Wormhole Attack Research Articles

Reducing the Effectiveness of Gray-Hole Attack in Manet

MANET is the mobile ad-hoc network. Security is very important especially when transmitting the data packets from one node to another. MANET is constructed by grouping mobile wireless nodes with no fixed infrastructure. In order to forward the packets, all the nodes in the network must cooperate with each other, so that the nodes beyond the radio ranges can communicate. Each node acts as a router and MANET is infrastructure-less networks. Hence, MANET is open to more security attacks such as Gray-hole attack, Black-hole attack and worm-hole attack. Due to the dynamism in network topology, MANETS are highly vulnerable and are prone to malicious attack. Security issue is highly challenging in MANET. Understanding the different form of possible attacks and providing good security solutions is important for secure data transmission between nodes. The most dangerous attack among these attacks is Gray-hole attack. In this paper, it proposed a method for reducing the Gray-hole attack. Our proposed algorithm MAODV identifies the malicious node before the data transmission process and it greatly reduces the dropping of data packets.

Performance Based Evaluation of Botnet, Black hole, Wormhole Attack in MANET

Performance Based Evaluation of Botnet, Black hole, Wormhole Attack in MANET

Detection and Prevention of Wormhole and Black Hole Attacks in MANET Using AODV Protocol Review

Detection and Prevention of Wormhole and Black Hole Attacks in MANET Using AODV Protocol Review

Performance Analysis of Reactive Routing Protocol on VANET with Wormhole Attack Schemeaper

Entering the information era, the current needs of global community is increasing very rapidly. Vehicular Ad-hoc Networks (VANET) has drawn significant attentions from both industry and academia as an important developmnt of vehicular communication technology. VANET is one of open network and communication media without security mechanism. There are many kinds of security threat that can interrupt data communication in VANET. Wormhole attacks as one of security threat can be a good challenge in VANET security research. In this paper, we evaluate performance of reactive routing protocol on VANET with wormhole attack scheme. The project is simulated using NS-3 in Ubuntu platform with performance analysis of routing protocol by changing of initial power and node density. We conclude that throughput values are increasing along with the changing of initial power while the delay values are decreasing rapidly. By the changing of node density, the highest delay value is 0.122 ns on 10 nodes condition and 0.215 Mbps for throughput value on 8 nodes condition.

Wormhole Attack: a Major Security Concern in Internet of Things (Iot)

The Internet of Things (IoT) is nothing but a collection of wireless and wired devices, commonly termed as nodes operated remotely. This operation is done by assuming these nodes as the sensors in a wireless sensor network (WSN) administered through a base station. We start with briefing about IoT and then briefing IoT layer models. After this, we discuss attacks with regard to IoT namely Sinkhole attack, Sybil attack, HELLO flood attack, Acknowledgement spoofing attack and their respective detection methods. This paper is systematic review of existing mechanism for the detection of wormhole attack and a new method is proposed.

Coagulation Attacks over Networked UAVs: Concept, Challenges, and Research Aspects

Unmanned Aerial Vehicles (UAVs) have grasped an important role in the modern day networking. A lot of applications are being developed using aerial vehicles as a pivot. These vehicles provide a vast range of support to modern day networks. Modern computing applications such as Urban Computing, Internet of Things, Ubiquitous Computing, and the Internet for All have sought applications of UAVs to attain complex tasks. However, securing aerial vehicles in a network is not an easy task because of the difference in communication standards and range of applicability. Aerial nodes are prone to various types of attack in a network such as Sybil attack, wormhole attack, sinkhole attack, or impersonation attack. These attacks lead to a large number of vulnerabilities causing fatal incidents. A new attack is introduced in this paper termed as "Coagulation Attack". This term is derived from the clotting properties of fluids. This paper introduces the concept, issues, challenges, and research aspects of coagulation attack. A simulation study is also presented that shows the impact of such attacks over networked UAVs.

A lightweight technique for detection and prevention of wormhole attack in MANET

A mobile ad-hoc network (MANET) is an ordinary and self-orbiting communication network that is capable of managing mobile nodes. Many proposed protocols on MANET address its vulnerability against different threats and attacks. The malicious node exploits these vulnerabilities to lunch attacks, especially when nodes have mobility and network do not have constant topology, like wormhole attack. This paper presents a lightweight technique that detects the wormhole attacks in MANET. In the proposed technique, the source node calculates the average sequence number of the reply (RREP) packets. If the sequence number of the corresponding node exceeds the calculated average value of the sequence number, then all traffic is discarded, and the node is marked as malicious. The proposed technique is less complex, power-efficient, and enhances network lifetime as more data packets are delivered to the destination node. This technique is validated through comprehensive simulations results in NS2.

E-CREDND Scheme for Detection of malevolent nodes in Ad-hoc Network

The remote network that comprises of multipurpose nodes and is infrastructure-less in nature is mobile ad-hoc network (MANET). It powerfully self-composes in subjective and impermanent system topologies. These moveable ad-hoc systems are dishonest and powerless to any interruption in light of their remote association approach. Subsequently, the data from these systems can be stolen effectively just by presenting the aggressor nodes in the system. The hop count metric is calculated to determine the straight route degree. For this reason, directing conventions are arranged. Among all the potential assaults on MANET, identification of wormhole attack is considered to be most problematic. One malevolent node gets packets from a specific area, tunnels them to an alternate transmissible node arranged in another area of the system and deforms the full steering strategy. All routes are merged to the wormhole set up by the aggressors. The total directing framework in MANET gets diverted. Here in this paper, a procedure for identifying malevolent nodes in movable ad-hoc system has been proposed (E-CREDND) and this scheme is critical for the regions where the route separate in the midst of source and goal is two nodes only. This scheme isn't appropriate for those situations where multi-hops are exhibited in the midst of transmitter and recipient. In the anticipated investigation, another procedure is executed for the identification and separation of aggressor sensor nodes from the system. The anticipated plan is used in NS2 and it is portrayed by the propagation results that the anticipated plan demonstrates better execution in correlation with existing methodologies.

A NOVEL ALGORITHM BASED ON TRUST AUTHENTICATION MECHANISMS TO DETECT AND PREVENT MALICIOUS NODES IN MOBILE AD HOC NETWORK

Ad hoc On-demand Distance Vector (AODV) routing protocol is one of the most popular reactive protocol used for Mobile Ad hoc Network, is target of many attack types. Some research works published related to improve of AODV based on digital signature, typical as SAODV and ARAN. However, they have some weakness, malicious can pass over security wall of SAODV by using fake keys, both of SAODV and ARAN can't detect wormhole nodes in hide mode. In additions, detection solutions based on characteristics of attack types have proposed, they only bring about efficiency for each independent type of attack and malicious nodes can join to the discovered route by deliberately giving fake information concerning. This article proposes a trust authentication mechanisms (TAM) using public-key cryptograms RSA and digital certificates (DC) based on X509 standard. TAM allows a mobile node authenticates preceding nodes by checking control route packets through 3 steps: (1) Digital certificates; (2) actual neighbors; and (3) packet integrity authentications. Analysis results confirm that TAM can detect and prevent almost current routing protocol attack types, such as Blackhole/ Sinkhole, Grayhole, Flooding, Whirlwind and participation mode Wormhole attacks. Specially, the simulation results in NS2 show that TAM can detect and prevent successful to 100\% malicious nodes using fake keys for all scenarios based on the number of UDP connections, 100% hide mode wormhole nodes for immobility scenarios and above 99% (the mistaken rate below 1.0%) for all mobility scenarios with 30m/s of maximum speeds and 1hop minimum tunnel length.

MLAMAN: a novel multi-level authentication model and protocol for preventing wormhole attack in mobile ad hoc network

Wormhole attack is a serious security issue in Mobile Ad hoc Network where malicious nodes may distort the network topology and obtain valuable information. Many solutions, based on round trip time, packet traversal time, or hop-count, have been proposed to detect wormholes. However, these solutions were only partially successful in dealing with node high-speed mobility, variable tunnel lengths, and fake information by malicious nodes. To address those issues, this paper proposes a novel multi-level authentication model and protocol (MLAMAN) for detecting and preventing wormhole attacks reliably. MLAMAN allows all intermediate nodes to authenticate control packets on a hop-by-hop basis and at three levels: (1) the packet level where the integrity of the packets can be verified, (2) the node membership level where a public key holder-member can be certified, and (3) the neighborhood level where the neighborhood relationship between nodes can be determined. The novelty of the model is that it prevents malicious nodes from joining the network under false information and pretense. It detects wormhole nodes effectively under various scenarios including variable tunnel lengths and speeds of moving nodes. The effectiveness of our approach is confirmed by simulation results through various scenarios.

Malicious node analysis in MANETS

The mobile ad hoc networks (MANETS) are decentralized, multi-hop networks in which the intermediate nodes play an role of routers to pass data packets to destination. The Routing protocols are playing very vital role in effectiveness of MANETS due to mobility and dynamically changing of topology. Due to the nature of broadcast wireless medium and not have central control now many routing protocols are vulnerable to attacks. These attacks are black hole attack, greyhole attack, sinkhole attack, byzantine attack, sleep deprivation attack and wormhole attack. The paper is discussing all these attacks. From these routing protocols, one of protocol is ad hoc on-demand distance vector routing (AODV). It is a very trendy routing protocol and it is very susceptible to black hole attacks. In black hole attack a mobile node mistakenly publicize the route and sinks data packets to incorrect destination instead of sending to accurate destination. It analyzes the related work and position a solution based on analysis.

Security Techniques for Wormhole Attack in Wireless Sensor Networks

The wireless sensor network has group of sensors which can sense the data and route this data to base station. As there is no physical connection between sensor and base station the important data can be routed without wires. The broadcast nature of wireless sensor network makes it prone to security threat to the valuable data. The attacker node can detect the data by creating their own data aggregation and routing mechanism .The number of attacks can be possible on the network layer. Out of these attacks wormhole is one of the major attack which can change the routing method of the whole wireless sensor network. In this attack,the attacker node can control the packet transmission of whole network and route it to the tunnel of nodes. The major drawback of this attack is to increase the packet drop and disturbing the routing mechanism. A number of security techniques are developed by the researcher to reduce the packet drop ratio and secure the routing mechanism of the network. Out of all thesetechniquesfew related to packet drop ratio are discussed in this paper. TheLightweight countermeasure for the wormhole attack (LITEWORP) based on Dynamic Source routing (DSR) protocol security technique,Delay Per Hop Indication (Delphi) based on AODV(Avoidance Routing Protocol) Protocol security technique and MOBIWORP based on DSRprotocol security technique reduce the packet loss percentage 40%,43% and 35% respectively.

Security DV‐hop localisation algorithm against wormhole attack in wireless sensor network

Distance vector-hop (DV-hop) is a localisation algorithm based on distance vector routing, which often suffers the wormhole attack. To solve this problem, a security DV-hop localisation algorithm against wormhole attack (AWDV-hop) is proposed. First, the algorithm establishes the neighbour node relationship list (NNRL) by broadcast flooding. All the nodes get the ID numbers of their neighbour nodes through NNRL. The suspect beacon nodes can be found by comparing the theoretical and actual number of neighbour nodes. Then, the suspect beacon nodes calculate the distances to other beacon nodes in their NNRL to find the actual attacked beacon nodes. The attacked beacon nodes in the different areas of wormhole attack are marked with 1 or 2. Finally, the unknown nodes mark themselves with 1 or 2 according to the beacon nodes marked before. In the next round of localisation, the nodes marked with 1 and the nodes marked with 2 disconnected from each other. The simulation results show that the localisation error of the proposed AWDV-hop algorithm is reduced by about 80% than that of DV-hop algorithm suffering from the wormhole attack. Compared to label-based DV-HOP (LBDV-hop) and secure neighbour discovery based DV-HOP (NDDV-hop) algorithm, the localisation error is reduced by about 7 and 34%, respectively.

Removal with detection of Wormhole Attacks from Ad Hoc Wireless Networks to Perform Secure Routing

Removal with detection of Wormhole Attacks from Ad Hoc Wireless Networks to Perform Secure Routing

Confirmation of wormhole attack in MANETs using honeypot

The flexibility and ease of deployment provided by Mobile Ad hoc Networks (MANETs) come at the cost of lack of security and vulnerability. Many solutions are proposed to protect MANET from attacks, ranging from attack identification to prevention. Although these solutions reduce the attacks in a MANET, they are likely to identify many false attacks as real ones. Such false alarms occur more often when an attack is complex and have multiple features, for example in a wormhole attack. In this paper we propose a Wormhole Attack Confirmation (WAC) System using honeypot to mitigate false alarms in a MANET and protect its resources. The confirmation of attacks dictates the necessity of analyzing all the possible scenarios of the attack. In order to analyze the wormhole attack we have built a Wormhole Attack Tree based on its symptoms. The honeypot confirms the wormhole attack using the Wormhole Attack Tree (WAT) and history of attacks. We have simulated the proposed system in several MANET environments of varying sizes of nodes and applications. On several occasions the results have demonstrated that the proposed system is efficient in confirming the wormhole attack, thereby saving the resources and minimizing the path re-establishment.

Multirate DelPHI to secure multirate ad hoc networks against wormhole attacks

DelPHI [1] is a highly cited protocol that secures Ad hoc On Demand Distance Vector (AODV) routing protocol against wormhole attacks. DelPHI assumes that the underlying wireless transmission rate is constant. Under such an assumption it has a wormhole detection rate above 80%. In this work we show that DelPHI is unable to secure AODV in a multirate transmission environment because it does not take into account the variable bit rate nature of the wireless channel and assumes a constant bit rate leading to either false detection or no detection of wormhole attacks. We go on to propose an extension to DelPHI (M-DelPHI) that adapts it to the multirate 802.11 wireless channel. We propose three fundamental extensions: 1. Multirate channel, 2. Processing delay and 3. Neighbour monitoring. We provide 2 test cases that demonstrate our extension and simulate the new protocol in different environments. We show that M-DelPHI performs exceptionally well resulting in above 90% wormhole detection rate against inbound and out-of-band wormholes under the specified test conditions.

Performance Evaluation of Blackhole Attack on AODV in VANET

Black hole is one of the ongoing network threats that impact the physical components of Vehicular Ad hoc Networks (VANETs) when more layers deal with routing mechanism of vehicular ad hoc network. An algorithm for Ad hoc On-Demand Distance Vector (AODV) protocol in VANET was developed in order to identify collaborative group of nodes that behave as black hole. The simulation was configured to perform three scenarios with number of nodes set to 10, 20 and 40 nodes respectively. The result showed that the proposed algorithm provides a better throughput performance, less end to end delay, high packet delivery ration, less packet drops and less time for processing the incoming and outgoing nodes. Future works may consider testing the proposed solution on other types of attacks such as Wormhole, Jellyfish and Sybil attacks.

RETRACTED ARTICLE: Design and implement a cross layer verification framework (CLVF) for detecting and preventing blackhole and wormhole attack in wireless ad-hoc networks for cloud environment

Various malicious activities are still making lot of problems in all kind of networks. Some of the malicious activities can be controlled and some can’t be, whereas controlling the malicious activities affects the network traffic or data should be detected and eliminated mainly. Malicious activities created in network layers affect the data and network traffic. In this paper controlling the blackhole and wormhole attacks is taken as the problem statement. To solve the problem this paper proposed a new framework for detecting and eliminating blackhole and wormhole attacks in wireless ad-hoc networks. To do that a cross layer verification framework is proposed and simulated in NS2 software to verify the efficiency. In order to evaluate the performance the obtained performance parameters are compared with existing approaches. The proposed framework can be provided as a add-on service support for cloud environment.

Augmented lightweight security scheme with access control model for wireless medical sensor networks

Advances made in the wearable and biosensor has attracted the applicability and usability of the healthcare applications. The biosensors collect the human physiological data from a remote area using wireless communication medium. Different form of security implications have to be exhibited in wireless body area networks (WBAN). This paper researches on enhancing the network layer and application layer of the WBAN in healthcare environment. The objective of the each phase is to enhance the data accuracy of the collected data with minimized delay. In the first phase, we have constructed attack model for Sybil, sinkhole and wormhole attacks and detected those attacks under different constraints. Secondly, an efficient packet transmission model which helps to transmit the sensed data based on their emergency using weighted product model. After devising network layer, a lightweight security scheme, an improved elliptic curve cryptography (ECC) that permits the data access for the authorized users. Experimental analysis is carried out for each phase under pre-defined simulation parameters which explores better results. The framed attack model detects the three eminent attacks in terms of false positive rate and false negative rate which helps the data controller for message transmission process. Likewise, we have also achieved 97% packet delivery ratio with 0.8 ms packet dropping ratio for better packet transmission model than the existing TOPSIS model. Time taken for key generation and secret key exchange using our proposed ECC achieved 2.4 and 0.96 ms. The overall system proves that our research model achieves scalable and fairness medical sensor networks system.

A hierarchical detection method in external communication for self-driving vehicles based on TDMA.

Security is considered a major challenge for self-driving and semi self-driving vehicles. These vehicles depend heavily on communications to predict and sense their external environment used in their motion. They use a type of ad hoc network termed Vehicular ad hoc networks (VANETs). Unfortunately, VANETs are potentially exposed to many attacks on network and application level. This paper, proposes a new intrusion detection system to protect the communication system of self-driving cars; utilising a combination of hierarchical models based on clusters and log parameters. This security system is designed to detect Sybil and Wormhole attacks in highway usage scenarios. It is based on clusters, utilising Time Division Multiple Access (TDMA) to overcome some of the obstacles of VANETs such as high density, high mobility and bandwidth limitations in exchanging messages. This makes the security system more efficient, accurate and capable of real time detection and quick in identification of malicious behaviour in VANETs. In this scheme, each vehicle log calculates and stores different parameter values after receiving the cooperative awareness messages from nearby vehicles. The vehicles exchange their log data and determine the difference between the parameters, which is utilised to detect Sybil attacks and Wormhole attacks. In order to realize efficient and effective intrusion detection system, we use the well-known network simulator (ns-2) to verify the performance of the security system. Simulation results indicate that the security system can achieve high detection rates and effectively detect anomalies with low rate of false alarms.