No abstract

Abstract. Mobile Ad Hoc networks (MANETs) are susceptible to having their effective operation compromised by a variety of security attacks. Nodes may misbehave either because they are malicious and deliberately wish to disrupt the network, or because they are selfish and wish to conserve their own limited resources such as power, or for other reasons. In this paper, we present a mechanism that enables the detection of nodes that exhibit packet forwarding misbehavior. We present evaluation results that demonstrate the operation of our algorithm in mobile ad hoc environments and show that it effectively detects nodes that drop a significant fraction of packets.

No abstract

Abstract-Devices in a Mobile Ad Hoc network (MANET) may misbehave by dropping packets that are forwarded in the network, for example because they are malicious and deliberately intend to disrupt the network, or because they are selfish and wish to conserve their own limited resources such as power. In this paper, we present a mechanism that enables the detection of nodes that exhibit packet forwarding misbehavior. We present initial evaluation results that demonstrate the operation of our algorithm and show that it effectively detects nodes that drop a significant fraction of packets.Keywords-mobile ad hoc network, misbehavior detection, packetforwarding.I. INTRODUCTION The wireless nature and inherent features of mobile ad hoc networks make them vulnerable to a wide variety of attacks by misbehaving nodes. Such attacks range from passive eavesdropping, where a node tries to obtain unauthorized access to data destined for another node, to active interference where malicious nodes hinder network performance by not obeying globally acceptable rules. Misbehavior can be divided into two categories [1]: routing misbehavior (failure to behave in accordance with a routing protocol) and packet forwarding misbehavior (failure to correctly forward data packets in accordance with a data transfer protocol). In this paper we focus on the latter type of misbehavior. Our approach consists of an algorithm that enables packet forwarding misbehavior detection through the principle offlow conservation [3]. Our scheme is not tightly coupled to any specific routing protocol and, therefore, it can operate regardless of the routing strategy adopted. Our criterion for judging a node is the estimated percentage of packets dropped, which is compared against a pre-established misbehavior threshold. Any node dropping packets in excess of this threshold is deemed a misbehaving node while those below the threshold are considered to be correctly behaving.In this paper we first present a framework and an algorithm and protocol that deal with this attack. We then demonstrate through simulations that an appropriate selection of the misbehavior threshold allows for a good discrimination between misbehaved and well-behaved nodes in a network that is affected by black hole attacks, where malicious nodes drop all packets they receive, and/or gray hole attacks, where they

No abstract