Presentation Transcript
Secure Routing in Ad Hoc Wireless Networks: Secure Routing in Ad Hoc Wireless Networks
11.03.2005
Requirements of a Secure Routing Protocol: Requirements of a Secure Routing Protocol Detection of malicious nodes
Guarantee of correct route discovery
Confidentiality of network topology
Stability against attacks
AODV: AODV Ad-hoc On-demand Distance Vector Protocol
Source node broadcasts RouteRequest
Intermediate nodes forward it
If node has a route to destination, it initiates RouteReply
SAR: SAR Security-aware Ad hoc Routing protocol
Enables different levels of security
Level of trust as a metric
Each packet is associated with a security level
Intermediate nodes are associated with security levels
Different keys for different levels of security
SAR: SAR
SEAD: SEAD Secure Efficient Ad hoc Distance vector routing protocol
Distance Vector Routing
The metric used for routing is hop-count
Periodic and/or triggered updates
DSDV (Highly Dynamic Destination-Sequenced Distance-Vector Routing) uses sequence numbers
DSDV-SQ (DSDV for sequence numbers)
Assumes upper bound for the metric used
SEAD: SEAD One-Way Hash Function
Used for authentication
Generates a one-way hash chain
Avoids looping
Easily implement with slight modifications
ARAN: ARAN Authenticated Routing for Ad hoc Networks routing protocol
Based on cryptographic certificates
Defeats all identified attacks on the network layer
Issue of certificates:
There exists a trusted server
Doesn’t specify any specific key distribution algorithm
ARAN: ARAN End-to-end route authentication:
Ensures that the correct destination is reached by the packets
RouteRequest and RouteReply packets encrypted at each node
Security-Aware AODV Protocol: Security-Aware AODV Protocol RouteRequest packets only sent when data packets arrive at node for transmission
Malicious node advertises that it has the shortest path redirecting all packets trough itself (blackhole attack)
AODV = Ad-hoc On-demand Distance Vector Protocol
Security-Aware AODV Protocol: Security-Aware AODV Protocol Solutions:
Restrict the intermediate nodes from originating RouteReply
FurtherRouteRequest
AODV = Ad-hoc On-demand Distance Vector Protocol