基于改进动态源路由协议的MANET灰洞攻击检测和缓解研究

The Research of Detecting and Mitigating Gray Hole Attacks in MANET Based on Modified Dynamic Source Routing Protocol

针对移动自组网络易遭受灰洞攻击的问题,提出一种改进动态源路由协议来检测和缓解灰洞攻击。首先,建立一种入侵检测系统(IDS),IDS节点仅当检测到灰洞节点时才设置为混杂模式;然后,通过检测节点转发数据包数目的异常差来检测恶意节点,当检测到异常时,附近的IDS节点广播阻塞消息,通知网络上的节点共同隔离恶意节点;最后,利用Glomosim工具进行的仿真实验验证了所提方法的有效性,该方法的平均丢包率仅为12.5%,端到端传输延时仅为0.116 s,比较表明,所提方法优于其他几种现有灰洞攻击检测方法。

For the issue that wireless mobile ad-hoc networks are attacked by black hole,an improved dynamic source routing protocol to detect and prevent the black hole attack was proposed.Firstly,the establishment of a intrusion detection system whose nodes detected only when the black hole node as promiscuous mode set been pour into.Then,forwarding data packets by detecting the difference between the number of nodes abnormality detecting malicious node when an abnormality is detected,IDS blocking nearby node broadcasts a message informing the network nodes on a common isolate malicious nodes.Finally,we use simulation tools Glomosim to evaluate the effectiveness of the method its average packet loss rate is only 12.5％ and its transmission delay is 0.116 seconds.Comparison show that proposed method is superior to existing gray hole attack detecting methods.