Sinkhole intrusion in mobile ad hoc networks: The problem and some detection indicators

被引：10

作者：

Tseng, HC ^{[1
]}

Culpepper, BJ

机构：

[1] San Jose State Univ, Dept Comp Sci, San Jose, CA 95192 USA

[2] NASA, Ames Res Ctr, Neuroengn Lab, Moffett Field, CA 94305 USA

来源：

COMPUTERS & SECURITY | 2005年 / 24卷 / 07期

关键词：

sinkhole; intrusion detection; mobile ad hoc networks; dynamic source routing; rule-based system;

D O I：

10.1016/j.cose.2005.07.001

中图分类号：

TP [自动化技术、计算机技术];

学科分类号：

0812 ;

摘要：

We analyze the "sinkhole" problem in the context of the Dynamic Source Routing (DSR) protocol for wireless mobile ad hoc networks (MANETs). The sinkhole effect is caused by attempts to draw all network traffic to malicious nodes that broadcast fake shortest path routing information. Two reliable indicators of sinkhole intrusion are proposed and analyzed. We will study how these sinkholes may be detected and term such as sinkhole intrusion detection. One indicator is based on the sequence number in the routing message and the other one is related to the proportion of the routes that travel to a suspected node. Threshold values that imply possible sinkhole intrusion are derived for these two indicators. The simulation results show that the indicators are consistent and reliable for detecting sinkhole intrusion. (C) 2005 Elsevier Ltd. All rights reserved.

引用

页码：561 / 570

页数：10