A survey of manet intrusion detection & prevention approaches for network layer attacks

IEEE Communications Surveys and Tutorials

Volumn 15, Issue 4, 2013, Pages 2027-2045

  Nadeem, Adnan ^a   Howarth, Michael P ^b  

^a FEDERAL URDU UNIVERSITY OF ARTS   (Pakistan)

^b UNIVERSITY OF SURREY   (United Kingdom)

Author keywords

Intrusion detection and prevention; Mobile ad hoc networks; Network layer attacks; Securing ad hoc networks

Indexed keywords

INTRUSION DETECTION AND PREVENTION; INTRUSION DETECTION SYSTEMS; MANET ROUTING PROTOCOLS; MOBILE ADHOC NETWORK (MANETS); NETWORK LAYER ATTACKS; POINT DETECTION ALGORITHM; PROTECTION MECHANISMS; WIRELESS NETWORKING TECHNOLOGY;

INTRUSION DETECTION; NETWORK LAYERS; SURVEYS;

MOBILE AD HOC NETWORKS;

EID: 84888341461     PISSN: None     EISSN: 1553877X     Source Type: Journal    
DOI: 10.1109/SURV.2013.030713.00201     Document Type: Article

References (97)

1. IETF Mobile Ad-Hoc Networks Working Group (MANET), IETF website www.ietf.org/dyn/wg/charter/manet-charter.html
2. IETF Ad-Hoc Networks Autoconfigurations (autoconf) Working Group, IETF website http://datatracker.ietf.org/wg/autoconf/charter/
3. IEEE Std 802.11-2007, IEEE standard for information technology- Telecommunication and information exchange between systems-Local and metropolitan area network-Specific requirement, Part 11 Wireless LAN medium access control and physical layer specifications, June 2007.
4. J. Anderson "Computer Security, Threat monitoring and surveillance", Fort Washington PA, James P, Anderson & Co, 1980.
5. Michael Sobirey, "Intrusion Detection Systems Bibliography", available at http://www.cse.sc.edu/research/isl/mirrorSobireys.shtml
6. H. Debar, M. Dacier and A.Wespi, "Towards a Taxonomy of Intrusion Detection Systems", Computer Network Journal, special issue on Computer Network Security, Vol.31, No.8, pp 805-822, April 1999.
7. H. Debar, M. Dacier and A.Wespi, "A Revised Taxonomy for Intrusion Detection Systems", Annals of Telecommunications, Vol.55, No.7, pp 361-378, July 2000.
8. G.A. Jacoby, R.Marchany and N.J. Davis, "Battery-based intrusion detection as first line of defense", Proc. Annual IEEE Information Assurance Workshop, pp 272-279, 2004. (Pubitemid 40442802)
9. B. Sun, L. Osborne, Y. Xiao, and S. Guizani, "Intrusion Detection Techniques in Mobile Ad Hoc and Wireless Sensor Networks," IEEE Wireless Communications Magazine, special issue on Security in Wireless Mobile Ad Hoc and Sensor Networks, Vol.14, No.5, pp. 56-63, Oct. 2007. (Pubitemid 350231654)
10. G.S.Mamatha and S.C. Sharma, "Network Layer Attacks and Defence Mechanisms in MANETs-A Survey", International Journal of Computer Applications, Vol.9, No.9, Nov. 2009.
11. D. Kheyri and M. Karami, "A comprehensive survey of anomaly based intrusion detection systems in MANETs", Journal of Computer and Information Science, Vol. 5, No. 4, pp. 132-139, 2012.
12. S. Sahu and K. Shandilya, "A Comprehensive Survey on Intrusion Detection in MANET", International Journal of Information Technology and Knowledge Management, Vol.2, No. 2, pp. 305-310, 2010.
13. M.Ghonge, P.M.Jawandhiya and M.S.Ali, "Countermeasures of Network Layer Attacks in MANETs", International Journal of Computer Applications, Special Issue on Network Security and Cryptography, NSC, 2011.
14. N. Deb, M.Chakraborty and N. Chaki, "A state-of-the-art survey on IDS for mobile ad-hoc networks and wireless mesh networks", Proceedings International Conference on Parallel, Distributed Computing Technologies and Applications, PDCTA 2011, pp. 169-179, 2011.
15. S.Gangwar, "Mobile Ad Hoc Networks: A Comprehensive Study and Survey on Intrusion Detection", International Journal of Engineering Research and Applications (IJERA), Vol.2, No.1, pp 607-612, 2012.
16. F.Tseng, L. Chou and H.Chao, "A Survey of Black Hole Attacks in Wireless Mobile Ad Hoc Networks", Journal on Human-Centric Computing and Information Sciences, Springer, Vol.1, No.4, pp. 1-16, 2011.
17. T. He, H. Wang and K.W. Lee, "Traffic analysis in anonyms MANETs", Proc. IEEE Military Communication Conference MILCOM, November 2008.
18. J. Kong, X. Hong and M. Gerla, "A new set of passive routing attacks in Mobile ad hoc networks", Proc. IEEE Military Communication Conference MILCOM, October 2003.
19. E. Perkins and M. Royer, "Ad Hoc On Demand Distance Vector Routing", Sun MicroSystem Laboratories Advance Development Group, Proceeding of the IEEE MOBICOM, pp 90-100, 1999.
20. B. Johnson and A. Maltz, "Dynamic Source Routing in Ad Hoc Wireless Networks", Proc. Mobile Computing Journal, Vol.353, pp 153-181, 1996.
21. M. Pirrete and R. Brooks, "The Sleep Deprivation Attack in Sensor Networks: Analysis and Methods of Defence", International Journal of Distributed Sensor Networks, Vol.2, No.3, pp 267-287, 2006.
22. A.Nadeem and M.Howarth, "Adaptive Intrusion Detection & Prevention of Denial of Service Attacks in MANETs", Proc. ACM International Wireless Communication and Mobile Computing Conference (IWCMC 09), Leipzig Germany, June 2009.
23. S. Kurosawa and A. Jamalipour, "Detecting Blackhole Attack on AODVbased Mobile Ad Hoc Networks by Dynamic Learning method", International Journal of Network Security, Vol.5, No.3, pp 338-345, November 2007.
24. J.Sen, M.Chandra, S.G. Harihara, H.Reddy and P.Balamuralidhar, "A Mechanism for Detection of Gray Hole Attacks in Mobile Ad Hoc Networks", Proc. IEEE International Conference on Information Communication and Signal Processing ICICS, Singapore, Dec. 2007.
25. Y.Hu, A. Perrig and B. Johnson, "Rushing Attack and Defence in Wireless Ad Hoc Networks Routing Protocol", Proc. ACM Workshop on Wireless Security, pp. 30-40, 2003.
26. C.Piro, C.Shields and B.Levine, "Detecting the Sybil Attack in Mobile Ad hoc Networks", Proc. IEEE International Conference on Security and Privacy in Communication Networks, Aug-Sep. 2006.
27. P.Yi, Z.Dai, Y. Zhong and S.Zhang, "Resisting Flooding Attack in Ad Hoc Networks", Proc. IEEE International Conference on Information Technology Coding & Computing ITCC, April 2005.
28. J. Sen, M. Chandra, P. Balamurlidhar, S.G. Harihara and H.Reddy, "A Distributed Protocol for Detection of Packet Dropping Attack in Mobile Ad hoc Networks", Proc. IEEE Conference on Telecommunication and Malaysian International Conference on Communication (ICT-MICC), 2007
29. S. Marti, T.J. Giuli, K.Lai and M. Baker, "Mitigating Routing Misbehaviour in Mobile Ad Hoc Networks", Proc. International Conference on Mobile Computing and Networking, pp 255-265, 2000. (Pubitemid 32024700)
30. S.B. Lee and Y.H. Choi, "A Resilient Packet Forwarding Scheme against Maliciously Packet Dropping Nodes in Sensor Networks", Proc. ACM workshop on Security of Ad Hoc and Sensor Networks (SANS 2006),pp 59-70, USA, Oct. 2006.
31. P. Papadimitratos and Z.Haas, "Secure Data Communication in Mobile Ad Hoc Networks", IEEE Journal on Selected Areas in Communications, Vol.24, No.2, pp 343-356, Feb. 2006. (Pubitemid 43269754)
32. O.F. Gonzalez-Duque, M. Howarth and G. Pavlou, "Detection of Packet Forwarding Misbehaviour in Mobile Ad hoc Networks", Proc. International Conference on Wired/Wireless Internet Communications (WWIC 2007), pp 302-314, Portugal, June 2007.
33. O.F. Gonzalez-Duque, G. Ansa, M. Howarth and G. Pavlou, "Detection and Accusation of Packet Forwarding Misbehaviour in Mobile Ad hoc Networks", Journal of Internet Engineering, Vol.2, No.8, pp 181-192, June 2008.
34. O.F. Gonzalez-Duque, A.M. Hadjiantonis, G. Pavlou and M. Howarth, "Adaptive Misbehaviour Detection and Isolation in Wireless Ad Hoc networks Using Policies", Proc. IFIP/IEEE International Symposium on Integrated Network Management (IM 2009), pp 242-250, NY, USA, June 2009.
35. H. Yang, J. Shu, X. Meng, and S. Lu, "SCAN: Self-Organized Network-Layer Security in Mobile Ad Hoc Networks," IEEE Journal on Selected Areas in Communications, Vol. 24, No. 2, pp. 261-273, 2006. (Pubitemid 43269748)
36. Y. Guo and S. Perreau, "Detect DDoS Flooding Attacks in Mobile Ad Hoc Networks," International Journal of Security and Networks, Vol. 5, No.4, pp. 259-269, 2010.
37. T. Martin, M. Hsiao, H. Dong and J. Krishnaswami, "Denial-of-Service Attacks on Battery Powered Mobile Computers", Proc. IEEE International Conference on Pervasive Computing and Communications (PerCom), March 2004.
38. H. Hsu, S. Zhu, and A. R. Hurson, "LIP: a Lightweight Interlayer Protocol for Preventing Packet Injection Attacks in Mobile Ad Hoc Networks," International Journal of Security and Networks, Vol. 2, Nos. 3/4, pp. 202-215, 2007.
39. W.Yu and K.Ray, "Defense Against Injecting Traffic Attack in Cooperative Ad Hoc Networks", Proc. IEEE GLOBECOM, St. Louis, Missouri, USA, Dec. 2005.
40. E.Padilla, N.Aschenbruck, P.Martini, M.Jahnke and J.Tolle, "Detecting Black Hole Attack in Tactical MANETs using Topology Graph", Proc. IEEE Conference on Local Computer Networks, 2007.
41. M. Medadian, M.H. Yektaie and A.M. Rehmani, "Combat with Black Hole Attack in AODV Routing Protocol in MANETs", Proc. IEEE Asian Himalayas International Conference on Internet, Nov. 2009.
42. X.Y. Zhang, Y. Sekiya and Y. Wakahara, "Proposal of a Method to Detect Black Hole Attack in MANETs", Proc. IEEE International Symposium on Autonomous Decentralized System ISADS, 2009.
43. G.Xiaopeng and C.Wei, "A Novel Grey Hole Attack Detection Scheme for Mobile Ad-Hoc Networks", Proc. IFIP International Conference on Network and Parallel Computing, 2007.
44. C. Wei, L. Xiang, B. Yuebin and G.Xiopeng, "A New Solution for Resisting Grey Hole Attack in Mobile Ad Hoc Networks", Proc. IEEE Conference on Communication and Networking, China 2007.
45. C.Y. Tseng, P. Balasubramanyam, C. Ko, R. Limprasittiporn, J. Rowe, and K. Levitt, "A Specification Based Intrusion Detection for AODV", Proc. ACM Workshop on Security of Ad Hoc and Sensor Networks, 2003.
46. P. Papadimitratos and Z.J. Haas, "Secure Message Transmission in Mobile Ad Hoc Networks", Elsevier Journal of Ad Hoc Networks, Vol.1, No.1, pp 193-209, 2003. (Pubitemid 40421402)
47. P. Papadimitratos, Z.J. Haas and P. Samar, "The Secure Routing Protocol (SRP) for Ad Hoc Networks", IETF Internet Draft , December 2002, available at http://www.ietf.org/proceedings/56/I-D/draftpapadimitratos-secure- routing-protocol-00.txt.
48. A. Rawat, P.D. Vyavahare and A.K. Ramani, "Evaluation of Rushing Attack on Secure Message Transmission (SMT/SRP) Protocol for Mobile Ad Hoc Networks", Proc. International Conference on Personal Wireless Communications (ICPWC), Jan. 2005.
49. J. Douceur, "The Sybil Attack", Proc. International Workshop on Peerto-Peer Systems (IPTPS), March 2002.
50. D.Monica, J. Leitao, L. Rodrigues and C.Riberio, "On the use of Radio Resource Test in Wireless Ad Hoc Networks", Proc.Workshop on Recent Advances in Intrusion Tolerant Systems, Portugal, June 2009.
51. N.Ye, X.Li, Q.Chen, M.Emran and M.Xu, "Probabilistic Techniques for Intrusion Detection Based on Computer Audit Data", IEEE Transactions on Systems, Man, and, Cybernetics, Vol. 31, No. 4, July 2001.
52. N.Ye and Q.Chen, "An Anomaly Detection Technique based on a CHISQUARE Statistics for Detecting Intrusion into Information System", International Journal of Quality and Reliability Engineering International, Vol.17, No.6, pp 105-112, 2001. (Pubitemid 32443869)
53. H. Debar, M. Becker and D. Siboni, "A Neural Network Component for an Intrusion Detection System", Proc. IEEE Computer Society Symposium on Security and Privacy, Oakland, May 1992.
54. D.S. Bauer, F.R. Eichelman, R.M. Herrera and A.E. Irgon, "Intrusion Detection an Application of Expert Systems to Computer Security", Proc. IEEE International Conference on Security Technology, 1989.
55. T. Lunt and R. Jagannathan, "A Prototype Real Time Intrusion Detection Expert System", Proc. IEEE Symposium on Security and Privacy, Oakland, April 1988.
56. N. Habra, B. L. Charlier, A. Mounji and I. Mathie, "Asax Software Architecture and Rule Based Language for Universal Audit Trail Analysis", Proc. European Symposium on Research in Computer Security ESORICS, France, November 1992.
57. P. Uppuluri and R. Sekar, "Experiences with Specification-Based Intrusion Detection," Proc. Recent Advances in Intrusion Detection, (RAID), 2001.
58. W. Scheirer and M. Chuah, "Syntax vs. Semantics: Competing Approaches to Dynamic Network Intrusion Detection", International Journal of Security and Networks, Vol. 3, No. 1, pp. 24-35, 2008. (Pubitemid 351546019)
59. D.Sterne, P.Balasubramanyam, D.Carman, B.Wilson, R. Talpade, C.Ko, R. Balupari, C.-Y. Tseng, T.Bowen, K.Levitt and J.Rowe, "A General Cooperative Intrusion Detection Architecture for MANETs", Proc. IEEE International Workshop on Information Assurance (IWIA 05), 2005.
60. Y. Huang and W. Lee, "A Cooperative Intrusion Detection System for Ad Hoc Networks", Proc. ACM Workshop on Security of Ad Hoc and Sensor Networks, New York, USA, 2003.
61. B. Pahlevanzadeh and A. Samsudin, "Distributed Hierarchical IDS for MANET over AODV", Proc. IEEE International Conference on Telecommunications, Malaysia, May 2007.
62. P. Yi, Y. Jiang, Y. Zhong and S. Zhang, "Distributed Intrusion Detection for Mobile Ad Hoc Networks", Proc. IEEE Application and Internet Workshop, 2005.
63. G.F.Cretu, J.Parekh, K.Wang and S.J.Stolfo, "Intrusion and Anomaly Detection Model Exchange for Mobile Ad-Hoc Networks", Proc. IEEE Consumer Communication and Networking Conference, 2006.
64. Y. Liu, C. Comaniciu and H. Man, "Modelling Misbehaviour in Ad Hoc Networks: a Game Theoretic Approach for Intrusion Detection", International Journal of Security and Networks, Vol. 1, Nos.3/4, pp. 243-254, 2006.
65. H.Jiang and H.Wang, "Markov Chain Based Anomaly Detection for Wireless Ad-Hoc Distribution Power Communication Networks", Proc. IEEE Power Engineering Conference, 2005.
66. S.Jha, K.Tan and R.A.Maxion, "Markov Chains, Classifier, and Intrusion Detection", Proc. IEEE Computer Security Foundations Workshops, 2001.
67. B. Sun, K. Wu and U.W. Pooch, "Routing Anomaly Detections in Mobile Ad Hoc Networks", Proc. IEEE International Conference on Computer Communication and Networks ICCCN, 2003.
68. B.Sun, K.Wu, Y.Xiao and R.Wang, "Integration of Mobility and Intrusion Detection Wireless Ad Hoc Networks", Journal of Communication Systems, Wiley International, Vol. 20, No. 6, pp. 695-721, 2007. (Pubitemid 46959707)
69. Y.Zhang and W.Lee, "Intrusion Detection in Wireless Ad-Hoc Networks", Proc. ACM International Conference on Mobile Computing and Networking(MobiCom), pp 275-283, Boston, US, 2000. (Pubitemid 32024702)
70. Y. Zhang, W. Lee, and Y. Huang, "Intrusion Detection Techniques for Mobile Wireless Networks," ACM Wireless Networks, Vol. 9, No. 5, pp. 545-56, Sep. 2003.
71. P.Albers, O.Camp and R.Puttini, "Security in Ad-Hoc Networks: A General ID Architecture Enhancing Trust Based Approaches", Proc. IEEE International Workshop on Wireless Information Systems, 2002.
72. O.Kachirski and R. Guha,."Effective Intrusion Detection Using Multiple Sensors in Wireless AdHoc Networks." Proc. IEEE Hawaii International Conference on System Sciences (HICSS'03), 2003.
73. P.Tai, H.A Ryaciotaki-Boussalis and D.Hollaway, "Neural Network Implementation to Control Systems: a Survey of Algorithm and Techniques", Proc. IEEE International Conference on Signals, Systems and Computers, Nov. 1991.
74. A.Mitrokosta, N.Komninos and C.Douligeris, "Intrusion Detection with Neural Networks and Watermarking Techniques for MANETs", Proc. IEEE International Conference on Pervasive Services, pp 118-127, July 2007.
75. V.M.Potdar, S.Han and E.Chang, "A Survey of Digital Image Watermarking Techniques", Proc. IEEE International Conference on Industrial Informatics, Aug. 2005.
76. S.Jabbehdari, S.H. Talari and N.Modiri, "A Neural Network Scheme for Anomaly Based Intrusion Detection Systems in Mobile Ad Hoc Networks", Journal of Computing, Vol. 4, No. 2, pp-61-66, 2012.
77. K.Ilgun, R.A.Kemmerer, and P.A.Porras, "State Transition Analysis: a Rule Based Intrusion Detection Approach", IEEE Transactions on Software Engineering, Vol.21, No.3, pp-181-199, March 1995.
78. G. Vgina, S. Gawalani, K. Srinivasan, M. Belding-Royer and A. Kemmerer, "An Intrusion Detection Tool for AODV Based Ad Hoc Wireless Networks", Proc. IEEE Annual Computer Security Application Conference ACSAC,2004.
79. N.Komninos, D. Vergados and C.Douligeris, "Detecting Unauthorized and Compromised Nodes in Mobile Ad Hoc Networks", Journal of Ad Hoc Networks, Elsevier, Vol. 5, No. 3, pp 289-298, April 2007. (Pubitemid 46027748)
80. F. Anjum, D. Subhadrabandhu and S. Sarkar, "Signature Based Intrusion Detection for Wireless Ad Hoc Networks: a Comparative Study of Various Routing Protocols", Proc. IEEE Vehicular Technology Conference (VTC), Oct 2003.
81. A.B.Smith, "An Examination of Intrusion Detection Architecture for Wireless Ad-Hoc Networks", Proc. National Colloquium for Information System Security Education, May 2001.
82. R. Sekar, A. Gupta, J. Frullo, T. Shanbhag, A. Tiwari, H. Yang, and S. Zhou, "Specification-Based Anomaly Detection: a New Approach for Detecting Network Intrusions", Proc. ACM Conference on Computer and Communications Security CCS '02, 2002.
83. R. Sekar and P. Uppuluri, "Synthesizing Fast Intrusion Prevention/ Detection Systems from High-Level Specifications", Proc. Usenix Security Symposium, 1999.
84. J.-M. Orset, B. Alcalde, and A. R. Cavalli, "An eEFSM-Based Intrusion Detection System for Ad Hoc Networks", Proc. International Conference on Automated Technology for Verification and Analysis, pp 400-413, 2005.
85. T. Clausen and P. Jacquet. IETF RFC 3626: Optimized Link State Routing Protocol (OLSR). http://www.ietf.org/rfc/rfc3626.txt, 2003.
86. H. Tseng, T.Song, P. Balasubramanyam, C.Ko and K.Levitt, "A Specification-Based Intrusion Detection Model for OLSR," Proc. International Symposium on Recent Advances in Intrusion Detection (RAID), pp. 330-350, 2005.
87. N. Stakhanova, S. Basu, W. Zhang, X. Wang, and J. Wong, "Specification Synthesis for Monitoring and Analysis of MANET Protocols," Proc. International Symposium on Frontiers in Networking with Applications, 2007.
88. J.Joseph, A.Das, B.Seet and B.Lee, "CRADS: Integerated Cross Layer approach for Detecting Routing Attacks in MANETs", Proc. IEEE Wireless Communication and Networking Conference (WCNC), 31st March-3rd April 2008.
89. V.N.Vapnik, "Statistical Learning Theory". 1998: Wiley.
90. A.Nadeem and M.Howarth, "A Generalized Intrusion Detection and Prevention Mechanism for Securing MANETs", Proc. IEEE International Conference on Ultra Modern Telecommunications and Workshops, St Petersburg Russia 2009.
91. A.Hijazi and N.Nasser, "Using Mobile Agent for Intrusion Detection in Wireless Ad-Hoc Networks", Proc. IEEE Wireless Communication and Networking Conference WCNC, March 2005.
92. J.C. Kao and R. Marculescu, "Eavesdropping Minimization via Transmission Power Control in Ad Hoc Wireless Networks", Proc. IEEE Sensors and Ad hoc Communication and Networks SECON, 2006.
93. K.Sanzgiri and M.Belding-Royer, "A Secure Routing Protocol for Ad Hoc networks", Proc. IEEE International Conference on Network Protocol (ICNP' 02), 2002
94. Y.Hu, A.Perrig and B.Johnson, "A Secure On Demand Routing Protocol for Ad Hoc networks", Proc. ACM/ IEEE International Conference on Mobile Computing (MobiCom), Atlanta, Georgia, USA, pp 23-28, Sep. 2002.
95. V. Karyotis, S. Papavassiliou, M. Grammatikou, and V. Maglaris, "A Novel Framework for Mobile Attack Strategy Modelling and Vulnerability Analysis in Wireless Ad Hoc Networks," International Journal of Security and Networks, Vol. 1, Nos.3/4, pp. 255-265, 2006.
96. Y.Hu, B. Johnson and A. Perrig, "SEAD: Secure Efficient Distance Vector Routing for Mobile Wireless Ad Hoc Networks", International Journal of Ad hoc Networks, Vol.1, pp 175-192, 2003. (Pubitemid 40421401)
97. A.Nadeem and M.Howarth, "Protection of MANETs from a range of attacks using an intrusion detection and prevention system", Telecommunication Systems Journal, Springer, In Press, DOI 10.1007/s11235-011- 9484-6, July 2011.