Comparison of two intrusion detection schemes for sparsely connected ad hoc networks

  • Authors:

  • M. Chuah;P. Yang

  • Affiliations:

  • Department of Computer Science & Engineering, Lehigh University, Bethlehem, PA;Department of Computer Science & Engineering, Lehigh University, Bethlehem, PA

  • Venue:
  • MILCOM'06 Proceedings of the 2006 IEEE conference on Military communications
  • Year:
  • 2006

Quantified Score

Hi-index 0.00

Visualization

Abstract

Several approaches have been proposed for intrusion detection in mobile adhoc networks. Most of the approaches assume that there are sufficient neighbors to help monitor the transmissions and receptions of data packets by other nodes to detect abnormality. However, in a sparsely connected adhoc network, nodes usually have very small number of neighbors. Using a traditional intrusion detection and mitigation scheme designed for well-connected adhoc networks, the delivery ratio in a sparsely connected ad hoc network (50 nodes over 2000×2000 m2) can only improve from 76.5% to 79.9% with selective dropping attacks. Thus, we propose a ferrybased intrusion detection and mitigation (FBIDM) scheme for sparsely connected adhoc networks. Our simulation results indicate that our new ferry-based scheme is more effective than the traditional mitigation schemes that are used for well-connected mobile adhoc networks. Our FBIDM scheme reduces the impact of the data dropping attacks performed by malicious nodes in a sparsely connected ad hoc network. Without any mitigation scheme, the delivery ratio is 76.5% with selective dropping attacks. With FBIDM, the system achieves a delivery ratio that ranges from 87% (with a single ferry) to 93% (with four ferries) with selective dropping attacks. Without the mitigation scheme, the delivery ratio with blackhole attacks drops to 65.9%. With FBIDM, the achieved delivery ratio ranges from 82.9% (with a single ferry) to 91.9% (with four ferries) with blackhole attacks.