The Impact of Mobility Patterns on MANET Vulnerability to DDoS Attacks

Abstract

In this article, we investigate the influence of mobility models, node speed and attack duration on the MANET vulnerability to bandwidth attacks, which are performed as distributed denial of service (DDoS) attacks. We propose the attack model and present a comprehensive simulation study, carried out by the network simulator ns-2 and its associated tools for mobile scenario generation, network animation and trace files analysis. The following mobility models have been compared: Random Waypoint, Manhattan Grid, Gauss-Markov, and Reference Point Group Mobility. Simulation results indicate that MANET inherent features, such as node mobility pattern and speed, strongly affect the degree of vulnerability to DDoS attacks. Possible countermeasures against this type of attack have also been discussed. Ill. 6, bibl. 17, tabl. 2 (in English; abstracts in English and Lithuanian). M. Stojanovic, V. Acimovic-Raspopovic, V. Timcenko. Mobilumo modelio poveikis MANET tinklų jautrumui DDoS atakoms // Elektronika ir elektrotechnika. -Kaunas: Technologija, 2012. -Nr. 3(119). -P. 29-34.Nagrinėjama mobilumo modelių, mazgų judėjimo greičių ir atakos trukmės įtaka MANET klasės tinklų pažeidžiamumui veikiant pralaidumo juostos atakoms, kurios yra vykdomos kaip paskirstytos "atsisakymo aptarnauti" atakos (DDoS). Pasiūlytas atakos modelis ir pateikta išsami modeliavimo studija, atlikta naudojant ns-2 tinklo stimuliatorių ir susijusius įrankius mobiliam scenarijui generuoti, tinklui animuoti ir trasavimo failams analizuoti. Palyginti tokie mobilumo modeliai: atsitiktinio mazgo, Manhatano tinklo, Gauso-Markovo ir atskaitos taško grupės mobilumo. Modeliavimo rezultatai rodo, kad būdingos MANET charakteristikos, tokios kaip tinklo mazgų judėjimo modelis ir jų greitis, labai veikia pažeidžiamumo DDoS atakomis lygį. Apžvelgti galimi apsisaugojimo nuo tokio tipo atakų būdai. Il. 6, bibl. 17, lent. 2 (anglų kalba; santraukos anglų ir lietuvių k.).

A Survey of Attacks and Countermeasures for Denial of Services (DoS) in Wireless Ad hoc Networks

“…Though various routing protocol have limited or partial control over the Denial of Service (DoS) attacks. Security mechanism for any type of attack in ad hoc network may have two ways either preventive or reactive [9] [14] [20]. In general, preventive mechanisms include authentication using cryptography or by applying firewall.…”

“…To avoid flooding, a very general approach is to use binary exponential back off in g [3] or check packet forwarding ratio of a malicious node in network [14] [20]. For rushing attack, Secured Dynamic Source Routing (SDSR) can be used [2].…”

“…Second, a node deliberately drops incoming packets, such nodes are called malicious node. Blackhole attack is belongs to this type of attack SYN flooding: A malicious node sends many TCP connections request to a target node to drain out its resources[6] [20].…”

An Approach for DDoS Attack Prevention in Mobile ad hoc Networks

“…One of the most arguable questions related to the proper implementation and use of the MANET is the security provision. MANETs are far more vulnerable to the attacks that the conventional networks [2]. The external attacks are performed by the attackers that are active outside the monitored network, while usually more severe attacks are coming from the insiders.…”

An Improved Dynamic Password-based User Authentication Scheme for Hierarchical Wireless Sensor Networks

“…Denial-of-service attack [27] is useless against our proposed scheme since acknowledgement about a successful authentication from the is being sent over the to the user .…”