A framework for MAC protocol misbehavior detection in wireless networks

ABSTRACT

The pervasiveness of wireless devices and the architectural organization of wireless networks in distributed communities, where no notion of trust can be assumed, are the main reasons for the growing interest in the issue of compliance to protocol rules. Reliable and timely detection of deviation from legitimate protocol operation is recognized as a prerequisite for ensuring efficient and fair use of network resources and minimizing performance losses. Nevertheless, the random nature of protocol operation together with the inherent difficulty of monitoring in the open and highly volatile wireless medium poses significant challenges. In this paper, we consider the fundamental problem of detection of node misbehavior at the MAC layer. Starting from a model where the behavior of a node is observable, we cast the problem within a minimax robust detection framework, with the objective to provide a detection rule of optimum performance for the worst-case attack. The performance is measured in terms of required number of observations in order to derive a decision. This framework is meaningful for studying misbehavior because it captures the presence of uncertainty of attacks and concentrates on the attacks that are most significant in terms of incurred performance losses. It also refers to the case of an intelligent attacker that can adapt its policy to avoid being detected. Although the basic model does not include interference, we show that our ideas can be extended to the case where observations are hindered by interference due to concurrent transmissions. We also present some hints for the problem of notifying the rest of the network about a misbehavior event. Our work provides interesting insights and performance bounds and serves as a prelude to a future study that would capture more composite instances of the problem.

REFERENCES

• 1: J. Bellardo and S. Savage. 802.11 denial-of-service attacks: real vulnerabilities and practical solutions. In Proc. of USENIX Security Symposium, San Antonio, TX, June 2003.
• 2: D. Bertsekas. Convex analysis and optimization. Athena Scienti?c, 2003.
• 3: Sonja Buchegger , Jean-Yves Le Boudec, Performance analysis of the CONFIDANT protocol, Proceedings of the 3rd ACM international symposium on Mobile ad hoc networking & computing, June 09-11, 2002, Lausanne, Switzerland [doi>10.1145/513800.513828]
• 4: M. Cagalj, S. Ganeriwal, I. Aad, and J.-P. Hubaux. On Cheating in CSMA/CA AdHoc Networks. Technical Report IC/2004/27, EPFL-DI-ICA, March 2004.
• 5: Alvaro A. Cárdenas , Svetlana Radosavac , John S. Baras, Detection and prevention of MAC layer misbehavior in ad hoc networks, Proceedings of the 2nd ACM workshop on Security of ad hoc and sensor networks, October 25-25, 2004, Washington DC, USA [doi>10.1145/1029102.1029107]
• 6: V. Dragalin, A. Tartakovsky, and V. Veeravalli. Multi hypothesis Sequential Probability Ratio Tests-PartI: Asymptotic optimality. IEEE Trans. on Information Theory, 45(7):2448--2461, Nov. 1999.
• 7: V. Gupta, S. Krishnamurthy, and M. Faloutsos. Denial of service attacks at the MAC layer in wireless adhoc networks. In Proc. of MILCOM, 2002.
• 8: Carl W. Helstrom, Elements of signal detection and estimation, Prentice-Hall, Inc., Upper Saddle River, NJ, 1994
• 9: IEEE. IEEE wireless LAN medium access control(MAC) and physical layer(PHY) speci?cations, 1999.
• 10: S. Kassamand H. Poor. Robust techniques for signal processing: a survey. Proc. of the IEEE, 73(3):433--481, March 1985.
• 11: P. Kyasanurand N. Vaidya. Detection and handling of MAC layer misbehavior in wireless networks. In Proc. of International Conference on Dependable Systems and Networks, 2003.
• 12: Sergio Marti , T. J. Giuli , Kevin Lai , Mary Baker, Mitigating routing misbehavior in mobile ad hoc networks, Proceedings of the 6th annual international conference on Mobile computing and networking, p.255-265, August 06-11, 2000, Boston, Massachusetts, United States [doi>10.1145/345910.345955]
• 13: Maxim Raya , Jean-Pierre Hubaux , Imad Aad, DOMINO: a system to detect greedy behavior in IEEE 802.11 hotspots, Proceedings of the 2nd international conference on Mobile systems, applications, and services, June 06-09, 2004, Boston, MA, USA [doi>10.1145/990064.990077]
• 14: S. Verduand H. V. Poor. On minimax robustness: a general approach and applications. IEEE Trans. on Information Theory,30(2):328--340, March 1984.
• 15: A. Wald. Sequential Analysis. John Wiley and Sons, New York, 1947.

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)

General Terms:
Design, Security

Keywords:
MAC layer, minmax robust detection, protocol misbehavior, wireless networks