Enhanced AODV Protocol for Detection and Prevention of Blackhole Attack in Mobile Ad Hoc Network

Abstract

Mobile Ad-hoc Network (MANET) is a kind of wireless network that has the most challenging network infrastructure. It is formed using the mobile nodes without any centralized administration from the security perspective and is a self-configuring fastest emerging wireless technology, each node on the MANET will act like a router which forwards the packets. Dynamic nature of this network makes routing protocols to play a prominent role in setting up efficient route among a pair of nodes. Dynamic Source Routing (DSR) and Ad-hoc On-Demand Distance Vector (ADOV) is a reactive MANET routing protocols. Most of the attacks on MANETs are routing protocol attacks. Attacks on routing protocols, especially internal attacks will cause the damage to MANETs. Sinkhole and black hole attacks are a type of internal attack which is affected by attempting to draw all network traffic to malicious nodes that fake routing update and degrade the performance of the network. The black hole nodes should be detected from the network as early as possible via detection mechanism and should also guarantee the higher detection rate and less cross-over error rate. In this paper, we studied the characteristics of black hole attack and how it will affect the performance of the distance vector routing on demand routing protocol such as (ADOV) protocol, which recognizes the presence of black hole node from packet flow information between nodes and isolates it from the network via applying AODV protocol that one of popular routing protocol. We have evaluated the performance of the system using widely used simulator NS2, results prove the effectiveness of our prevention and detection method.

Address resolution protocol spoofing attacks and security approaches: A survey

“…Detection is much more important in case of any security threat to protect the hosts [24][25][26][27] from being a victim of ARP spoofing as it leads to many serious attacks on the network. 8 Therefore a detection mechanism [24][25][26][27] is the best solution before considering a prevention mechanism. 8 There are many tools released to detect ARP poisoning attacks in the LAN such as 20 : ARPwner, Ettercap, Window ARP spoofed, and other tools.…”

“…There are two types of countermeasures: detection systems and prevention systems. Detection systems detect the attack by sounding an alarm when an attack is detected, while the prevention system tries to prevent the attack from occurring . For best security measures, both detection and prevention systems should be implemented in the network ,…”

“…Detection systems detect the attack by sounding an alarm when an attack is detected, while the prevention system tries to prevent the attack from occurring. [25][26][27] For best security measures, both detection and prevention systems should be implemented in the network. 16,21 There are many existing solutions that have been provided to enhance ARP security, minimize, mitigate, detect, and prevent ARP attacks that are discussed in Sections 2 and 3.…”