Detection of misbehaving node using Secure Acknowledgement in MANET

Mobile ad hoc networks (MANETs) have gained more interest from consumers and academics than ever before thanks to the proliferation of wireless networks and the expansion of the benefits and uses of communication networks in general. MANETs are useful in a wide variety of settings since they don't rely on a centralised server or other hardware to relay messages or process data packets. It's one of the primary justifications for implementing MANET in many different domains. However, there are also numerous difficulties that have arisen as a result of these networks' rising popularity, with network security being one of the most crucial. There have been challenges with data transmission and reception due to MANETs' weak regulatory and security frameworks; network infiltration has been identified as one of the most pressing concerns. In MANETs, wireless nodes serve as relays and routers, connecting the source and sink nodes. Accordingly, it is now possible for rogue nodes to penetrate networks and destroy data packets. In order to cope with this issue, modern intrusion detection systems (IDSs) are utilised for remote monitoring of the functioning and actions of nodes present in wireless sensor networks. As well as being able to identify hostile nodes in the network, IDSs can often predict how such nodes will act in the future. In this research work, NSL-KDD dataset is used as an input data. SMOTE and Z-score method are used during pre-processing to remove the irrelevant features and normalize the data. The optimal features are carried out by Artificial Butterfly algorithm and then, finally, ensemble classifiers s. Multilayer Perceptron (MLP), Boosted Regression Trees (BRT) and finally, the adaptive voting mechanism is used to select the best classifier. The results proves that the proposed ensemble model achieved 97.16% of accuracy, where the existing models achieved nearly 95% to 96% of accuracy.

In recent years with the rapid growth of wireless devices, Mobile Ad hoc Networks (MANETs) have become a very important technology. However, MANETs are more vulnerable than wired and wireless networks. Whereas, MANETs are deployed in un-trusted environments, so, security and intrusion detection are very important and one of critical issues in these networks. In this paper, we present a scheme for determining of IDS agent nodes with applying a three-tiered architectural framework. Our scheme selects the nodes of the network which are valid nodes and also have higher battery power. IDS agent nodes because of monitoring activities in Intrusion Detection System (IDS) need to more energy than other nodes in the network. In the first phase, our scheme uses three-tiered key management framework (DDC) in order to authentication. So, authorized nodes contribute in monitoring activities and also communication cost in three-tiered key management framework is less than other frameworks. In the second phase, IDS agent nodes will be selected from among valid nodes which have higher battery power. Therefore, network lifetime will be increased.

Security has become important to mobile ad hoc networks (MANETs) due mainly to their use for many mission and life-critical applications. However, the broadcast nature of inter-node communications and node mobility in MANETs make it very challenging to secure MANETs. Moreover, their constantly changing topology causes network node density and neighbor relationships to change dynamically. This paper presents an intrusion detection system (IDS) for MANETs at the application layer. The IDS utilizes (1) both anomaly and misuse detection schemes to identify attacks in MANETs and (2) mobile agents (MAs) to augment each node's intrusion-detection capability. In particular, each node is equipped with a local IDS, and MAs will be dispatched periodically or on-demand to augment each node's IDS. We present the design of this IDS and the overall network structure, as well as the methods for authenticating and dispatching MAs. We also evaluate the trade-offs between different design parameters of MAs.

Intrusion Detection Systems (IDSs) for Mobile Ad hoc NETworks (MANETs) is becoming an exciting and important technology in very recent years, because the intrusion prevention techniques can not satisfy the security requirements in mission critical systems. The proposed IDS architecture can be divided into two categories by the distributing form of IDS agents: fully distributed IDS and cluster-based IDS. The former has a high detection ratio, but it also consumes a cascade of energy. The latter has considered energy saving, but some hidden troubles of security exist in it. In this paper, we have proposed a novel IDS Agent Distributing (IAD) protocol for distributing IDS agents in MANETs. IAD protocol divides the whole network into several zones, selects a node subset from each zone, and runs IDS agent on the node in this subset. At the same time, IAD protocol can rectify the number of nodes running IDS agent according to the threat level of the network. Compared with the scheme that each node runs its own IDS, our proposed scheme is more energy efficient while maintaining the same level of detection rate. While compared with the cluster-based IDS scheme, our scheme is more flexible when facing the emergent situations. Simulation results show that our scheme can effectively balance the security strength and energy consuming in practice.

Energy consumption and dissipation of mobile nodes is considered as one of the significant aspect affecting the entire lifetime of Mobile Ad-Hoc Networks (MANETs), as the nodes depends on limited battery power. In addition, spatial and temporal characteristics of mobile nodes also make energy imbalance in the network. Towards this, there are several studies that emphasis on improving the network lifetime and reliability by altering the existing MANET routing protocols. In this paper, an Energy Factor based Ad-Hoc On Demand Distance Vector routing algorithm (EF-AODV) is proposed in MANETs for lifetime enhancement. The proposed technique includes two algorithms by leveraging the cross layer paradigm. Firstly, proposed EF-AODV dynamically chooses intermediate nodes based on battery power, and mobility of the nodes in the direction of destination. Secondly, for uniform energy consumption, we calculate the energy factor at each intermediate mobile node by considering the sleep and ideal states of the nodes along with mobility. Further, the energy factor is considered as a key metric to obtain the optimal path from the source to the destination to balance the energy disparity in the network, leading to reduced delay in packet transmission. The path with highest energy factor value is selected for networking of data packets. Upon extensive simulation using Network Simulator (NS-2.34), we illustrate that the proposed EF-AODV outperforms over existing ad-hoc routing approaches under the various performance metrics.

Objective: To improve IDS strategy with high detection accuracy and reduce the power consumption of the nodes in MANET. Methods: There are several intrusion detection systems are developed. In order to increase the performance of IDS, Bayesian Correlated Equilibrium based IDS which incorporates two main processes namely, Cluster Head selection and Hybrid IDS for MANET is proposed. The game theory is also used to increase the detection accuracy of IDS. Findings: Mobile Ad-hoc Network (MANET) is an autonomous system that consists of battery powered mobile nodes. MANETs are prone to several attacks as they are continuously self configuring and infrastructure less. As the nodes are mobile, they are susceptible to intrusions. The Intrusion Detection System has issues of heavy traffic related to IDS in the network, which causes congestion. It also leads to high energy consumption among the nodes. So designing an efficient MANET should have certain number of goals such as effective intrusion detection, light traffic and low energy consumption and power loss. Many Intrusion detection schemes were proposed that normally incurs power loss in the node as there is a need for continuous monitoring. Application/Improvements: To increase detection accuracy, decrease power consumption and the IDS traffic Bayesian Correlated Equilibrium based IDS for MANET is presented.

Mobile Ad hoc networks (MANETs) are susceptible to several attacks due to their general infrastructureless scenario, dynamic topology and other characteristics. General security mechanisms that exist in wired network cannot be applied efficiently in MANET. In the current literature, there are many proposals for intrusion detection system (IDS) in MANET as a second defense. However, all such IDS suffer from performance penalties and high false alarm rates. In this paper we propose a collaborative IDS for MANET using Bayesian method. We use a set of very useful features which guarantee the effectiveness of the IDS and the Bayesian method improves the efficiency in the detection procedure. We expect it to be more versatile than other existing collaborative methods. Considering the protocol-independence of our method, it may be applied in any Ad hoc scenario.

Intrusion Detections Systems(IDSs) in ad hoc net- works monitor other devices for intentional deviation from protocol, i.e., misbehavior. This process is complicated due to limited radio range and mobility of nodes. Unlike conventional IDSs, it is not possible to monitor nodes for long durations. As a result IDSs suffer from a large number of false positives. Moreover other environmental conditions like radio interference and congestion increase false positives, complicating classification of legitimate nodes and attackers. We present a scheme that helps in accurate diagnosis of malicious attacks in ad hoc networks. Our scheme employs cross- layer interactions based on observations at various networking layers to decrease the number of false positives. Our simulations show that our scheme is more effective and accurate than those based on isolated observations from any single layer. I. INTRODUCTION Mobile ad hoc networks (MANETs) are comprised of a dy- namic set of cooperating peers, which share their wireless ca- pabilities with other similar devices to enable communication with devices not in direct radio-range of each other, effectively relaying messages on behalf of others. Conventional methods of identification and authentication are not available, since the availability of a Certificate Authority (CA) or a Key Distribu- tion Centre (KDC) cannot be assumed. Consequently, mobile device identities or their intentions cannot be predetermined or verified. Communication protocols are though designed for fairness in contention resolution provide no enforcement mechanism to ensure it. Protocols are fair to the extent to which the de- vices conform to the protocol specifications. Wireless Medium Access Control(MAC) Protocols like 802.11 that employ dis- tributed contention resolution for gaining access to the shared wireless channel are susceptible to attack from selfish nodes trying to gain an unfair share of the medium. The various networking layers from the lowest physical layer to the application layer were designed for with the tacit assumption that devices comprising the network will be protocol conformant. Herein lie several security threats, some arising from short- comings in the protocols, and others from the lack of con- ventional identification and authentication mechanisms. These inherent properties of ad hoc networks make them vulnerable, and malicious nodes can exploit these vulnerabilities in the networking layers for selfish or even malicious motives. Selfish nodes can slightly deviate from the MAC protocol specifi- cation for contention resolution in order to gain an unfairly large share of the bandwidth. More harmful attacks like packet dropping, routing disruption, jamming attacks or other forms of Denial-of-Service (DOS) at any of the networking layers can severely disrupt MANET communications. Traditionally, intrusion detection involves looking at events and activities in individual layers of the modeled OSI stack. Various pattern matches at the Transport layer, for example, can indicate SYN attacks. However, sophisticated attacks that simultaneously exploit vulnerabilities at multiple layers of the communication proto- cols will be especially hard to detect. By using observations of both external and internal events at multiple layers of the OSI our approach will be to use observations both external and internal from various layers of the OSI stack for a more accurate evaluation of bad nodes and good nodes. In this paper we show the results of looking specifically at malicious RTS activity in the 802.11 MAC layer when combined with packet dropping at the Network layer. Robust IDS and response systems will depend on accurate classification of attacks and identification of attackers. In order for devices to establish and maintain trust relations - and evolve reputations, there is a need to balance the intrusion de- tection effort with the individual node's primary function. The goal is to maximize the probability that malicious behavior will be correctly detected (True Positives), while minimizing the probability that good nodes will be falsely accused (False Positives).

<p>Mobile Ad hoc Network (MANET) is a system of wireless mobile nodes that dynamically self-organized in arbitrary and temporary network topologies without communication infrastructure. This network may change quickly and unforeseeable. The unique characteristics of MANET give an adversary the opportunity to launch numerous attacks against ad-hoc networks.So the security is an important role in MANETs. This article aims to present the concept of intrusion detection system (IDs) and surveys some of major intrusion detection approach against neutrosophic intrusion detection system in MANETs. Current IDS’s corresponding to those architectures are also reviewed and compared. This paper introduces the accuracy rate and false alarm rate of four completely different classifiers to observe the percentage and the efficiency of the classifiers in detecting attacks in MANETs. Results show that Neutrosophic intelligent system based on genetic algorithm could facilitate significantly in detecting malicious activities in MANETs. Hence, neutrosophic techniques could be utilized to suit the ambiguity nature of the IDs.</p>

In Mobile Ad Hoc Networks (MANETs), the process of sending end-to-end acknowledgement (ACK) for each packet by the destination, causes unnecessary overhead. This paper proposes an Enhanced Reliable ACK (ERACK) scheme for detecting misbehaving attacks in MANET. Initially, reliable multiple paths are established by measuring the path reliability. For defending the data transferred from the dispatcher, one-way hash chain based Message Authentication Code (MAC) is utilised. If the packet loss count is above a threshold, then Secure ACK (S-ACK) mode is activated which identifies the misbehaving node. The source then generates a Misbehavior Report Authentication (MRA) message which is transmitted to the destination using the path with next higher reliability. By experimental results it is shown that the ERACK method decreases the packet loss and delay while ensuring the successful delivery of MRA to the destination.

Security is very important for the reliable operation of mobile Ad Hoc networks (MANETs). One of the critical security issues in MANETs is the revocation of misbehaving nodes. In this paper, we propose a trust based threshold cryptography revocation scheme for MANETs. In our proposed scheme, the master private key is split into n pieces according to a random polynomial. Each node in the proposed scheme is configured with a share ski of the CA private key SK, the node's public key pki, and the CA public key PK before joining the network. Meanwhile, the master private key could be recovered by combining any threshold t pieces based on Lagrange interpolation. Consequently, the proposed scheme improves the safety levels in MANETs. The proposed hop-by-hop certificate revocation scheme is based on both threshold cryptography and transitive trust between mobile nodes. Because of the decentralized nature of our proposed scheme, it enables a group of legitimate nodes to perform fast revocation of a nearby misbehaving node. The proposed scheme is highly robust in the mobility environment of MANETs. The advantages of the proposed scheme are justified through extensive simulations.

Reputed Packet Delivery Using Efficient Audit Misbehaviour Detection and Monitoring Method in Mobile Ad Hoc Networks

Intrusion detection system (IDS) design for mobile adhoc networks (MANET) is a crucial component for maintaining the integrity of the network. The need for rapid deployment of IDS capability with minimal data availability for training and testing is an important requirement of such systems, especially for MANETs deployed in highly dynamic scenarios, such as battlefields. This work proposes a two-level detection scheme for detecting malicious nodes in MANETs. The first level deploys dedicated sniffers working in promiscuous mode. Each sniffer utilizes a decision-tree-based classifier that generates quantities which we refer to as correctly classified instances (CCIs) every reporting time. In the second level, the CCIs are sent to an algorithmically run supernode that calculates quantities, which we refer to as the accumulated measure of fluctuation (AMoF) of the received CCIs for each node under test (NUT). A key concept that is used in this work is that the variability of the smaller size population which represents the number of malicious nodes in the network is greater than the variance of the larger size population which represents the number of normal nodes in the network. A linear regression process is then performed in parallel with the calculation of the AMoF for fitting purposes and to set a proper threshold based on the slope of the fitted lines. As a result, the malicious nodes are efficiently and effectively separated from the normal nodes. The proposed scheme is tested for various node velocities and power levels and shows promising detection performance even at low-power levels. The results presented also apply to wireless sensor networks (WSN) and represent a novel IDS scheme for such networks.

The prime characteristics of Mobile Ad Hoc Network (MANET) are infrastructure free, absence of centralized authority and dynamic nature of nodes which are more vulnerable to security attacks. Reliability and security are prime issues to protect information and nodes in a network during communication which has received more research interest in designing a dynamic secured routing scheme. QoS is set of service requirement that needs to be satisfied by the network during the data transmission in the network. From the perception of QoS best effort protocols ensure optimum network operation in a unpredictable mobile environment. The multimedia applications are intolerable towards delay and reliability which are the features of mobile network, hence the potentials of MANET were not utilized in multimedia applications. These issues of delay and reliability of packet transmission in MANET are contributed by stability of the communication link even during the mobility of the nodes Its a necessity to analyze the performance of various secured routing protocols based on the stability of the communication link in case of mobility of nodes during data transfer. This paper is focused on a comparative study of various secured reactive routing protocols in MANET signifying the connectivity stability during the mobility of the nodes.

This paper presents a resilient routing algorithm that is more suitable for a Mobile Ad Hoc Network (MANET) with node quick moving or node sparse, than traditional routing algorithms such as Ad-hoc On-demand Distance Vector (AODV) routing. Since AODV routing in MANETs is known for its advantageous properties, the proposed routing algorithm is based on the AODV, and called RAODV (Resilient AODV). In the route discovery phase, it differs from AODV, which only establishes one routing path from a source node to the destination node, whereas RAODV establishes as many routes as possible. Thus, when the primary route breaks, the node can immediately adopt an alternative route without further route research effort. If no possible alternative route exists, the node will transmit the route break information backward to instruct the previous node on the reverse route to select an alternative one, and so on. The proposed RAODV can reduce the number of route rediscovery procedures, and thus improve the packet loss rate and transmission delay, especially in sparse MANETs. Simulator ns2 was used to evaluate the performance of RAODV. In some cases, the proposed RAODV was able to reduce the packet loss rate by 72.61% compared to traditional AODV.