WHOP: Wormhole attack detection protocol using hound packet

Abstract

The lack of centralised infrastructure in ad hoc network makes it vulnerable to various attacks. MANET routing disrupts if participating node do not perform its intended function and start performing malicious activity. A specific attack called Wormmhole attack enables an attacker to record packets at one location in the network, tunnels them to another location, and retransmits them into the network. In this paper, we present a protocol for detecting wormhole attacks without use of any special harware such as directional antenna and precise synchronised clock and the protocol is also independent of physical medium of wireless network. After the route discovery, source node initiates wormhole detection process in the established path which counts hop difference between the neighbours of the one hop away nodes in the route. The destination node detects the wormhole if the hop difference between neighbours of the nodes exceeds the acceptable level. Our simulation results shows that the WHOP is quite excellent in detecting wormhole of large tunnel lengths I. INTRODUCTIONAn ad-hoc network is inherently a self-organized network system without any infrastructure. Typically, the nodes act as both host and router at the same time i.e each node participates in routing by forwarding data for other nodes and deciding which nodes forward data next based on the network connectivity Most previous ad hoc networks research has focused on problems such as routing and communication, assuming a trusted environment. However, many applications run in untrusted environments and require secure communication and routing such as military or police networks, emergency response operations like a flood, tornado, hurricane or earthquake. However, the open nature of the wireless communication channels, the lack of infrastructure, the fast deployment, and the environment where they may be deployed, make them vulnerable to a wide range of security attacks.A particularly severe security attack, called the wormhole attack, has been introduced in the context of ad hoc networks. During this attack, a malicious node captures packets from one location in the network and "tunnels" them to another malicious node at a distant point which replays them locally. The tunnel can be established in many ways e.g. in-band and out-of-band channel. This makes the tunneled packet arrive either sooner or with a lesser number of hops compared to the packets transmitted over normal multi hop routes. This creates the illusion that the two end points of the tunnel are very close to each other. However, it is used by malicious nodes to

Survey on Detection and Prevention Scheme for Flooding Attack In Ad-hoc Networks

“…In this attack, an adversary receives packets at one point in the network, tunnels them to another point within the community, and then replays them into the network from that point.This tunnel among adversaries is called wormhole [3].…”

Emergency and Rescue Operation Management with Intrusion Detection and Prevention Mechanism under Clustered MANET

“…[10] described a protocol WHOP. WHOP suggests the use of hound packet to promote cooperation among nodes.…”

A Survey Article on Wormhole Attack Detection and Security in Wireless Sensor Networks

“…That added little bit of data makes wormhole discovery and presents substantial inconsistencies in the system, and can very quickly be detected. Wang and Bhargava [11] add an method where system visualization is used for discovery of wormhole attacks in fixed warning networks. In their method, each warning estimates the exact distance to its neighbours utilising the obtained indicate strength.…”