SNACK: An efficient intrusion detection system in Mobile Ad-Hoc Network based on the Selective-Negative Acknowledgement algorithm
SNACK: An efficient intrusion detection system in Mobile Ad-Hoc Network based on the Selective-Negative Acknowledgement algorithm
复制标题
SNACK：基于选择性否定确认算法的移动自组织网络中的高效入侵检测系统
DOI：
--
复制
发表时间：
2015
期刊：
影响因子：
--
通讯作者：
Ali Farrokhtala
中科院分区：
文献类型：
--
作者：
B. E. Abarghouei;Saeed Samet;Abozar Azarpira;Ali Farrokhtala
移动自组织网络（MANET）由连接在一起的独立设备组成，这些设备可以在不受中央单元控制的情况下改变位置和配置自己。MANET的这种自治拓扑结构使其容易受到来自系统内部的内部攻击，如黑洞、虫洞和洪水。现有的一种解决方案是使用否定确认（NACK）作为入侵检测系统（IDS）。NACK方法易于实现，具有高水平的数据包传输和轻量级的安全监控。然而，尽管在NACK中保证了数据包的传输，但它的高路由开销率和高能耗成为网络的两大弱点，特别是当它增加了移动性和内部攻击的数量时。在本研究中，NACK在这方面的表现受到了挑战，并在不同的情况下进行了调查。在此基础上，提出了一种基于NACK和SACK的选择性否定确认（Selective Negative Acknowledgement， SNACK）方法。通过在Network Simulator v-2.35 （NS-2）中的仿真结果对比，表明所提出的确认方法在数据包开销更小的情况下优于NACK。
The Mobile Ad-Hoc Network (MANET) consists of independent devices connected together, which can change their locations and configure themselves without being controlled by a central unit. This autonomous topology of MANET makes it vulnerable against the internal attacks, such as black hole, wormhole, and flooding, from inside the system. One existing solution to this problem has been achieved by using Negative Acknowledgement (NACK) as an Intrusion Detection System (IDS). NACK method is easy to implement and has a high level of packet delivery with lightweight security monitoring. However, although packet delivery is guaranteed in NACK, its high rate of routing overhead and high level of energy consumption become as two big weaknesses of the network, especially when it comes to increasing the mobility and the number of insider attacks. In this study the performance of NACK in this regard has been challenged and investigated in different scenarios. Then a new approach, called Selective Negative Acknowledgement (SNACK), based on NACK and Selective Acknowledgement (SACK) is proposed. It is shown that the proposed acknowledgement method outperforms NACK with much less packet overhead, by comparing the results of simulations in Network Simulator v-2.35 (NS-2).