A Cross-Layer, Anomaly-Based IDS for WSN and MANET.

A Review on Cooperative Bait Based Intrusion Detection in MANET

Mobile Ad Hoc Networks (MANETs) are infrastructure-less networks that are mainly used for establishing communication during the situation where wired network fails. Security related information collection is a fundamental part of the identification of attacks in Mobile Ad Hoc Networks (MANETs). A node should find accessible routes to remaining nodes for information assortment and gather security related information during route discovery for choosing secured routes. During data communication, malicious nodes enter the network and cause disturbances during data transmission and reduce the performance of the system. In this manuscript, a Time Interval Based Blockchain Model (TIBBM) for security related information assortment that identifies malicious nodes in the MANET is proposed. The proposed model builds the Blockchain information structure which is utilized to distinguish malicious nodes at specified time intervals. To perform a malicious node identification process, a Network Block Monitoring Node (NBMN) is selected after route selection and this node will monitor the blocks created by the nodes in the routing table. At long last, NBMN node understands the location of malicious nodes by utilizing the Blocks created. The proposed model is compared with the traditional malicious node identification model and the results show that the proposed model exhibits better performance in malicious node detection.

The Mobile Ad Hoc Network (MANET) depending on dynamic distributed topology presents several challenges such as decentralized infrastructure. In MANET, each node act as a host as well as a router to exchange packet. From Source to destination, the MANET nodes offer the ability of transmission to send, receive, and route traffic. Moreover, the presence of selfish nodes or malicious nodes in MANETs significantly degrades network performance. Identifying and isolating such nodes poses a formidable challenge. Consequently, this research introduces a security model founded on the principles of an Artificial Immune System (AIS) to detect and defend against Selfish Node (SN) attacks. This research work employs the principles of AIS to categorize a node's behavioral state based on the Mature Context Immune Antigen Rate (MCIAR). Subsequently, a hybrid protocol named Reliable History‐dependent Resource Conscious Clustered and Defensive AODV (RRCC‐DAODV) is introduced to detect Selfish Nodes (SNs) and counteract their attacks. Within the RRCC algorithm, the identification of selfish nodes relies on both Trust Value (TV) and Residual Energy (RE). Additionally, the proposed DAODV protocol incorporates the V‐detector algorithm to enhance defense mechanisms against potential attacks. The simulation of the proposed model is carried out in NS3. The proposed mechanism achieves a detection ratio of 94.05%. The simulation outcomes demonstrate the excellence of the implemented system. This superiority is observed when compared to other standard protocols, as indicated by the parameters of throughput, residual energy, packet delivery ratio, and delay.

Gray and Black Hole Attack Identification Using Control Packets in MANETs

Objective: To improve IDS strategy with high detection accuracy and reduce the power consumption of the nodes in MANET. Methods: There are several intrusion detection systems are developed. In order to increase the performance of IDS, Bayesian Correlated Equilibrium based IDS which incorporates two main processes namely, Cluster Head selection and Hybrid IDS for MANET is proposed. The game theory is also used to increase the detection accuracy of IDS. Findings: Mobile Ad-hoc Network (MANET) is an autonomous system that consists of battery powered mobile nodes. MANETs are prone to several attacks as they are continuously self configuring and infrastructure less. As the nodes are mobile, they are susceptible to intrusions. The Intrusion Detection System has issues of heavy traffic related to IDS in the network, which causes congestion. It also leads to high energy consumption among the nodes. So designing an efficient MANET should have certain number of goals such as effective intrusion detection, light traffic and low energy consumption and power loss. Many Intrusion detection schemes were proposed that normally incurs power loss in the node as there is a need for continuous monitoring. Application/Improvements: To increase detection accuracy, decrease power consumption and the IDS traffic Bayesian Correlated Equilibrium based IDS for MANET is presented.

Mobile Ad hoc Networks (MANET) comprises of self-organizing autonomous mobile nodes. MANETs are open and decentralized. Therefore they are vulnerable to malicious entities. MANETs are multi-hop wireless network where all nodes supportively maintain network connectivity without a centralized infrastructure. Since MANETs are infrastructure less and independent, the secure communication is the main issue. Therefore they are vulnerable to malicious entities. Here the location identity and traffic can be traced out by an outside observer. Anonymity means secure communications by hiding node identities and preventing traffic analysis attacks by outside observers. This paper proposes Position based Anonymous Routing Scheme in MANETs (PARS).Here the routing is based on Greedy Perimeter Stateless Routing Protocol. The objective is an anonymous routing protocol for the network. The proposed one is a zone based anonymous GPSR based protocol that can provide source, destination and route anonymity. Performance of the proposed system is compared with that of GPSR and AODV using Network Simulator. Index Terms: Anonymous routing, position-based routing, random forwarder, zone partition. I. Introduction Mobile Ad hoc Networks are collection of independent mobile nodes that can communicate by radio waves. It is an infrastructure less self-organizing network. The nodes that are in radio range can communicate by single hop or by multi hop with the help of intermediate nodes. The network is open and decentralized and fully distributed. So they are perfect choice for communication and information sharing. MANETs are susceptible to malicious entities that aim to alter and analyzed the traffic analysis by communication eaves dropping or attacking routing protocols. MANETs are characterized by their distributed operation, multi hop routing, dynamic topology and shared physical medium. Nodes in a MANET are independently free to move in any direction. Due to the lack of a centralized coordinator security is the major concern here. Wireless communication can endure interferences or malicious interceptions; whereas multi-hop communication assumes that each node will perform properly its functions to support network services. Further, self-organization increases the complexity of security management operations as access control, node authentication, secure routing and cryptographic key distribution. There is no fixed infrastructure and the topology is frequently changing due to node mobility or environmental changes. Therefore, it is very hard to maintain a stable and efficient end-to-end route in an ad-hoc network. Each node in MANET is energy constrained. There is verylimited physical security in MANET. The type of attacks can be Active attacks or Passive attacks. The common security issues are Passive attacks which include eaves dropping and information disclosure. Active attacks include Do Sand Data modification. There are other more specific problems with mobile ad hoc network such as vulnerability of channels and nodes, Byzantine black hole and Byzantine wormhole attack. The security issue also includes attacks that may inject erroneous routing information and diverting network traffic thus making routing inefficient. There are many methods to reduce the impact of these attacks, which include a secure routing using public and private key s to get a certification authority and use of digital signatures and prior it rust relationships. Routing is the process of communication from one node to the other host in a network. Routing is the process off or warding packet towards its destination using most efficient path. Routing efficiency is measured in terms of Number of hops, traffic, security, etc. Routing protocols in MANETs are divided as reactive proactive and hybrid. Reactive Protocol maintains the routes in on demand manner. In route discovery phase it floods the route request (RREQ) packets throughout the network. Dynamic source Routing (DSR), ad hoc on- demand distance vector routing (AODV) are some of the examples of reactive protocols. In proactive approach every node in the MANET continuously maintains the complete routing information of the entire network. This is accomplished by flooding network periodically with network status information. Global State Routing (GSR), Hierarchical State Routing (HSR) and Destination Sequenced Distance Vector Routing (DSDV) are some of the examples of proactive

Now a day's use of wireless communication is very common and growing faster. There are different types of wireless networks which are designed as per the requirement of data rate and coverage. In this paper scope is limited to widely study and used network called Mobile Ad hoc Network (MANET). MANET is collection of wireless devices which communicate among each other without need of any physical infrastructure as well as centralize administrations. Each mobile node in MANET acts as peer node. The communication is MANET is based on routing methods and hence since from last 2 decade there are number of routing methods designed with objective of improving the Quality of Service (QoS) performance of MANET. As the mobile nodes in MANET are moving randomly with varying mobility speed, this can leads the challenging tasks to achieve the guaranteed QoS performance. Therefore it is required to have efficient routing protocol with load balancing and dynamic behaviour of mobile nodes handling in MANET. In this paper, our goal first is to present the study on different QoS aware routing methods and non-routing methods designed by various research groups for MANET. Second objective is to design novel QoS Aware routing protocol for improving the QoS performance in MANET. Additionally, we are presenting the current research gap based on analysis of all recent methods of QoS improvement. The outcome of this paper is the current research problems and efficient QAODV routing method.

Mobile ad hoc networks (MANETs) have gained more interest from consumers and academics than ever before thanks to the proliferation of wireless networks and the expansion of the benefits and uses of communication networks in general. MANETs are useful in a wide variety of settings since they don't rely on a centralised server or other hardware to relay messages or process data packets. It's one of the primary justifications for implementing MANET in many different domains. However, there are also numerous difficulties that have arisen as a result of these networks' rising popularity, with network security being one of the most crucial. There have been challenges with data transmission and reception due to MANETs' weak regulatory and security frameworks; network infiltration has been identified as one of the most pressing concerns. In MANETs, wireless nodes serve as relays and routers, connecting the source and sink nodes. Accordingly, it is now possible for rogue nodes to penetrate networks and destroy data packets. In order to cope with this issue, modern intrusion detection systems (IDSs) are utilised for remote monitoring of the functioning and actions of nodes present in wireless sensor networks. As well as being able to identify hostile nodes in the network, IDSs can often predict how such nodes will act in the future. In this research work, NSL-KDD dataset is used as an input data. SMOTE and Z-score method are used during pre-processing to remove the irrelevant features and normalize the data. The optimal features are carried out by Artificial Butterfly algorithm and then, finally, ensemble classifiers s. Multilayer Perceptron (MLP), Boosted Regression Trees (BRT) and finally, the adaptive voting mechanism is used to select the best classifier. The results proves that the proposed ensemble model achieved 97.16% of accuracy, where the existing models achieved nearly 95% to 96% of accuracy.

Early designs of mobile ad-hoc networks (MANETs) assumed they could be scaled to very large topologically flat networks where every node in the network has equal capability and access to the wireless channel. This assumption was called into question in 2000 by Gupta and Kumar [1] who established an asymptotic theoretical limit for node capacity as the number of nodes in a single channel MANET becomes large. Recent field experiments have confirmed that this theoretical limit may be difficult to overcome. To address MANET scalability alternative MANET designs have been developed in which a wireless channel are shared by only a subset of the entire collection of network nodes. Subnets are then linked by gateway nodes that operate on two or more channels and provide connectivity across the entire network. In these MANET designs gateway nodes transmit and receive on multiple subnets and can become bottlenecks in the network if there are too few gateways. On the other hand, if the network contains many gateways, then too much subnet bandwidth may be allocated to gateways and insufficient bandwidth allocated to single channel nodes. This paper examines the design of MANETs based on two subnets and determines the optimal number of gateway nodes which maximizes overall network performance for a uniform message traffic loading.

Intrusion Detection Systems (IDSs) for Mobile Ad hoc NETworks (MANETs) is becoming an exciting and important technology in very recent years, because the intrusion prevention techniques can not satisfy the security requirements in mission critical systems. The proposed IDS architecture can be divided into two categories by the distributing form of IDS agents: fully distributed IDS and cluster-based IDS. The former has a high detection ratio, but it also consumes a cascade of energy. The latter has considered energy saving, but some hidden troubles of security exist in it. In this paper, we have proposed a novel IDS Agent Distributing (IAD) protocol for distributing IDS agents in MANETs. IAD protocol divides the whole network into several zones, selects a node subset from each zone, and runs IDS agent on the node in this subset. At the same time, IAD protocol can rectify the number of nodes running IDS agent according to the threat level of the network. Compared with the scheme that each node runs its own IDS, our proposed scheme is more energy efficient while maintaining the same level of detection rate. While compared with the cluster-based IDS scheme, our scheme is more flexible when facing the emergent situations. Simulation results show that our scheme can effectively balance the security strength and energy consuming in practice.

Recent introduction of hybrid architectures in Mobile Adhoc NETworks (MANETs) made researchers to concentrate on routing techniques to prolong the network lifetime with improved performance and scalability. Major research activity has been carried out to explore and improve constrained lifespan of the network by proposing on - demand power aware routing protocols. However, these protocols try to increase the network life time but doesn’t guarantee a network remain operational forever. Charging of premature failure nodes which were frequently used as relying nodes is essential to prolong network lifespan. Therefore, to improve network connectivity and lifespan, it’s essential to charge energy drained nodes based on their expected lifetime. Hence, we propose a dynamic and secure routing cum energy recharging scheme using Mobile Power Back Ferry Nodes (MPBF) to recharge energy drained nodes. Consumption of energy from the MPBF nodes affords a most trustworthy energy supply than deriving energy from other sources. This approach retains the node energy to maximum time with improved battery life by selecting a gateway based on link weight age. Secure Source- Based Loose Synchronization (SOBAS) protocol is used for authenticated power transfer. The total number of MPBF nodes required for the optimum energy conservation is determined by the target detection mechanism assigned by the Secured Sink Trail (SST). Using this joint methodology, the network lifetime and percentage of energy consumption of mobile nodes under two different scenarios (a) Variable node velocity and network traffic with fixed node density (b) Variable node density and node velocity with fixed network traffic are analyzed. We evaluate the proposed scheme performance through NS2 simulations. The results show that the proposed scheme can retain the network lifetime for a longer duration. Its performance is compared with power aware and ACO based Dynamic Power Control and load balanced energy efficient routing protocols under different QoS scenarios.

A mobile ad-hoc network (MANET) is a temporary network of wireless mobile nodes. In a MANET, it is assumed that all of the nodes cooperate with each other to transfer data packets in a multi-hop fashion. However, some malicious nodes don’t cooperate with other nodes and disturb the network through false routing information. In this paper, we propose a prominent technique, called dual attack detection for black and gray hole attacks (DDBG), for MANETs. The proposed DDBG technique selects the intrusion detection system (IDS) node using the connected dominating set (CDS) technique with two additional features; the energy and its nonexistence in the blacklist are also checked before putting the nodes into the IDS set. The CDS is an effective, distinguished, and localized approach for detecting nearly-connected dominating sets of nodes in a small range in mobile ad hoc networks. The selected IDS nodes broadcast a kind of status packet within a size of the dominating set for retrieving the complete behavioral information from their nodes. Later, IDS nodes use our DDBG technique to analyze the collected behavioral information to detect the malicious nodes and add them to the blacklist if the behavior of the node is suspicious. Our experimental results show that the quality of the service parameters of the proposed technique outperforms the existing routing schemes.

In recent years with the rapid growth of wireless devices, Mobile Ad hoc Networks (MANETs) have become a very important technology. However, MANETs are more vulnerable than wired and wireless networks. Whereas, MANETs are deployed in un-trusted environments, so, security and intrusion detection are very important and one of critical issues in these networks. In this paper, we present a scheme for determining of IDS agent nodes with applying a three-tiered architectural framework. Our scheme selects the nodes of the network which are valid nodes and also have higher battery power. IDS agent nodes because of monitoring activities in Intrusion Detection System (IDS) need to more energy than other nodes in the network. In the first phase, our scheme uses three-tiered key management framework (DDC) in order to authentication. So, authorized nodes contribute in monitoring activities and also communication cost in three-tiered key management framework is less than other frameworks. In the second phase, IDS agent nodes will be selected from among valid nodes which have higher battery power. Therefore, network lifetime will be increased.

Mobile ad hoc networks (MANETs) can be defined as a collection of large number of mobile nodes. Due to self configuring ability of nodes and infrastructure less nature of network, MANET is preferred in variety of applications such as military, disaster stuck areas, emergency recovery etc. MANET is vulnerable to various attacks due to its open medium and wide distribution of nodes. This itself emphasize the importance of security and need for an efficient system, for example intrusion detection system in MANET. In literature, various intrusion detection systems (IDS) have been proposed for detecting the node that misbehaves in the network. The misbehaviour such as, delay or drop in data packets or acknowledgement packets, drop packets and modify routing information etc. are present. These misbehaviour need to be detected well in advance to keep network secure. In this paper we propose and implement, new IDS named as Secure Acknowledgement (ACK) System. The Secure ACK system is purely an acknowledgement based technique. The type of misbehaviour detected by proposed system is about delay in packet transmission. In this system, for every three consecutive nodes in the route, the third node is required to send back an acknowledgement packet to the first node in the group. Based on the non-receipt of ACK packet within predefine time to the first node in the group, it reports about misbehaviour activity in the network. As soon as the proposed system detects misbehaving node present in the network, it stops the further data transmission. So, the misbehaving node will not be able to damage network thereafter.

In Mobile Ad-hoc Networks (MANETs), each node is free to move and connect with one another over a wireless connection, without the requirement for a centralized controller or base station. These features make MANET useful and functional in a variety of areas, including tactical situations, sensor networks, rescue operations, and students on campus. However, this type of network also has a range of issues such as security, Quality of Service, dynamic topology, scalability, the absence of central management, and energy consumption. Since MANET nodes have little battery life, the power usage is among the most important design considerations in wireless ad-hoc networks. Each node is responsible for forwarding the packets to its neighboring nodes. Since the MANET does not contain a hierarchy, some nodes may not participate in forwarding the packets and prefer to keep their remaining energy for themselves; these nodes are called selfish nodes. The presence of selfish nodes in the MANET greatly affects the efficiency and activity of the network. The process of detecting and isolating the selfish node does not constitute an easy task. It still requires further investigation and study. Therefore, this survey is intended to determine, study and analyze some new detection mechanisms used in detecting selfish nodes in MANETs. It also classifies them into three categories which are credit-based, reputation-based, and acknowledgment-based techniques. In addition, it highlights some critical issues in MANET according to selfish behavior, and points out the necessary requirements for better improvement as well as fields for future research.