一种针对AODV协议黑洞攻击的检测策略

A DETECTION STRATEGY FOR BLACK HOLE ATTACK BASED ON AODV

无线自组织网络是由若干个移动节点组成的网络,当一个节点需要和另一个节点通信时,它们通过中间节点将数据转发,因此网络中每个节点既是独立的终端设备,也能作为路由器使用。黑洞攻击是无线自组织网络一种常见的攻击,恶意节点利用协议机制向其他节点广播自己具有到达目的节点的最短路径,导致所有的数据将会流向这些恶意节点。这些恶意节点通过丢弃数据发动拒绝服务攻击,或者将数据重定向到伪装的目的节点。基于AODV(Ad Hoc On-Demand Distance Vector Routing)协议,提出一种针对其黑洞攻击的检测策略。通过NS-2的仿真实验,分析关于无线Ad Hoc网络的三个性能指标,分组投递率,端到端的平均时延和归一化的路由开销,实验结果表明该检测策略能够增强AODV路由协议的安全性。

Mobile ad hoc networks is the networks consisted of a couple of mobile nodes, when one node needs to communicate with another, they will forward data via intermediate nodes, therefore each node in the networks acts as the independent terminal device as well as to be used as the router. Black hole attack is a common attack in MANET, malicious nodes use protocol mechanism to claim to other nodes that they have the shortest path to the destination and this results in all traffic data being attracted to them. These malicious nodes launch the deni- M service attack through dropping the packets or redirecting the packets to disguised destination node. Based on AODV in this paper we pro- pose a detection strategy targeted at their black hole attacks. Through NS-2 simulation experiment, we analyse three performance metrics in regard to MANET including packet delivery fraction, average end-to-end delay and normalised routing overhead. Experimental result shows that the detection strategy is able to enhance the security of the AODV protocol.