一個應用合作機制於無線隨意行動網路之抵擋路徑斷裂的安全路由協定

A Collaborative Routing Protocol Against Routing Disruptions in MANETs

葉智文(Chih-Wen Yeh)

指導教授 ： 孫宏民

國立清華大學/電機資訊學院/資訊系統與應用研究所/碩士(2009年)

摘要

在無線隨意行動網路中抵擋共謀攻擊是件重要的任務，然而，並沒有一個有效的方法，因為攻擊者可以透過合作的方式，抵擋MANET上大部分的檢查機制。因此，我們提出一個合作機制的路由協定，利用監視節點來偵測並且孤立出現在路由上的共謀攻擊者，監視節點觀察路由上節點的所有收、送封包情形，在監視表格中做紀錄，然後回報給來源節點，來源節點可以依據這些紀錄區別出惡意節點，並且將它孤立。本篇的安全性分析以及模擬中，會證明我們方法的效果以及其效率。

關鍵字

共謀攻擊 ； 無線隨意行動網路 ； 監視機制 ； 網路安全

並列摘要

To resist collusion attacks in mobile ad hoc networks (MANET) is an important task. However, there is not an effective solution, because attackers can cooperate to resist most of detecting techniques in MANET. Therefore, we propose a collaborative routing protocol (CRP) to detect and isolate the colluding attackers according to monitor nodes. Monitor nodes observe every packet received and send by intermediate node. According to the records sent by monitors, source node can distinguish the malicious nodes and isolate them. The security analysis and simulation in this paper verify that our approach can effectively and efficiently resist colluding attacks.

並列關鍵字

Collusion attack ； MANET ； Monitor mechanism ； Network security

參考文獻

[11] S. Kurosawa, H. Nakayama, N. Kato, A. Jamalipour, and Y. Nemoto. Detecting blackhole attack on aodv-based mobile ad hoc networks by dynamic learning method. International Journal of Network Security, 5(3):338-346, 2007.

[2] C. Crepeau, C.R. Davis, and M. Maheswaran. A secure MANET routing protocol with resilience against byzantine behaviours of malicious or selfish nodes. In Advanced Information Networking and Applications Workshops, 2007,

[5] E. Gerhards-Padilla, N. Aschenbruck, P. Martini, M. Jahnke, and J. Tolle. Detecting Black Hole Attacks in Tactical MANETs using Topology Graphs. In 32nd IEEE Conference on Local Computer Networks, 2007. LCN 2007, pages

1043-1052, 2007.

[8] Y.C. Hu, A. Perrig, and D.B. Johnson. Ariadne: A secure on-demand routing protocol for ad hoc networks. Wireless Networks, 11(1):21-38, 2005.