IoT. This routing mismatch can lead to security risks for the MANET-based application tied with the IoT platform. This paper examines a pragmatic scenario as a test case wherein the mobile nodes must exchange multimedia signals for supporting real-time streaming applications. There exist two essential security requirements viz. i) securing the data packet and ii) understanding the unpredictable behavior of the attacker. The current study considers sophistication on the part of attacker nodes. They are aware of each other’s identity and thereby collude to conduct lethal attacks, which is rarely reflected in existing security modeling statistics. This research harnesses the potential modeling aspect of game theory to model the multiple-collusion attacker scenario. It contributes towards i) modeling strategies of regular/malicious nodes and ii) applying optimization principle using novel auxiliary information to formulate the optimal strategies. The model advances each regular node’s capability to carry out precise computation about the opponent player’s strategy prediction, i.e., malicious node. The simulation outcome of the proposed mathematical model in MATLAB ascertains that it outperforms the game theory’s baseline approach.

Trusted Secure Geographic Routing Protocol: outsider attack detection in mobile ad hoc networks by adopting trusted secure geographic routing protocol

PurposeThis study aims to evaluate the direct trust value for each node and calculate the trust value of all nodes satisfying the condition and update the trust value and value each trust update interval for a secure and efficient communication between sender and destination node. Hence, a Trusted Secure Geographic Routing Protocol (TSGRP) has been proposed for detecting attackers (presence of the hacker), considering the trust value for a node produced by combining the location trusted information and the direct trusted information.Design/methodology/approachAmelioration in the research studies related to mobile ad hoc networks (MANETs) and wireless sensor networks has shown greater concern in the presence of malicious nodes, due to which the delivery percentage in any given network can degrade to a larger extent, and hence make the network less reliable and more vulnerable to security.FindingsTSGRP has outperformed the conventional protocols for detecting attacks in MANET. TSGRP is establishing a trust-based secure communication between the sender and destination node. The evaluated direct trust value is used after the transmission of route-request and route-reply packets, to evaluate the direct trust value of each node and a secure path is established between the sender and the destination node. The effectiveness of the proposed TSGRP is evaluated through NS-2 simulation.Originality/valueThe simulation results show the delay of the proposed method is 92% less than PRISM approach and the overhead of the proposed TSGRP approach is 61% less than PRISM approach.

Application of Adaptive Threshold Algorithm with Selected Modified Parameters for the Detection of Flooding Based Denial-of-Service (DoS) Attack in Mobile AdHoc Network

Mobile AdHoc Networks (MANET) were self- organizing networks formed without pre-installed infrastructure. Nodes in these networks extensively relied on intermediate nodes to communicate with the destination node. Due to the limited network and host resources, Denial-of-Service (DoS) attacks were the major problem faced by MANET. Flooding based DoS attacks aimed to overwhelm certain resources which resulted in destabilizing an entire network which further denying the access of services to legitimate users. SYN flooding attack was a flooding attack launched from the transport layer of TCP/IP protocol stack in which the attacker forwarded a prodigious number of spoofed SYN packets to the victim node in order to overflow its back log queue. Fixed Threshold Algorithm (FTA) or Adaptive Threshold Algorithm (ATA) was a commonly used technique for detecting these attacks in the network in which an alarm was raised whenever the number of SYN packets increased abnormally. But these algorithms were suffered from a higher false positive rate (FPR) and lower accuracy.There as on for these limitations was that network traffic statistics were updated regularly during normal traffic conditions as well as for attack traffic. In order to overcome these limitations,a modified version of the Adaptive Threshold Algorithm was proposed.Based on the comprehensive evaluation using DARPA data set,it was shown that the present work could successfully detect flooding attacks with higher accuracy and lower false positive rate.

DETECTING AND ISOLATING BLACK-HOLE ATTACKS IN MANET USING COUNTER BASED TROLLING TECHNIQUE

Mobile Ad hoc Network (MANET) is a part of wireless networks that gives different applications in various fields. MANET's security had gotten perhaps the greatest issue in fields of networks. MANET is powerless against various kinds of attacks that influence its usefulness and availability. The black hole attack is viewed as one of the most perilous dynamic attacks which impedes the presentation and dependability of the network because of the dropping of all approaching data packets by the malicious node. The black hole attack intends to deceive each node in the network that needs to speak with another node by guaranteeing that it generally has the best path to the objective node. AODV is a responsive routing protocol which has no method to identify and forestall black hole attack in to the network. In this examination work, we improved the AODV routing protocol utilizing another lightweight method that utilizes hop count and trolling to recognize and detect single and multiple black hole attack. In this research work we provide the security scheme against single and cooperative black hole attack in MANET. The blackhole attack is packet dropping attack behaves like normal node at the time of connection establishment and after forward false reply of destination to sender drops all the data packets. In this attack one or more than one malicious nodes create a secure environment with the presence of other normal nodes. The proposed IDS (Intrusion Detection System) is identified the nodes those are not forwarded the data packets continuously abut node exist in network and provides the secure communication in dynamic network.

Trusted Sensing Model for Mobile Ad HoC Network Using Differential Evolution Algorithm

Mobile Ad Hoc Network (MANET) has set of mobile nodes that are allowed to communicate with each other through wireless links. The nodes are deployed spontaneously without any infrastructure in a geographical area. Due to the lack of centralized administration and prior organization, MANETs are vulnerable to different attacks of malicious nodes. To overcome the problem of black hole attack in MANETs, a trust model using Differential Evolution (DE) algorithm has been proposed. It identifies the malicious node and inhibits them to become the member of data transmission path. The proposed work consists of two phases; one is to obtain the optimized path and the other deals with the penalty factor for malicious nodes. Moreover, the Differential Evolution is one of the most promising optimization to enhance security with increased network density. The proposed algorithm is compared with AOMDV, DSR, Genetic algorithm and ACO.

Trust-based-Tuning of Bayesian watchdog Intrusion Detection for Fast and improved Detection of Black Hole Attacks in Mobile Adhoc Networks

Trust-based-Tuning of Bayesian watchdog Intrusion Detection for Fast and improved Detection of Black Hole Attacks in Mobile Adhoc Networks

Enhanced Reliable ACK (ERACK) Scheme for Detecting Misbehaving Nodes in MANETs

In Mobile Ad Hoc Networks (MANETs), the process of sending end-to-end acknowledgement (ACK) for each packet by the destination, causes unnecessary overhead. This paper proposes an Enhanced Reliable ACK (ERACK) scheme for detecting misbehaving attacks in MANET. Initially, reliable multiple paths are established by measuring the path reliability. For defending the data transferred from the dispatcher, one-way hash chain based Message Authentication Code (MAC) is utilised. If the packet loss count is above a threshold, then Secure ACK (S-ACK) mode is activated which identifies the misbehaving node. The source then generates a Misbehavior Report Authentication (MRA) message which is transmitted to the destination using the path with next higher reliability. By experimental results it is shown that the ERACK method decreases the packet loss and delay while ensuring the successful delivery of MRA to the destination.