Many MANET research works are based on the popular informal definition that MANET is a wireless ad-hoc network that has neither infrastructure nor backbone and every network node is autonomous and moves depending on its mobility. Unfortunately, this definition pays no attention to the network servers that are essential in core-based, mission-critical, and military MANETs. In core-based MANETs, external intrusion detection systems (IDS) cannot detect internal Byzantine attacks; in addition, internal Byzantine fault tolerant (BFT) systems are unqualified to detect typical external wireless attack. Therefore, there is a real need to combine both internal and external mobile ad-hoc network (MANET) ID systems. Here, CSMCSM is presented as a two-level client server model for comprehensive security in MANETs that integrates internal and external attack detectors in one device. The internal component is based on a BFT consensus algorithm while the external component employs decision tree to classify the MANET attacks.

In this paper as-Application Needs MANET Simulator (ANMS) is presented as a novel unique simulator that can simulate equally the two attack types. The underlying simulator consists of two levels, one for each attack type. ANMS is twofold to cover MANET diversified attacks and it has been built up using a Unified Modeling Language (UML). Its construction starts by emphasizing the use cases [i.e. the sequential relation between the server data and the clients broadcast]. Consequently, the class diagram is built up. Each class contains its public, private member and methods, while the relations between classes express their message handling. Eventually ANMS is coded and developed. ANMS works by feeding it by MANET-under-consideration. Then the first part that embeds the Byzantine oriented consensus simulation shows whether there is a Byzantine attack. If no Byzantine attacks it announces success otherwise it announces suspected. The suspected cases are categorized to false failure, true failure or attack/malicious. The last cases are examined using the second part of ANMS (typical intrusions part) to classify the underlying attack. ANMS is subject to tremendous amount of tests. Those tests include performance evaluation, comparisons and confusion matrix. The experimental performance of ANMS confirms the fact that, it is really needed for MANETs administration and their security measurements.