Volume 3, Issue 8, August 2015 International Journal of Advance Research in Computer Science and Management Studies

Transcription

1 Vlume 3, Issue 8, August 2015 Internatinal Jurnal f Advance Research in Cmputer Science and Management Studies Research Article / Survey Paper / Case Study Available nline at: ISSN: (Online) Mbile Ad-Hc Netwrk (MANET) and its Security Aspects Ku. Vishakha V. Vyas 1 Department f Cmputer Science & Engg. Anuradha Engg. Cllege,Chikhli. Maharashtra, INDIA Nitin K.Bhil 2 Prfessr, Department f Cmputer Science & Engg. Anuradha Engg. Cllege,Chikhli Maharashtra, INDIA Abstract: Mbile ad-hc netwrk becmes a centre f attractin in technlgical area nw-a-days. Mbile ad-hc netwrk (MANET) is a infrastructure-less netwrk and hence can wrk in slw netwrk area als. The nde can cmmunicate directly with ther nde available in netwrk r can use mediatr ndes t makes cmmunicatin between surce and destinatin. This paper deals with different ruting prtcls and issues f MANET. Als this paper includes security aspects f MANET, which is quite imprtant t discuss abut because MANET having dynamic tplgy and affected by lts f security threats. Keywrds: mbile ad-hc netwrk; ruting prtcl; security aspect; tplgy. I. INTRODUCTION Wireless ad-hc netwrk is a pint-t-pint netwrk r we can called it as peer-t-peer netwrk, which is nw-a-days becme a centre f attractin in crprate and research area. The wrd ad-hc is a Latin wrd and stands fr fr this purpse. Wireless ad-hc netwrk is frmed frm nde t nde, where each nde acts as a hst as well as ruter at the same time. This type f netwrk can be used when there is requirement fr shrt perid cmmunicatin r in such areas where wired cnnectins are failed. A wireless ad-hc netwrk is divided int three main types: Wireless sensr netwrk (WSN), Wireless mesh netwrk (WMN) and Mbile ad-hc netwrk (MANET). A Wireless sensr netwrk is a cmmunicatin netwrk where sensrs are used which acts as ndes. Fr example, VANET i.e. vehicular ad-hc netwrk which uses sensr in vehicles. The sensr can predict the surrunding vehicles and ntify the driver abut them. This system is helpful in reducing accidents. A wireless mesh netwrk is a cmmunicatins netwrk made up f radi ndes arranged in a mesh tplgy. Fr example, the laptps in the One Laptp per Child prgram use wireless mesh netwrking t enable students t exchange files and get n the Internet even thugh they lack wired r cell phne r ther physical cnnectins in their area[3]. Mbile ad-hc netwrk (MANET) is a infrastructure-less netwrk and having a dynamic tplgy. As mbiles are prtable device, it can be mved frm netwrked area t nn-netwrked area. If there were n any netwrk, n tw devices establish cnnectin with each ther. S, in these types f cases mbile ad-hc netwrks are used. The mbile device r nde can cmmunicate directly with ther device available in netwrk r can use mediatr ndes t makes cmmunicatin between surce and destinatin. As MANET s tplgy is dynamic in nature, it is affected frm lts f security threats. There are three types f MANET; Intelligent Vehicular Ad hc Netwrks (InVANETs), Internet Based Mbile Ad hck Netwrks (imanet) and Vehicular Ad hc Netwrks (VANETs). Cnsider a simple example t better understand the cncept f mbile ad-hc netwrk. Cnsider three ndes(s, A, L). Suppse nde A want t cmmunicate with nde L and nde L is in the netwrk f nde A, s they can cmmunicate directly. Nw cnsider nde S want t cmmunicate with nde L, but they cannt cmmunicate directly as there is n netwrk. S, nw the nde S sends packets t nde A which wrks as a mediatr between nde S and L as it cmes in the netwrk f bth the nde S and nde L. Nw the nde A transmits the packets t nde L, and in this way the packets are travels frm surce t destinatin using ad-hc netwrk. 2015, IJARCSMS All Rights Reserved 145 P age

2 Internatinal Jurnal f Advance Research in Cmputer Science and Management Studies Vlume 3, Issue 8, August 2015 pg Fig 1: An infrastructure-less netwrk (MANET) [7] II. ROUTING PROTOCOLS USED IN MANET Fig 2: Types f ruting prtcl in MANET [1] A. Practive ruting prtcl Practive ruting prtcl is als knwn as table-driven ruting prtcl. In table driven ruting prtcl as name indicates, each nde has t maintain ne r mre tables t stre the ruting infrmatin. This table is maintained thrughut the netwrk s as t maintain cnsistency f its view. As we knw MANET having dynamic tplgy and it cntinuusly changes all time, s each nde has t update the table t maintain the cnsistency f netwrk view. In practive ruting prtcl, if there is n cnnectin r cmmunicatin between tw ndes, still they have t maintain their table and it s updatin. Sme types f practive ruting prtcls are Destinatin sequenced distance vectr (DSDV)[4], WRP, GSR, FSR. One f the mst ppular practive ruting prtcls is Destinatin sequenced distance vectr. B. Reactive ruting prtcl Reactive ruting prtcl is als knwn as n-demand ruting prtcl. In reactive ruting prtcl, there is n need t maintain the ruting table at each nde. Instead, if any tw ndes want t cmmunicate with each ther r any nde want t send packet t anther nde, then this reactive ruting prtcl searches fr the rute and establish the cnnectin between the ndes. After establishing a gd cnnectin, they can quickly transmit and receive data packets. Sme types f reactive ruting prtcls are Ad-hc On-demand Distance Vectr (AODV), Dynamic Surce Ruting (DSR), CBRP. One f the mst ppular reactive ruting prtcls is the Ad hc On-Demand Vectr (AODV) ruting prtcl. AODV is a reactive ruting prtcl, discvering rutes nly when they are needed. "It ffers quick adaptatin t dynamic link cnditins, lw prcessing and memry verhead, lw netwrk utilizatin, and determines unicast rutes t destinatins within ad hc netwrk" [6][8]. 2015, IJARCSMS All Rights Reserved ISSN: (Online) 146 P age

3 C. Hybrid ruting prtcl Internatinal Jurnal f Advance Research in Cmputer Science and Management Studies Vlume 3, Issue 8, August 2015 pg Hybrid ruting prtcl is a cmbinatin f practive ruting prtcl and reactive ruting prtcl. In hybrid ruting prtcl, firstly nde identify the rute using the practive ruting prtcl and then later uses reactive ruting prtcl. Depending upn the different netwrk scenaris, bth pr-active and reactive nature f the prtcl can be used interchangeably. Sme types f hybrid ruting prtcl are Zne Ruting Prtcl (ZRP), Zne-Based Hierarchical Link State (ZHLS). One f the mst ppular hybrid ruting prtcls is Zne Ruting prtcl. The basic peratin f Zne ruting prtcl [10] is, it uses practive ruting algrithm within the given zne and reactive ruting algrithm utside the zne as defined by user. III. ISSUES IN MANET A. Netwrk tplgy changes many times and nt predictable i.e. having dynamic tplgy. B. Lw channel access because f variatin in different bandwidth i.e. having lw bandwidth ptimizatin. C. Expse statin and Hidden statin prblem. D. Many times it happened that mre access link will be same. E. Lack f centralized System/Entity. F. Limited pwer supply. 1) Security attacks IV. SECURITY ASPECTS IN MANET» Passive attacks: Passive attacks are silent but mst dangerus as it silently mnitrs victim s data withut altering it. And hence detectin f passive attacks is very difficult since the peratin f the netwrk itself des nt get affected. Sme f the passive attacks are as shwn belw: - Snping: Snping is ne f the passive attacks whse gal is t just mnitr the activity f tw cmmunicatrs r netwrks withut altering any data. It includes bservatin f cnfidential s r chats. - Eavesdrpping: Eavesdrpping is anther kind f attack that usually happens in the mbile ad hc netwrks. Eavesdrpping is quite similar t snping attack. The gal f eavesdrpping is t btain sme cnfidential infrmatin that shuld be kept secret during the cmmunicatin by simply mnitring it. The cnfidential infrmatin may include the lcatin, public key, private key r even passwrds. - Traffic analysis: Traffic analysis is als a passive attack whse name itself indicate its wrk, it analyses the traffic pattern f the netwrk. S the ppnent steals cnfidential infrmatin abut netwrk tplgy simply by analyzing the traffic f netwrk.» Active attacks: Active attacks are either external r internal. Active external attacks can be carried ut by external surce which d nt belng t netwrk while the active internal attacks are carried ut by malicius nde present inside the netwrk. Active internal attacks are mre severe and hard t detect as it present inside the netwrk. - Netwrk layer attack: Sme f the different types f attacks n netwrk layer are given belw: Wrm-hle attack: The wrm hle attack [5] is harder t detect as it des nt make any changes in netwrk, instead it slwdwn the peratin. The wrm-hle attack uses tunnels t send the data packet frm ne pint t anther. Suppse surce nde want t send data packets tward the destinatin nde. Firstly, surce nde sends RREQ (rute request) message which passes thrugh all the ndes present between surce and destinatin. Let tw f the middle ndes are affected r they are malicius ndes. When 2015, IJARCSMS All Rights Reserved ISSN: (Online) 147 P age

4 Internatinal Jurnal f Advance Research in Cmputer Science and Management Studies Vlume 3, Issue 8, August 2015 pg RREQ message is received by first affected nde, it sends that message tward its neighbring malicius nde. Tunnel is available between these tw malicius ndes which is knwn as wrm-hle. Then it sends RREP (rute reply) message back t surce and surce sends all the data packets thrugh that path, cnsidering that this is the shrtest path t destinatin. All the data packets are passes thrugh the malicius ndes and takes maximum time t reach tward the destinatin. Hence, results in late packet delivery. Black-hle attack: The black hle attack wrks same as the cncept f black hle in space. When the packets arrive twards the nde, it absrbs that packet withut frwarding it twards the destinatin. When surce sends RREQ (rute request) message twards the destinatin, it travels thrugh all ndes available between the surce and destinatin. If ne f the middle ndes is affected by black hle attack, it receives the RREQ and sends RREP (rute reply) message back t surce indicating that there is shrt path available frm that nde fr destinatin. Once the RREP is receive by the surce, surce sends all the packets tward that affected nde and packets gets discarded by that nde. Due t this, cngestin ccurs in netwrk and hence slwdwn the netwrk [9]. Ruting attack: Ruting prtcls are ne f the mst imprtant part f mbile ad-hc netwrk and hence several attacks are munted n it. The attacker s aim is t interrupt the prper peratin f netwrk using attacks such as Packet Replicatin, Ruting Table Overflw, Rute Cache Pisning, Ruting Table Pisning [2] and s n. - Transprt layer attack: Sme f the different types f attacks n transprt layer are given belw: Sessin hijacking attack: In sessin hijacking, attackers explit the unprtected sessin nce its initial setup is dne. Attacker steal the victim nde s IP address and finds its crrect sequence number and then apply varius denial f service (DS) attacks t it. - Multi layer attack: Sme f the different types f attacks n multi layer are given belw. Denial f service: This attack aims t attack the availability f a nde r the entire netwrk. If the attack is successful the services will nt be available and hence the netwrk will nt wrk fr lnger perid. Jamming: After determining the frequency f cmmunicatin jamming is initiated by malicius nde. Jamming is ne f the types f denial f service. Impersnatin: Impersnatin attack aims t attack the cnfidentiality and authenticity f a netwrk. The attacker uses t impersnate the address f ther user nde in rder t change the netwrk tplgy. When surce want t send the data packet tward the destinatin, this malicius nde prtray the address f destinatin and acts as destinatin nde. S surce sends all the data infrmatin twards this malicius nde and the data remain n mre cnfidential. 2) Security gals: There are 5 main security gals are prvided fr MANET which are as explained belw:» Availability: Availability ensures the permanency f infrmatin r the infrmatin that is available all the time. This security gal is ensure t prtect a netwrk against the attacks such as denial f services. 2015, IJARCSMS All Rights Reserved ISSN: (Online) 148 P age

5 Internatinal Jurnal f Advance Research in Cmputer Science and Management Studies Vlume 3, Issue 8, August 2015 pg » Cnfidentiality: Cnfidentiality means, nly the authrized user has the privilege t access certain infrmatin. This security gal is ensure t prtect a netwrk against the attacks such as eavesdrpping and impersnatin.» Integrity: Integrity ensures the cmpleteness f data that means there is n altering f infrmatin. This security gal is ensure t prtect a netwrk against the attacks such as mdificatin f message.» Authenticatin: Authenticatin enables a nde t ensure the identity f peer nde it is cmmunicating with. This security gal is ensure t prtect a netwrk against the attacks such as impersnatin.» Authrizatin: Authrizatin ensures that different types f users can have different access rights. This security gal is ensure t prtect a netwrk against the attacks such as sessin hijacking. V. CONCLUSION The aim f this paper is t understand the basic cncept f mbile ad-hc netwrking alng with its security aspects. As mbile ad-hc netwrk becming widest area f research, lts f mdificatins are ccurring day-by-day. As ruting prtcl is key cncept in MANET, security slutins fr this is researcher s main aim. The issues and security attacks mentined abve in paper is develpment tpic fr researcher s. References 1. Aarti, Dr. S. S. Tyagi, Study f MANET: Characteristics, Challenges, Applicatin and Security Attacks, Internatinal Jurnal f Advanced Research in Cmputer Science and Sftware Engineering, Vlume 3, Issue 5, May Abhay Kumar Rai,Rajiv Ranjan Tewari,Saurabh Kant Upadhyay, Different Types f Attacks n Integrated MANET-Internet Cmmunicatin, nternatinal Jurnal f Cmputer Science and Security (IJCSS), Vlume 4, Issue 4, Pages , Year Vanita Rani, Dr. Renu Dhir, A Study f Ad-Hc Netwrk: A Review, Internatinal Jurnal f Advanced Research in Cmputer Science and Sftware Engineering, Vlume 3, Issue 3, March C. E. Perkins and P. Bhagwat, Highly Dynamic Destinatin-Sequenced Distance-Vectr Ruting (DSDV) fr Mbile Cmputers, In Prceedings f ACM SIGCOMM, pages , Yih-Chun Hu, Adrian Perrig, David B. Jhnsn, Packet Leashes: A Defense against Wrmhle Attacks in Wireless Netwrks. 6. Sevil Şen, Jhn A. Clark, Juan E. Tapiadr, Security Threats in Mbile Ad Hc Netwrks, IEEE Internatinal Cnference n Telecmmunicatins and Malaysia Internatinal Cnference n Cmmunicatins, Saleh Ali K.Al-Omari1, Putra Sumari2, An verview f Mbile Ad Hc Netwrks Fr The Existing Prtcls And Applicatins, Internatinal jurnal n applicatin f graph thery in wireless ad hc netwrks and sensr netwrks(graph-hc), Vl.2,N.1,March Perkins C., Belding-Ryer E., Das S., RFC 3561: Ad hc On-Demand Distance Vectr (AODV) Ruting, M.A. Shurman, S.M. Y, and S. Park, Black Hle Attack in Mbile Ad Hc Netwrks, ACM Sutheast Reginal Cnference, pp , Siddhu Warrier, Characterisatin and Applicatins f MANET Ruting Algrithms in Wireless Sensr Netwrks, Master f Science Schl f Infrmatics, University f Edinburgh, , IJARCSMS All Rights Reserved ISSN: (Online) 149 P age