基于序列号和可靠应答机制DSR安全路由的实现

Exploring an Effective Design of Secure Dynamic Source Routing(DSR) Protocol Using Request Sequence Number and End-to-End Acknowledgement Principle

文章分析了动态源路由(DSR)协议面临的路由请求(route request,RREQ)报文的黑洞攻击,针对该攻击,设计一种利用可靠的端到端应答机制和根据RREQ报文序列号连续递增原则来建立路由信息表。该设计在不消耗过多资源的基础上保证路由信息。通过仿真验证该设计能够很好地抵御RREQ报文的黑洞攻击,且与经典的DSR路由协议相比,分组投递率维持在较高水平上,且平均时延很小,具有更好的性能。

Aim. The introduction of the full paper analyzes a type of black-hole attack on a route request （RREQ） packet. To avoid such attack, it proposes the exploration of a secure DSR protocol design, which is explained in sections 1 and 2. Section 1 explains that the sequence number of the RREQ packet is monotonically increasing. The core of section 2 consists of： （ 1 ） we perform the secure DSR routing protocol design with the sequence number increment principle and the end-to-end acknowledgement principle so that the route can effectively resist the black- hole attack; （2） to establish the credible routing information list, we design the procedural steps for processing the nodes in the RREQ packet and the end-to-end acknowledgement packet, which are illustrated by the block diagram shown in Fig. 2. To validate the effectiveness for resisting the black-hole attack, section 3 simulates the DSR proto-col design obtained with our method; the simulation results, given in Figs. 6 and 7, and their analysis show preliminarily that： （1） the secure DSR protocol design obtained with our method can effectively resist the black-hole attack on the RREQ packet, guarantee secure routing information without expending much resource; （2） compared with the conventional DSR protocol design, our DSR protocol design has higher packet delivery ratio and smaller average delay.