移动自组织网络中内部丢包的检测模型

A New Detection Model for Insider Packet Dropping Attacks in Mobile ad hoc Network

无线移动自组织网络中数据的传输是基于中间节点的合作转发的,但由于内部自私节点为了节省带宽和电量或者网络受到恶意节点的攻击,导致丢包行为发生,网络性能严重降低。基于无线自组织网络常用的路由协议AODV,提出了一种新的针对内部丢包攻击的检测模型。该检测模型引入旁信道概念,旁信道节点和看门狗共同检测并记录节点转发报文行为,采用邻居信息表存放检测结果,当相应节点的记录值达到一定下限时就被隔离出网络。由于旁信道可以发送警报报文,该模型能够同时检测到自私节点或合作攻击节点引起的内部丢包攻击。

In mobile ad hoc network, data transmission needs the cooperation of the intermediate nodes. But sometimes internal selfish nodes just want to save their bandwidth and power or the network is under attack from malicious nodes, which lead to packets dropping and dramatically degrades network performance. A new detection model against the insider packets dropping attacks is proposed based on the analysis of the common routing protocol AODV in the ad hoc network. The proposed model uses the concept of side channel. In this detection model, the watchdog and side channel nodes monitor the behavior of intermediate nodes, and each node maintains a new neighbor information table which contains neighbor nodes＇ trust value. When the node＇ s trust value reaches the negative threshold, it is determined as a malicious node and isolated from the network. Because the side channel can send alarm message, packets dropping attacks by selfish nodes or cooperation attack nodes could be detected.