Implementation & evaluation of an IDS to safeguard OLSR integrity in MANETs

ABSTRACT

OLSR (Optimized Link State Routing), a table-driven proactive protocol, standardized (RFC3626) for Mobile Ad-hoc Networks (MANETs), only works properly if participating nodes cooperate in routing. Hence, if nodes inject invalid messages or withhold critical messages, routing protocol integrity may be compromised - the protocol will fail to consistently provide each node with the accurate MANET topology. Opportunities, therefore, exist to provide intrusion detection in OLSR based MANETs by detecting anomalies in OLSR semantics. In this paper we implement and analyze an Intrusion Detection System (IDS) in which each MANET node evaluates such non-conformances locally, and thereafter infers & detects possible attacks on the routing protocol. We quantify the effectiveness of the IDS in terms of false positive and false negative detection rates. Although our discussion and implementation is based on OLSR, the techniques can be applied to any link-state routing protocol.

REFERENCES

• 1: H. Deng, W. Li, D.P. Agrawal, "Routing security in wireless ad hoc networks," IEEE Communications Magazine, October 2002, pp 70--75.
• 2: Yongguang Zhang , Wenke Lee, Intrusion detection in wireless ad-hoc networks, Proceedings of the 6th annual international conference on Mobile computing and networking, p.275-283, August 06-11, 2000, Boston, Massachusetts, United States [doi>10.1145/345910.345958]
• 3: M. Wang, L. Lamont, P. Mason, M. Gorlatova, "An effective intrusion detection approach for OLSR MANET protocol," 1st IEEE ICNP Workshop on Secure Network Protocols (NPSec 2005), pp 55--60.
• 4: Ketan Nadkarni, Amitabh Mishra., "Intrusion detection in MANETs - the second wall of defense," IEEE IECON, 2003.
• 5: Sergio Marti , T. J. Giuli , Kevin Lai , Mary Baker, Mitigating routing misbehavior in mobile ad hoc networks, Proceedings of the 6th annual international conference on Mobile computing and networking, p.255-265, August 06-11, 2000, Boston, Massachusetts, United States [doi>10.1145/345910.345955]
• 6: Clausen, Jacquet, Laouiti, Minet, Muhlethale, Qayyum, and Viennotl., "OLSR RFC3626", experimental edition, October 2003.
• 7: Y. Hu, A. Perrig, and D. B. Johnson, "Packet leashes: a defense against wormhole attacks in wireless ad hoc networks," IEEE Infocom, 2003.
• 8: Fan Hong , Liang Hong , Cai Fu, Secure OLSR, Proceedings of the 19th International Conference on Advanced Information Networking and Applications, p.713-718, March 25-30, 2005 [doi>10.1109/AINA.2005.305]
• 9: Daniele Raffo , Cédric Adjih , Thomas Clausen , Paul Mühlethaler, An advanced signature system for OLSR, Proceedings of the 2nd ACM workshop on Security of ad hoc and sensor networks, October 25-25, 2004, Washington DC, USA [doi>10.1145/1029102.1029106]
• 10: D. Dhillon, T. S. Randhawa, M. Wang, and L. Lamont, "Implementing a fully distributed certificate authority in an OLSR MANET," Proc. Of the IEEE Wireless Comm. and Networking Conf. (WCNC 2004), March 21-25, 2004.
• 11: J.Y. Le Boudec and M. Vojnovic, "Perfect simulation and stationarity of a class of mobility models," IEEE Infocom, 2005.

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.2 Network Protocols
          Subjects: Routing protocols

General Terms:
Security

Keywords:
IP, intrusion detection systems (IDS), mobile ad-hoc networks (MANET), multipoint relay (MPR), optimized link state routing (OLSR), routing protocol integrity, security