Gray Hole Attack Research Articles

A Dual Attack Detection Technique to Identify Black and Gray Hole Attacks Using an Intrusion Detection System and a Connected Dominating Set in MANETs

A mobile ad-hoc network (MANET) is a temporary network of wireless mobile nodes. In a MANET, it is assumed that all of the nodes cooperate with each other to transfer data packets in a multi-hop fashion. However, some malicious nodes don’t cooperate with other nodes and disturb the network through false routing information. In this paper, we propose a prominent technique, called dual attack detection for black and gray hole attacks (DDBG), for MANETs. The proposed DDBG technique selects the intrusion detection system (IDS) node using the connected dominating set (CDS) technique with two additional features; the energy and its nonexistence in the blacklist are also checked before putting the nodes into the IDS set. The CDS is an effective, distinguished, and localized approach for detecting nearly-connected dominating sets of nodes in a small range in mobile ad hoc networks. The selected IDS nodes broadcast a kind of status packet within a size of the dominating set for retrieving the complete behavioral information from their nodes. Later, IDS nodes use our DDBG technique to analyze the collected behavioral information to detect the malicious nodes and add them to the blacklist if the behavior of the node is suspicious. Our experimental results show that the quality of the service parameters of the proposed technique outperforms the existing routing schemes.

Securing ad hoc networks using energy efficient and distributed trust-based intrusion detection system

Mobile ad hoc networks (MANETs) are subject to broad variety of attacks. Black hole and grey hole attacks are security threats that make MANETs weak by inducing packet forwarding misbehaviour. This paper proposes a method for detection and isolation of malicious nodes and selection of most reliable path for routing data. Intrusion detection system (IDS) is utilised to catch the nodes exhibiting packet forwarding misbehaviour. Monitoring scheme is appropriate for MANETs as it emphasis on energy reduction, has distributed nature and compliant with dynamic network topology. Proposed method is simulated using network simulator NS2. Findings show that the proposed system is efficient in terms of packet delivery ratio (PDR), routing packet overhead, end to end delay and energy management as compared to dynamic source routing (DSR) protocol and other protocols in this area. The protocol improves the PDR by 43.44% as compared to DSR protocol in presence of malicious nodes.

Securing ad hoc networks using energy efficient and distributed trust-based intrusion detection system

Mobile ad hoc networks (MANETs) are subject to broad variety of attacks. Black hole and grey hole attacks are security threats that make MANETs weak by inducing packet forwarding misbehaviour. This paper proposes a method for detection and isolation of malicious nodes and selection of most reliable path for routing data. Intrusion detection system (IDS) is utilised to catch the nodes exhibiting packet forwarding misbehaviour. Monitoring scheme is appropriate for MANETs as it emphasis on energy reduction, has distributed nature and compliant with dynamic network topology. Proposed method is simulated using network simulator NS2. Findings show that the proposed system is efficient in terms of packet delivery ratio (PDR), routing packet overhead, end to end delay and energy management as compared to dynamic source routing (DSR) protocol and other protocols in this area. The protocol improves the PDR by 43.44% as compared to DSR protocol in presence of malicious nodes.

A statistical detection mechanism for node misbehaviours in wireless mesh networks

Wireless mesh networks (WMNs) have become an increasingly popular wireless networking technology for establishing the last-mile connectivity for home and neighbourhood networkings. In such networks, packet dropping may be due to either an attack, or normal loss events such as bad channel quality. Furthermore, in the route discovery phase, path stability is not always considered. We consider a special case of denial of service (DoS) attack in WMNs known as the greyhole attack. In this attack, a node selectively drops some packets which it has to forward along the path. To mitigate this attack, we propose a dropping detection mechanism allowing a mobile node to select a most reliable route to the destination. Our detection module detects misbehaving nodes by comparing the observed packet loss distribution of nodes to the expected ones when they are well-behaved. We validate the proposed approach via extensive simulations through R software and Matlab.

Secured Routing Protocol for Mobile Ad hoc Networks to Defend Collaborative Black-hole and Gray-hole Attacks by Malicious Nodes

Secured Routing Protocol for Mobile Ad hoc Networks to Defend Collaborative Black-hole and Gray-hole Attacks by Malicious Nodes

Reducing the Effectiveness of Gray-Hole Attack in Manet

MANET is the mobile ad-hoc network. Security is very important especially when transmitting the data packets from one node to another. MANET is constructed by grouping mobile wireless nodes with no fixed infrastructure. In order to forward the packets, all the nodes in the network must cooperate with each other, so that the nodes beyond the radio ranges can communicate. Each node acts as a router and MANET is infrastructure-less networks. Hence, MANET is open to more security attacks such as Gray-hole attack, Black-hole attack and worm-hole attack. Due to the dynamism in network topology, MANETS are highly vulnerable and are prone to malicious attack. Security issue is highly challenging in MANET. Understanding the different form of possible attacks and providing good security solutions is important for secure data transmission between nodes. The most dangerous attack among these attacks is Gray-hole attack. In this paper, it proposed a method for reducing the Gray-hole attack. Our proposed algorithm MAODV identifies the malicious node before the data transmission process and it greatly reduces the dropping of data packets.

A Hierarchical Detection and Response System to Enhance Security Against Lethal Cyber-Attacks in UAV Networks

Unmanned aerial vehicles (UAVs) networks have not yet received considerable research attention. Specifically, security issues are a major concern because such networks, which carry vital information, are prone to various attacks. In this paper, we design and implement a novel intrusion detection and response scheme, which operates at the UAV and ground station levels, to detect malicious anomalies that threaten the network. In this scheme, a set of detection and response techniques are proposed to monitor the UAV behaviors and categorize them into the appropriate list (normal, abnormal, suspect, and malicious) according to the detected cyber-attack. We focus on the most lethal cyber-attacks that can target an UAV network, namely, false information dissemination, GPS spoofing, jamming, and black hole and gray hole attacks. Extensive simulations confirm that the proposed scheme performs well in terms of attack detection even with a large number of UAVs and attackers since it exhibits a high detection rate, a low number of false positives, and prompt detection with a low communication overhead.

An energy efficient flexible delay tolerant network with adaptive secured framework (ASF-DTN)

Delay tolerant networks are widely used in mobile communications because of network withstanding capability of delay. However, when the connectivity of nodes increases, data loss may occur while transmission. Due to the malicious behavior of nodes the data may get permanently lost, which is known as black hole attacks and there is a chance to partial data loss because of the lower energy level of a node, which is known as a gray hole attack. In existing work, the data capacity of a node is not limited, so most of the highly energy efficient node contains a huge amount of data, when compared to other nodes which may lead to random attack. To overcome this, we propose a subjective capability model (SCM) for each and every node to limit the capacity of each node. ASF-DTN prevents collision attack and injection attack by implementing Kalman filtering, which can statistically analyze the behavior of nodes while each and every transmission. Here, we propose an effective node optimization scheme using genetic algorithm with a fitness function to find out energy efficient nodes among the optimal path for effective communication and its performance.

An Online Mechanism for Detection of Gray-Hole Attacks on PMU Data

Data from phasor measurement units (PMUs) enable the efficient functioning of critical power applications supporting real-time monitoring, advanced protection, and dynamic control. Given the time-sensitive and critical nature of these measurements, PMU data are attractive targets for malicious attackers aiming to cause widespread grid damage. This paper addresses the problem of detecting a class of cyber threats called gray-hole attack, where the adversary drops PMU data packets as they traverse the network, resulting in loss of observability and subsequently, incorrect control decisions. This paper proposes an online mechanism for detecting gray-hole attacks in real-time. The proposed mechanism uses the timing information inherent in the PMU data for detecting packet drop attacks, and does not impose any overheads or require any support from the network infrastructure. Extensive simulation results are presented to verify the effectiveness and accuracy of the proposed detection mechanism under different network conditions.

Defense Against Co-Operative Black-hole Attack and Gray-hole Attack in MANET

Mobile Ad-hoc networks (MANETs) can be termed as an autonomous system created by the collaboration of a set of motile nodes communicating with one another through available wireless media and each node behaves as an end system, as well as a router for packet forwarding. Each node is allowed to move freely, change locations and configure them to form a network. Finding an optimal and efficient path between the sender and receiver node is the main aim of routing protocols. Multipath routing protocols show a better result in comparison to single path routing protocols, for data transmission from source to destination extending lifetime of the network. Along with that security in routing for a protected communication between nodes has become a prime concern as any attack during routing may interrupt data transmission, paralyzing the whole network. During packet transmission through multiple paths a number of attacks make come into action by the unauthenticated and compromised nodes present within the network and black-hole attack is one of them. So our objective is to design a multipath routing protocol that detects and avoids the path containing black-hole. Our paper proposes a way to defense the black-hole and gray-hole attacks with the help of intelligence in MANET.

DUAL LAYER SECURITY FOR RELIABLE SERVICE DISCOVERY IN MANETS

The nodes in MANET is forming link in between sender to receiver at any time through intermediate nodes. The limited range mobile nodes maintain the link in Mobile Ad hoc Network (MANET) with the help of routing protocol like AODV. The attacker nodes in network be a part of the communication link is forward the fake reply to sender about destination. The nodes perform communication in open medium and by that the communication between the movable nodes are perform without any centralized authority. Because of that network security is one of the most important concern in MANET. There are many attackers in MANET like Grayhole attack drop the selective data packets in network by that little bit performance of network is affected. To secure network it is necessary to apply security scheme in network. In this research we proposed the SHA security algorithm for securing network and improve routing performance. The proposed work is apply the method of data encryption and decryption to secure network data packets and block the malicious activities of Grayhole attacker. This work analyzes the effect of Grayhole attack through dropping selective data packets. The data packets reach to the destination and the difference count negligible amount of variation in data receiving. The proposed SHA algorithm is applied on application layer to detect and removes the infection of attacker in network. The performance of proposed scheme is provides the better results after lump attacker malicious activities. The attacker SHA algorithm is provides better results and improves routing performance in dynamic network.

Critical Analysis of Numerous Attacks Irreverent Security in Remote Sensor Networks

Remote Sensor Networks have risen as innovation of the current century and has givenan intense blend of dispersed detecting, figuring and correspondence of attacks. With its developing application regions, especially in mission-basic applications, for example, military observing frameworks and war zone observation, security has turned into a critical need keeping in mind the end goal to ensure the touchy information included. The need of viable and effective security systems is necessary and to secure sensor systems has pulled in a lot of scientists' consideration making it hot research zone in the current years. Among the quantity of assaults on the sensor arrange, the Selective Forwarding attack, assumed name as grayhole attack, is a genuine and difficult to-distinguish security assault that can render the system ineffective if the attack was left undetected. In this attack, the principal objective of the attacker is to keep the critical delicate information from achieving the base station. To accomplish this objective, the harmful hub specifically drops certain nodes, in view of some picked criteria, and advances the remaining. The assault turns out to be more viable when the attacker incorporates itself on the way of the information flow. This paper aims to give an outline and investigation of existing ways to deal with counter particular sending assault in remote sensor systems.

Malicious node analysis in MANETS

The mobile ad hoc networks (MANETS) are decentralized, multi-hop networks in which the intermediate nodes play an role of routers to pass data packets to destination. The Routing protocols are playing very vital role in effectiveness of MANETS due to mobility and dynamically changing of topology. Due to the nature of broadcast wireless medium and not have central control now many routing protocols are vulnerable to attacks. These attacks are black hole attack, greyhole attack, sinkhole attack, byzantine attack, sleep deprivation attack and wormhole attack. The paper is discussing all these attacks. From these routing protocols, one of protocol is ad hoc on-demand distance vector routing (AODV). It is a very trendy routing protocol and it is very susceptible to black hole attacks. In black hole attack a mobile node mistakenly publicize the route and sinks data packets to incorrect destination instead of sending to accurate destination. It analyzes the related work and position a solution based on analysis.

RETRACTED ARTICLE: Enhanced trust based encroachment discovery system for Mobile Ad-hoc networks

The ultimate goal of this paper is to avoid inclusion of intruder node in the route and to ensure reliability. The trust metrics are used to provide the secure communication. Opportunistic routing scheme is used to ensure reliability or data consistency in the MANET. In the opportunistic routing, each and every node has the chance to select the next intermediate node. The best intermediate node is selected based on the trust value of a node. Each and every mobile node maintains the trust value for its neighbors. The trust value is calculated based on the node’s Quality of Service parameters. In the opportunistic routing, each and every node maintains the trust value for its neighbor nodes. The next forwarder node is selected from the neighbor list. The node with highest trust value is selected as next forwarder node. In the proposed method a node does not maintain the static route to reach the destination. Instead of that the node selects the next forwarder node during runtime. We present a Enhanced Light-weight Trust-based Routing protocol (ELTB). It is light-weight in the sense that the intrusion detection system (IDS) used for estimating the trust that one node has for another, consumes limited computational resource and finding the best optimal path for packet transmission. Moreover, it uses only local information thereby ensuring scalability. Our Enhanced Light-weight IDS takes care of two kinds of attacks, namely, the blackhole attack and the grey hole attack. It is beast suite for highly dynamic environment to handle the frequent link failure. So, the source node transmits the data to the destination node only via trusted node to ensure secure routing in the MANET. The authors have used AODV as the base routing protocol to evaluate our proposed approach and give a performance analysis.

Energy aware detection and prevention of black hole attack in MANET

Energy and security are the two vital components of Mobile Ad-hoc Networks (MANETs). During routing finding an optimal path from sender to receiver sense of path length (number of hops), longevity (battery life) and security becomes an essential requirement. Variety of schemes are proposed by the researchers for finding the shortest path along with energy saving and protecting from attacks Black-hole and gray-hole attacks are some of the most harmful attacks against MANET communication and needs attention. These attacks may cause by insider or outsider malicious node(s) who may drop packets or misroute the information during communication from sender node to receiver node. In our study we proposed an intelligent routing protocol based on Ant Colony Optimization (ACO) technique that finds shortest path from source to destination, applies the concept of power aware techniques to save energy increasing the longevity of the link avoiding link failure and also uses the concept of digital signatures, watchdog and path rater for detection and avoidance ofblack-hole and gray-hole attacks. Simulation study of the proposed scheme is made over some network parameters and found to be efficient in comparison to the basic AODV routing protocol.

A Survey for Analyzing & Preventing of Gray-hole Attack Minimization for OLSR Based Network

Ad-hoc networks are quite popular for especially on networks network (MANETs, IoT, VANETs, and so forth.), identification &mitigation procedures are only functioning after the attack was initiated Prevention, however, attempts of an attack can be monitored before it is executed. This survey gives us knowledge about how attacks are been analyzed with this two strategies can be acknowledged either by the aggregate collaboration of network nodes or by internal detection of the attack state. It also shows the method for minimizing the gray-hole DoS attack and how to reduce the count of number of packets been dropped. Our survey gives an answer for no explicit node collaboration, with every node utilizing just internal knowledge picked up by routine routing information. This also shows the benefits of the different techniques threat models for better understanding of the attack surface and its prevention. We recognize their respective motivations and distinguish their advantages and drawbacks in a comparative survey.

Invincible AODV to detect black hole and gray hole attacks in mobile ad hoc networks

SummaryToday's communication world is majorly driven by mobile nodes that demand wireless systems for their data relay. One such network is mobile ad hoc network, which is a purely wireless network with which communication is feasible instantly without any aid of preexisting infrastructure; due to this magnificent feature, it has a wide variety of applications. Mobile ad hoc network hinges on cooperative nature of the mobile nodes for relaying data. But at the same time, nodes relaying data for others may compromise, leading to various security attacks. Two main security attacks that drastically bring down the performance of mobile ad hoc network are black hole and gray hole attacks. In this paper, we propose 2 versions of invincible Ad hoc On‐Demand Distance Vector protocol to detect black hole and gray hole nodes that have bypassed preventive mechanism during route discovery process. First is the basic version, which is based on node‐to‐node frame check sequence tracking mechanism, and second is the enhanced version, which is based on signed frame check sequence tracking mechanism. They create a deterrent environment addressing all kinds of black and gray hole attacks. They also provide reliable data transmission to all the nonmalicious nodes in the network by using end‐to‐end authentication mechanism. Simulation results show better performance in packet delivery ratio when compared with other contemporary solutions while addressing all kinds of black and gray hole attacks. It shows significant improvement in end‐to‐end delay and normalized routing load over Ad hoc On‐Demand Distance Vector under black hole or gray hole attacks and also shows better throughput and packet delivery ratio than the existing solution.

Intelligent intrusion detection in external communication systems for autonomous vehicles

ABSTRACTSelf-driving vehicles are known to be vulnerable to different types of attacks due to the type of communication systems which are utilized in these vehicles. These vehicles are becoming more reliant on external communication through vehicular ad hoc networks. However, these networks contribute new threats to self-driving vehicles which lead to potentially significant problems in autonomous systems. These communication systems potentially open self-driving vehicles to malicious attacks like the common Sybil attacks, black hole, Denial of Service, wormhole attacks and grey hole attacks. In this paper, an intelligent protection mechanism is proposed, which was created to secure external communications for self-driving and semi-autonomous cars. The protection mechanism is based on the Proportional Overlapping Scores method, which allows to decrease the number of features found in the Kyoto benchmark dataset. This hybrid detection system uses Back Propagation neural networks to detect Denial of Service (DoS), a common type of attack in vehicular ad hoc networks. The results from our experiment revealed that the proposed intrusion detection has the ability to identify malicious vehicles in self-driving and even in semi-autonomous vehicles.

IDS modelling and evaluation in WANETs against black/grey-hole attacks using stochastic models

The aim of this paper is to model and evaluate the performance of intrusion detection systems (IDSs) facing black-hole and grey-hole attacks within wireless ad hoc networks (WANETs). The main performance metric of an IDS in a WANET can be defined as the mean time required for the IDS to detect an attack. To evaluate this measure, two types of stochastic models are used in this paper. In the first step, two different continuous time Markov chains (CTMCs) are proposed to model the attacks, and then, the method of computing the mean time to attack detection is presented. Since the number of states in the proposed CTMCs grows rapidly with increasing the number of intermediate nodes and the attacks which should be done by a single node to trigger the IDS to detect an attack, stochastic reward nets (SRNs) are exploited to automatically generate the proposed CTMCs in second step.

A Blockchain‐Based Contractual Routing Protocol for the Internet of Things Using Smart Contracts

In this paper, we propose a novel blockchain‐based contractual routing (BCR) protocol for a network of untrusted IoT devices. In contrast to conventional secure routing protocols in which a central authority (CA) is required to facilitate the identification and authentication of each device, the BCR protocol operates in a distributed manner with no CA. The BCR protocol utilizes smart contracts to discover a route to a destination or data gateway within heterogeneous IoT networks. Any intermediary device can guarantee a route from a source IoT device to a destination device or gateway. We compare the performance of BCR with that of the Ad-hoc On‐Demand Distance Vector (AODV) routing protocol in a network of 14 devices. The results show that the routing overhead of the BCR protocol is 5 times lower compared to AODV at the cost of a slightly lower packet delivery ratio. BCR is fairly resistant to both Blackhole and Greyhole attacks. The results show that the BCR protocol enables distributed routing in heterogeneous IoT networks.