Deployment and validation of out of band IP traceback approach (OBTA) in wireless mesh network

Abstract

Summary Wireless mesh networks (WMNs) have acquired recently enormous attention and momentum; therefore, security aspects have been a fundamental concern for them. Among catastrophic threats on WMNs, Denial‐of‐Service attacks that have become a severe danger because of their plug‐and‐play structural design. Unfortunately, preventing a Denial‐of‐Service attack presents a challenging issue. This fact is induced with the appearance of the source IP addresses spoofing. The resolution key of this issue is to reveal the attack source based on the path through which the attack packet passes. For this, many researchers in IP traceability field propose various methods and techniques to deal with the issue. In this article, we conceive a novel approach named out of band IP traceback approach in WMN (IEEE 802.11s). We create a new architecture using signaling messages for discovering the real source(s) of IP packets. Our solution is based on a security‐oriented signaling protocol. This protocol allows specialized signaling entities to communicate via reliable signaling information. This fact permits us to perform a simple and efficient traceback. In our novel approach, we use 2 radios: the first one transmits normal data packets whereas the second is reserved to exchange IP traceback information. The performance of the proposed scheme is analyzed via simulation analysis using the Network Simulator 3. The simulation results show that our scheme is efficient in dealing with the traceback problem in WMN environments.

New Traceback Approach Deployment in Smart Mesh Microgrids against DoS Attacks

“…Therefore, we can realize a theoretical probabilistic comparison which is sufficient since the ITrace method is old. Then, the second Traceback solution is the OBTA, which is a new Deterministic Packet Marking scheme [19]. Moreover, we will compare our proposed approach with OBTA throughout simulations results.…”

“…The ITrace method proposed by Thing et al [19] produces a message with forwarding or backwarding link permitting to determine 2 routers in an attack path. Moreover, another message with both links is produced to allow the victim to determine 3 routers in an attack path.…”