A Novel Algorithm Based on Trust Authentication Mechanisms to Detect and Prevent Malicious Nodes in Mobile Ad Hoc Network

Abstract

Abstract. Ad hoc On-demand Distance Vector (AODV) is a reactive routing protocols used popularly in Mobile Ad hoc Network. AODV is target of many Denial of Service (DoS) attack types, such as Blackhole/ Sinkhole, Grayhole, Flooding and Whirlwind. There are some published researches to improvement AODV for security goal using digital signature, for example, SAODV and ARAN. However, they have some weakness that a malicious node can attack SAODV by using fake keys and both of SAODV and ARAN routing protocols can not detect wormhole nodes under hide mode. This article proposes a Trust Authentication Mechanisms (TAM) which uses public-key cryptography RSA and digital certificates (DC) based on X509 standard. TAM allows an intermediate node authenticates a preceding nodes by checking all control route packets through 3 steps: (1) Digital certificates; (2) actual neighbors; and (3) packet integrity authentications. The simulation results in NS2 show that TAM can successfully detect and prevent to 100% malicious nodes using fake keys and above 99% (the mistaken rate below 1.0%) wormhole nodes under hide mode for all mobility scenarios where there are nodes move with 30m/s maximum speeds and variable tunnel lengths.

A Digital Certification Management Mechanisms and Security Routing Protocol in Mobile Ad Hoc Network

“…Another approach to increase security level for routing protocols is based on digital signature, typically SAODV [17], ARAN [29] and TAMAN [21]. The weakness of SAODV is that it only supports end-to-end authentication, does not support the preceding node authenticate mechanism, so the intermediate node can not check its predecessor.…”

“…[10,18]. TAMAN [21] is improved from AODV that it uses a trust authentication mechanisms named TAM based on the public key cryptography RSA [2] and hash function SHA 1 [12]. In the route discovery phase, all mobile nodes check its preceding nodes by using digital certificates, actual neighbors and packet integrity authenticate mechanism.…”

“…Verifying a digital certificate is secure so that a node participating in the route discovery process must be certified and its certificate can be verified peer-to-peer by any other node using proposed algorithm in the paper [21]. Thus, a normal node can detect and block malicious nodes when they join to the discovered route by providing deliberate spoof information such as: Blackhole/ Sinkhole, Grayhole, Flooding, Whirlwind and Wormhole attacks.…”

“…Their routing cost is based on the number of hop (HC), so the chosen route is the shortest route. This is a weakness that malicious nodes can exploit to perform network attack behavior, for examples: Blackhole [30], Sinkhole [28], Grayhole [6], Wormhole [13,22], Flooding [32,33] and Whirlwind [23] (see more in [21], Table 1).…”

“…We proposed a security routing protocol named TAMAN in the paper [21]. All certification authorities do not participate to DC authentication process for TAMAN.…”