Secure and Efficient Approach to Prevent Ad Hoc Network Attacks Using Intrusion Detection System

It is our great pleasure to welcome you to the 3rd ACM Workshop on Security of Ad Hoc and Sensor Networks (SASN'05), held in conjunction with the 12th ACM Conference on Computer and Communications Security (CCS'05), November 7, 2005, in Alexandria, Virginia.This year we received a total of 39 submissions on various aspects of ad-hoc and sensor network security. The program committee selected 6 as regular papers that cover a variety of topics, including trust establishment in Mobile Ad-Hoc Networks (MANETs), security of vehicular ad-hoc networks, secure group communication, key pre-distribution for sensor networks, jamming attacks against sensor network MAC protocols, and defense against Denial-of-Service (DoS) attacks. This year we continue the tradition of SASN'03 and SASN'04 to encourage the presentation and discussion of work-in-progress on ad-hoc and sensor network security. Among the 39 submissions, the program committee selected 7 papers to present in work-in-progress sessions, covering topics on anonymous routing for MANETs, key distribution for inter-group multicast in ad-hoc networks, improved topology assumptions for threshold cryptography in MANETs, RFID security, tracing in mobile wireless sensor networks, time synchronization attacks in sensor networks, and coordinated deployment for improving secure communications and sensing coverage in wireless sensor networks. In addition, the program includes a panel on Advances in Sensor and Ad-hoc Network Security and an invited keynote talk by Radha Poovandran (University of Washington) on Information Assurance in MANETs and Wireless Sensor Networks. We hope that these proceedings will serve as a valuable reference for security researchers and developers.

Ad-hoc 네트워크 환경에서의 많은 라우팅 알고리즘들은 소스 라우팅 기법을 기초로 설계되었으며 밀집된 ad-hoc 환경에서의 최단경로설정은 짧은 기간동안만 유지되는 제약사항이 존재한다 때문에 SSA와 ABR과 같은 라우팅 프로토콜은 링크 안정성을 고려하여 좀더 안정적인 경로를 탐색한다. 본 논문은 Ad-Hoc network 환경에 현실적으로 적합한 SSA 라우팅 알고리즘을 바탕으로 utilization 메트릭을 고려한 새로운 라우팅 기법에 대해 제안한다. 제안된 방식에서는 SSA의 특정 메트릭에 의한 병목현상을 해결하기 위해 연결을 위한 여러 경로들을 누적 utilization에 따라 분산시키도록 하여 네트워크상의 로드 밸런싱을 추구하였다. 성능 분석을 위해 기존의 라우팅 기법인 AODV와 SSA를 참고 비교 대상으로 하였다. ns-2 네트워크 시뮬레이션 결과 선택되어질 수 있는 안정적인 route가 많은 경우 전체 트래픽이 여러 경로들로 분산되어 경로 재설정(route reconstruction) 횟수를 현저히 줄이는 좋은 성능을 보였다 Many routing algorithms, proposed for ad-hoc wireless networks, we based on source routing scheme and shortest path route has short lifetime especially in highly dense ad-hoc wireless networks. So some routing protocols such as SSA and ABR are considering the link stability and try finding more stable route. In this paper we propose a new routing algorithm considering utilization metric based on SSA routing algerian in Ad-Hoc networks. To reduce the bottleneck by specific metric of SSA, proposed scheme makes load balancing in networks by distributing the connections to several routes. For the evaluation of the performance we compare our scheme with existent routing protocol AODV and SSA. And the results, obtained using the ns-2 network simulation platform, show good performance that reduced the number of reconstructions remarkably by distributing the whole traffic to several routes when there are several stable routes.

We introduce a social network analysis method as a new approach to build an Intrusion Detection System (SN-IDS) in ad hoc networks. The SN-IDS utilizes social relations as metrics-of-interest for anomaly detections, which is different from most traditional IDS approaches. To construct proper social networks, we first investigate ad hoc MAC and network layer data attributes and select relevant social feature sets; then we build up a set of socio-matrices based on these features. Social analysis methods are applied to these matrices to detect suspicious behaviors of mobile nodes. NS-2 simulation results show that this SN-IDS system can effectively detect common attacks with high detection rates and low false positive alarm rates. Furthermore, it has clear advantages over the conventional association rule based data mining IDS in terms of computation and system complexity.

The year 2005 witnesses the third occasion that the Wireless Personal Area and Ad-hoc Networks minitrack is part of the annual HICSS conference. This year there was a substantial increase in submissions (thus a substantial decrease in the acceptance rate), indicating the growing importance of research in this area. The minitrack is also focused on fundamental challenges and issues arising in wireless sensor networks and their applications. Wireless sensor networks differ from other wireless networks in the need for unattended and very low-energy operation, in the possibility of collaboration and distributed sensor calibration, and in the mission oriented nature of most sensor networks. Thus our mini track looks at two very important streams of research. After a strict review process nine papers were selected to be included in the program of the minitrack. The first paper is titled “BT-Crowds: Crowds-style Anonymity with Bluetooth and Java,” presenting an interesting idea on how anonymity can be achieved when sending messages in WPAN environments. Our second paper revisits scatternet formation issues of Bluetooth based ad hoc networks thus the title: “A Dynamic and Distributed Scatternet Formation Protocol for Real-life Bluetooth Scatternets.” The third paper is titled “Secure Dynamic Source Routing” and presents a new variant of the DSR routing protocol with special emphasis on security. In the fourth paper, the discussion concerns “Routing Based Feedback towards Applications in Mobile Ad Hoc Networks,” where routing notifications are relayed via event channels. “A Location Service Mechanism for Position-Based Multicasting in Wireless Mobile Ad hoc Networks” is the title of the fifth paper in the minitrack. It presents some innovative ideas on how location information can be managed for multicast communications in ad-hoc networks. In the sixth paper, “Sliding Window Protocol for Secure Group Communication in Ad Hoc Networks,” the authors propose a sliding window protocol for determining multiple routes in a multi-communications environment. In the seventh paper titled “Ad Hoc Routing Protocol Avoiding Route Breaks Based on AODV,” the authors propose improvements to the well-known AODV ad hoc routing protocol The eight paper, “Joint Scheduling and Routing Algorithm for Ad Hoc Wireless,” presents an innovative and interesting idea wrapped around an iterative algorithm on power control. In the final paper of the minitrack, “Performance Issues of Ad Hoc Routing Protocols in a Network Scenario used for VideoPhone Applications,” the authors present a simulation based performance analysis of different ad hoc routing protocols using the application pointed to in the title. These papers highlight some of the issues and work towards solutions in Personal Area and ad hoc networks which are among the most active research fields in wireless networking. We believe that the papers will provide opportunities for researchers to come together and discuss and debate the results of the interesting experiments that are described in the papers. We are confident that the minitrack will achieve its goal of bringing together leading researchers, to present new results and discuss synergies between the two areas. We also take this opportunity to thank all the reviewers for their valuable and professional work as well as all the authors who submitted papers and thus helped us to create such a strong minitrack. We would also like to express our sincere gratitude to the conference organizers for their hard work and help.

The next generation mobile communication systems will be based on infrastructure wired/ wireless LAN technologies and ad hoc networks. Such hybrid networks benefit the extension of infrastructure network coverage using ad hoc connectivity apart from offering the ad hoc nodes access to the resources of the wired/infrastructure networks. In most of the integration strategies Mobile IP is integrated with the ad hoc network routing protocol to provide Internet access and in few of the strategies the routing protocol has been enhanced to provide the connectivity without using Mobile IP.Few strategies use fixed gateways, others use mobile gateways. In this paper, we proposed two different approaches of integrating ad hoc network and the wired network using two different protocols. In the first part of this paper, an extended DSDV protocol, named as Efficient DSDV (Eff-DSDV) protocol is used to provide bi-directional connectivity between exclusive ad hoc hosts and the hosts on the Internet (wired network). The proposed framework uses one of the ad hoc hosts known as Mobile Gateway Node (MGN) to act as a bridge between ad hoc network and the Internet. The performance comparison is made between the proposed approach and one of the leading strategies based on packet delivery ratio, end-end delay, and control overhead. The experimental results indicate that the performance of the proposed strategy is better than the existing strategies.Later in the paper, we propose a framework for integrating mobile ad hoc network and the Internet using both fixed and mobile gateways. The ad hoc hosts can access the Internet using either fixed or mobile gateway, based on criteria of distance, load on the gateway. An extended version of AODV routing protocol is used in the framework. The objective behind using both fixed and mobile gateways is to increase the reliability of the Internet access, scalability, providing transparent Internet access to the ad hoc hosts and in general improve the performance of the integrated framework. The proposed framework is a hybrid architecture involving two-layer and three-layer approaches of integration. The performance comparison of the two proposed strategies has been done under common metrics. KeywordsMobile Ad Hoc Network (MANET)Integration StrategyMobile Gateway Node (MGN)Routing ProtocolEff-DSDVFixed GatewaysMobile Gateways

Minimizing interference of a wireless ad-hoc network in a plane

An ad-hoc Wireless Local Area Network (WLAN) is a network without infrastructure connectivity where different types of hosts (nodes) exist; such as PDAs (personal digital assistants), laptops and cellular phones. These nodes are equipped with short range transmitters and receivers, and antennas which may be Omni directional (broadcast), highly directional (Point-to-point), or a combination of the two. A Mobile Ad hoc Network (MANET) is a collection of mobile hosts that move in different directions and speeds without the need to maintain connectivity with existing network infrastructure. Different routing protocols have been designed since the existence of ad hoc networks. This work presented below proposes a new routing protocol for ad hoc networks which aims to reduce network overhead, power consumption, Multi-user Interference (MUI), and provide link reliability. In recent years, a vast research has been seen going on in the field of Mobile Ad Hoc Networks (MANETs). Due to limited resources in MANETs, to design an efficient and reliable routing strategy is still a challenge. An intelligent routing strategy is required to efficiently use the limited resources. Also the algorithms designed for traditional wired networks such as link-state or distance vector, does not scale well in wireless environment

The (MANET) ad-hoc mobile network is an automated, network in which android systems link to wireless devices. Ad hoc word means "for this purpose". In MANET any device can easily move in various directions. MANETs (Mobile Ad Hoc Networks) are the basics of broadband networks. In MANET network user can link and get connected anywhere, anytime through communication. MANET introduces a new co system for communication. MANET does not require a fixed structure relies on unconnected ports for service transportation delivery. The temporary hoc network is not dependent on mobile devices (android phones, laptop, PCs, sensors, etc.) that connect exclusively to wireless connectors. Ad-hoc work on a distributed system to provide the required network performance when there is no fixed structure. In this network, it acts as a standalone network or with many attachment points on mobile networks. This paper provides view on the features, applications of ad hoc networks, characteristics and various attacks and challenges faced by programmers and Users . We analyze MANET security objectives and will outline the features, structure, types and challenges of research and the latest trend analysis presented on Mobile Ad Hoc Network to explore open-ended issues in developing navigation strategies for MANET.

With the expansion of applications of unmanned aerial vehicles (UAVs), maintaining the security of flight ad hoc networks (FANETs) attracts scholars' attention. However, features of FANETs, which are different from other Ad Hoc networks, increase the difficulty of security defense. Intrusion detection system (IDS) is a representative of common passive defense, which detects malicious nodes in FANETs by analyzing behaviors of nodes. From the perspective of information security, attacks can be divided into confidentiality attack, integrity attack, and availability attack. Among them, integrity attack is the most frequently occurring attacks, so picking it as the basis of classification, all IDSs can be divided into three types: (1) IDS based on integrity attacks, (2) IDS based on integrity and availability attacks, and (3) IDS based on integrity, availability, and confidentiality attacks. For each type, this chapter lists some typical IDSs, 11 in total, and elaborates on their detection mechanisms. Then, from the dimensions of time, scenario, technology, and attacks, these IDSs are compared comprehensively. Finally, to figure out an effective IDS could consider which indicators, this chapter summarizes the metrics that are adopted to evaluate the performance of IDSs.

Ad Hoc usually relates to an explanation of planning to address a particular issue or function, which although not generic, but also is inappropriate for the achievement of the other objectives. The ad-hoc networks have been particularly designed for establishing communications in environments where they are extremely complicated or infeasible for creating the specific network infrastructure. Most of these ad hoc networks are spontaneously formed by the consumers. The astounding reality is that the number of devices which are able to maintain wireless communications is increasing on a daily basis. Ad hoc networks are beneficial for implementation in considerable sets of scenarios, for instance, in universities, museums, emergency relief or investigation tasks, where the ability to allocate resources and services is one of the primary attentions. In this paper detailed clarifications of the wireless ad-hoc networks, their historical reviews and application in present scenarios. It clarifies several types of such networks like, mobile ad hoc networks (MANETs), wireless sensor networks (WSNs), wireless mesh networks (WMNs), and vehicular ad hoc networks (VANETs). Then, it also concentrates primarily on the utilization of the MANET, besides achieving the crucial task of classifications, characteristics, challenges, potential fields for the implementation of the ad hoc, differences and the developments of routing protocols.

Vehicular ad hoc network (VANET) is considered as the new generation of wireless ad-hoc network that change our lives. This technology aims to make our lives and roads safer via alert messages exchanged between local vehicles and the road side units (RSU). Unfortunately, the constraints caused by the high mobility, shared wireless medium and the absence of centralized security services offered by dedicated equipment makes the security of the VANET more problematic than any other type of network. Therefore, to ensure the security of this network, several security measures have been developed. Intrusion Detection Systems (IDS) is the most popular. In traditional networks, IDS has already proved its expertise in the detection of unauthorized entry and malicious activity. In vehicular ad hoc networks, IDS are in charge of analyzing incoming and outgoing packets to identify malicious signatures.

In recent years, wireless ad hoc networks (WANETs) have become very popular due to their wide range of applications and their ability to be deployed under normal and harsh conditions while supporting high data rates. Although many intrusion detection and trust-based systems have been developed to protect ad hoc networks against misbehaviors such as rushing attacks, query-flood attacks, and selfishness of nodes, these defense mechanisms are still not able to detect protocol compliant attacks called Jellyfish (JF) attacks. They target closed-loop flows such as TCP that are responsive to network conditions like delay and packet losses and can easily partition the network. In this paper, we introduce a security scheme called JAM (Jellyfish Attacks Mitigator) which can be used to detect and mitigate Jellyfish attacks in ad hoc networks.KeywordsWireless Ad hoc NetworksSecurityDenial of ServiceJellyfish Attacks

In this paper, we propose a void avoidance algorithm for the stateless weight routing (SWR) algorithm which was developed stateless geographical routing protocol for wireless sensor and ad hoc networks. In order to demonstrate the efficiency of the method we started with the illustration of transmission coverage of relay nodes during the course of routing in the SWR protocol. The threshold value to retransmit a packet defined in the SWR may be used for several purposes including elimination of the void problem. It can be shown that the threshold value provides a tool to balance the tradeoff between energy consumption and reliability.. A number of scenario has been considered to test the performance of the void avoidance (recovery!) algorithm. The initial simulation results indicates the proposed algorithm works with the SWR and providing it with an additional feature of adaptivity for wireless ad hoc and sensor networks.

As mobile wireless ad hoc networks have different characteristics from wired networks and even from standard wireless networks, there are new challenges related to security issues that need to be addressed. Many intrusion detection systems have been proposed and most of them are tightly related to routing protocols, such as Watchdog/Pathrater and Routeguard. These solutions include two parts: intrusion detection (Watchdog) and response (Pathrater and Routeguard). Watchdog resides in each node and is based on overhearing. Through overhearing, each node can detect the malicious action of its neighbors and report other nodes. However, if the node that is overhearing and reporting itself is malicious, then it can cause serious impact on network performance. In this paper, we overcome the weakness of Watchdog and introduce our intrusion detection system called ExWatchdog. The main feature of the proposed system is its ability to discover malicious nodes which can partition the network by falsely reporting other nodes as misbehaving and then proceeds to protect the network. Simulation results show that our system decrease the overhead greatly, though it does not increase the throughput obviously.

Vehicular Ad hoc Network (VANET) is a component of the Intelligent Transportation System (ITS) which furnishes communication among vehicles. It delivers comfort and safety information to passengers and vehicle drivers. Security plays a vital role during the transmission of data as the various distinct security attacks directly influence the safety of the passengers on the road. Several security attacks will disrupt normal functions like the transmission of data. Some security breaches inject false information which affects the safety of drivers. However, there are several demurrers in detecting abnormal activities efficiently as the traditional system faces imbalanced data problems. This paper presents an Intrusion Detection System (IDS) for detecting anomalies and protecting communication systems from several distinct attacks. The proposed IDS utilizes two deep learning (DL) mechanisms such as Convolutional Neural Network (CNN) and Gated Recurrent Unit (GRU) for detecting anomalies in the vehicular network. The hybrid CNN-GRU mechanism helps in solving the overfitting and low-velocity problems. It also detects several attacks and protects the ad hoc network from those attacks to safeguard the vehicle users. The results show that the propounded model outperforms the other traditional detection mechanisms by 10.79% in terms of performance compared to other IDS.