Mitigating malicious control packet floods in ad hoc networks
Mitigating malicious control packet floods in ad hoc networks
复制标题
减轻自组织网络中的恶意控制数据包泛洪
DOI：
10.1109/wcnc.2005.1424844
复制
发表时间：
2005
期刊：
影响因子：
--
通讯作者：
R. Boppana
中科院分区：
文献类型：
--
作者：
Saman Desilva;R. Boppana
研究了恶意节点的黑客攻击对网络整体性能的影响。这些恶意节点在所有方面都模仿正常节点，只是它们确实比其他节点更频繁地路由发现。通过仿真，我们证明了许多adhoc网络协议中使用的基本路由发现机制可以被一个恶意或受危害的节点所利用，从而显著降低吞吐量。我们提出了一种自适应的统计丢包机制来缓解这种情况，减少吞吐量的损失。该机制即使在恶意节点身份未知且不占用任何额外网络带宽的情况下也能正常工作。当没有恶意节点，但网络被过多的流量拥堵时，实施和维护或提高网络吞吐量很简单。
We investigate the impact of hacker attacks by malicious nodes on the overall network performance. These malicious nodes mimic normal nodes in all aspects, except that they do route discoveries much more frequently than other nodes. We show, using simulations, that the basic route discovery mechanism used in many ad hoc network protocols can be exploited by as few as one malicious or compromised node to bring down throughput dramatically. We propose an adaptive statistical packet dropping mechanism to mitigate such situations and reduce the loss of throughput. The proposed mechanism works even when the identity of the malicious node is unknown and does not use any additional network bandwidth. It is simple to implement and maintains or improves network throughput when there are no malicious nodes, but the network is congested with excess traffic.