Mitigation Mechanisms Against the DAO Attack on the Routing Protocol for Low Power and Lossy Networks (RPL)

Abstract

Destination Advertisement Objects (DAOs) are sent upward by RPL nodes toward the DODAG root, to build the downward routing paths carrying traffic from the root to its associated nodes. This routing mechanism can be exploited by a malicious node periodically transmitting a large volume of DAO messages towards its parent, which in turn will forward such messages to its own parent and so on, until they arrive at the Direction-Oriented Directed Acyclic Graph (DODAG) root. This ultimately results in a negative effect on network performance in terms of energy consumption, latency and reliability. The first objective of this paper is to evaluate the effect of such a DAO attack in the context of an RPL IoT network. In particular, identifying the particular performance metrics and network resources affected most greatly. The second objective is the proposal of mitigating security mechanisms in relation to DAO attacks and to evaluate their effectiveness. The simulation results have shown how the attack can damage the network performance by significantly increasing the DAO overhead and power consumption. It also demonstrated that the DAO attack affect the reliability of the downward traffic under specific conditions. The proposed mechanisms showed a good capacity in restoring the optimal performance of the network by up to 205%, 181%, 87% and 6%, in terms of overhead, latency, power consumption and packet delivery ratio respectively.INDEX TERMS Internet of Things, low power and lossy networks, security in RPL, DAO attack.

Secure Inter-Domain Routing for Resisting Unknown Attacker in Internet-of-Things

“…The work carried out by Shin et al [20] have developed an optimization mechanism for routing process in IoT focusing on securing authentication process. Wadhaj et al [21] have developed a preventive technique towards attack on IoT device using RPL protocol with a target to maximize the reliability score of attacker identification process. Saleem et al [22] have used a bio-inspired approach towards securing IoT communication over 5G.…”

DDSLA-RPL: Dynamic Decision System Based on Learning Automata in the RPL Protocol for Achieving QoS

“…The nodes in the LowPAN network use the IEEE 802.15.4 standard to connect to each other. With the requirements of IPv6 based networks [7], the LLN networks [8] and consequently, the internet of things has undergone a structural change, which led to a wave of new research in the field of network routing protocols [9]. In this section, the most wellknown basic routing protocols for the internet of things are introduced and their standard abilities in this platform are assessed.…”

Ada-IDS: AdaBoost Intrusion Detection System for ICMPv6 based Attacks in Internet of Things

“…It consumes more network resources and also prohibits the legitimate nodes to perform regular activities. Finally, the network will be in an inconsistent state which causes Denial of Service (DoS) attacks in the network [21].…”