一個應用匿名於移動式隨意網路之抵擋主動攻擊的安全路由協定

Applying Anonymity for Secure Routing Protocol against Active Attacks in Mobile Ad Hoc Networks

鍾恒正(Heng-Jeng Chung)

指導教授 ： 孫宏民

國立清華大學/電機資訊學院/資訊工程學系/碩士(2009年)

摘要

在移動式隨意網路中設計匿名通訊協定，節點的隱私性是極為重要的課題。許多已發表的匿名通訊協定仍會因為網路流量分析攻擊而洩露節點與路由路徑相關之訊息。這些匿名通訊協定也因為缺少封包認證而容易遭受如路徑需求封包之氾濫攻擊一類的主動式攻擊。因此，這篇論文提供一個匿名且安全的路由協定ASRP，防止因為網路流量分析攻擊而造成的節點與路由路徑隱私資料曝露。在ASRP中，節點的身分及位置也是受到保護的。不僅如此，ASRP也利用對稱式及非對稱式密碼系統抵擋被動式攻擊，並利用一個節點範圍的群組金鑰認證封包達到抵擋主動式攻擊的目的。網路模擬實驗及安全性分析均驗證了此篇論文所提出的ASRP的有效性。

關鍵字

匿名 ； 移動式隨意網路 ； 主動攻擊 ； 路由協定

並列摘要

Node privacy in mobile ad hoc networks (MANET) is an important research topic in designing anonymous routing protocols. Many previously published protocols for providing node privacy still leak information about the communication entities and the route by traffic analysis attack. These protocols are also vulnerable to active attacks such as RREQ flooding attacks due to the lack of packet authentication. Therefore, an anonymous secure routing protocol (ASRP) is designed in this work to prevent from traffic analysis attacks. Node identities and locations are also protected in ASRP. Furthermore, symmetric/asymmetric cryptography is adopted to resist passive attacks and a one-hop group key mechanism is adopted to achieve packet authentication for resisting active attacks. The security analysis and simulation study in this work verify the effectiveness of ASRP.

並列關鍵字

Anonymity ； Mobile Ad Hoc Network ； Active Attack ； Routing Protocol

參考文獻

[5] B. Adam, M. Ulf, and S. Anton. Analysis attacks and trade-offs in anonymity providing systems. In Proceedings of the 5th International workshop on Information hiding (IH), 2001.

[10] A. Boukerche, K. El-Khatib, L. Xu, and L. Korba. Sdar: a secure distributed anonymous routing protocol for wireless and mobile ad hoc networks. In Proceedings of the 29th IEEE International Conference on Local Computer Networks (LCN), 2004.

[14] R. L. Gilaberte and L. P. Herrero. A secure routing protocol for ad hoc networks based on trust. In Proceedings of the 3th IEEE International Conference on Networking and Services (ICNS), June 2007.

[15] S. Han, J. Wang, and W. Liu. An e±cient identity-based group signature scheme over elliptic curves. In Proceedings of the 3rd European conference on universal multiservice networks (ECUMN), Oct 2004.

[16] L. Huaizhi and M. Singhal. A secure routing protocol for wireless ad hoc networks. In Proceedings of the 39th Annual Hawaii International Conference on System Sciences (HICSS), Jan 2006.