Secure Routing Against Flooding Attack in MANET

IJSRD - International Journal for Scientific Research & Development| Vol. 4, Issue 04, 2016 | ISSN (online): 2321-0613

Secure Routing Against Flooding Attack in MANET Pooja Raval1 Prof. M. M. Patel2 P.G. Student 2Associate Professor 1,2 Department of Computer Engineering 1,2 Smt. S.R. Patel Engineering College Dabhi, Gujarat, India 1

Abstract— Mobile Ad hoc Network is an autonomous system of mobile nodes connected by wireless links. The communication may be via intermediate nodes from source to destination. On demand routing protocol is superior than different routing Protocols in MANET. The nodes are free to move in the network. MANET faces many attacks because of its characteristics. Now a days the Denial of service attack grown up and disturb whole ad hoc network. Flooding attack is a kind of denial of service attack in which intruder floods (broadcast) exceed packets in the network so the actual communication can’t be kept and traffic will create. After analyzed Ad hoc flooding attack, we proposed a new method for detecting flooding attack and save the network. In our method we use shared secret key for authenticating a communication between nodes and also use challenge response protocol. Our goal is to provide a better security and decreases overhead of routing.

Key words: MANET, AODV, Security, Denial of Service (DoS), Flooding attack

Network. MANET is established in an emergency situations as described above.

The Security services are required in MANET because of nodes are dynamic in mobile ad hoc network. In MANET security issues are, Confidentiality, Integrity, Availability, Non-repudiation, Authentication, Authorization, Anonymity.

Because of weak security and decentralized structure, various attacks are occurred by the attacker in the network.

I. INTRODUCTION MANET is an infrastructure less network in which autonomous nodes are wirelessly connected with each other, communicate and create multi hop network for a short period of time or temporarily. In MANET individual nodes are free to move anywhere in the network or out of the network. The nodes of these networks act as routers, which are able to find and maintain routes to other nodes in the network. Mobile Nodes can be anything like laptop, mobile phone, PDA, personal computer etc.

MANETs have many characteristics like Autonomous terminal, Distributed operation, Multi hop routing, Dynamic network topology, fluctuating link capacity, Light weight terminals, Automatic Self configuration, Quick Deployment, Constrained Resources (Battery Power, Wireless Transmitter Range etc.). There are few advantages of MANET like, Scalable, Easy to Setup, Infrastructure less, Less expensive compare to wired network, Self-Configuring Network, Very useful in emergency situations.

There are mainly three types of routing protocols used like Proactive (DSDV, OLSR), Reactive (AODV) and Hybrid (ZRP) protocols in MANET. Proactive protocols found route automatically, maintain all information of each node and also update information regularly. Reactive protocols are also called as on-demand routing protocol. It means when any node wants to communicate to other node in the network, at that time the path will be established and maintain till the communication necessary. Hybrid protocols having the properties of both the protocols proactive protocols and reactive protocols.

In Real world, Mobile Ad hoc Network applied in Military battlefield, Commercial Sector, Local Level like conference, Civilian Environments etc. and Personal Area

Fig. 1: Routing Attacks Flooding attack is a denial of service type active attack. In this attack, attacker aims to flood the network with the number of fake RREQ control packets or data packets until the network will be saturated with those packets and the genuine communication can’t take place.

As per the type of packet used to flood in the network, it is classified into three categories which are shown below, In HELLO mechanism, nodes are broadcast HELLO messages and declare themselves to their neighbors. But some malicious entities in the network flood the excessive HELLO packets without maintaining the time interval it is called HELLO flooding attack.

In RREQ flooding, the intruder floods the more number of RREQ packets to the node so the legitimate nodes cannot communicate and consume the bandwidth of the network or getting down the network.

In DATA flooding, attacker first create a path with the other nodes and after that it sends extreme no. of fake data packets to their neighbors and create a traffic . This attack is very difficult to detect.

In this paper, we are enhanced a new technique to prevent a network against flooding attack and detect flooder malicious node.

All rights reserved by www.ijsrd.com

777

Secure Routing Against Flooding Attack in MANET (IJSRD/Vol. 4/Issue 04/2016/190)

II. LITERATURE SURVEY Several solutions are proposed in the literature. TARP is most commonly used technique [1]. Authors evaluates the proposed TARP protocols on two important attributes battery power and software configuration.

Another solution is hybrid intrusion detection system[2]. The anomaly based intrusion detection technique using the Self organizing map classification method provides higher detection rate than other anomaly detection method.

Partha Sarathi Banerjee, Krishanu Das, Subhankar Das, S. R. Bhadra Chaudhuri have proposed A Secure Multipath Routing in MANET [3]. AMSPR, a routing technique where the encrypted secret message is split into multiple shares and those shares are transmitted through multiple node- disjoint paths to the destination. This can reduce the complexity of the system greatly.

Meenakshi Patel, Sanjay Sharma, Sanjay Sharma have proposed a new technique to detect and prevent flooding attack using SVM[12]. Here Support Vector Machine (SVM) stores the behavior of every node.

Ms. Neetu Singh Chauhan, Ms. Shweta Yadav have proposed a method in which Neighboring nodes are segregated into three categories before path is established.

Friend (F), Acquaintance (A), Stranger (S) [14].

Another approach is based on Real time host intrusion detection[10]. The proposed algorithm follows the knowledge based methodology to detect network intrusions.

But Knowledge based system is very time consuming task.

Muhammad Asif Raza, Asim-ur-Rehman Khan and Muhammad Raza have proposed a restrictive model for detect and prevent a INVITE flooding attack[11]. This Model provides an efficient mechanism for dealing with the ‘INVITE’ Flooding attack and devises a rapid detection and prevention of these attacks.

Another method is clustering behavior based reputation mechanism is invented to identify the flooding intruder node in military battlefield network[16]. In battlefield situation, Group mobility model is followed that’s why grouping of nodes in clusters have some benefits.

III. PROPOSED SCHEME Because of main issues of MANET like,  Limited Bandwidth  Low battery Power  Security issues , Network will easily congested by the exceed control signals.

We proposed a new method of preventing flooding attack using shared secret key concept.

In our proposed scheme we have focusing on network overhead and provide more security against flooding attack to the network using shared secret key concept.

Our proposed algorithm is as follow: Step 1: Initializing the process Step 2: when the nodes are deploy, the common secret key is given to all nodes into network Step 3: If any new node enters in the network and send the control packets then that node checks pckt_rate Step 4: if pckt_rate > flood_lmt then go to step 5 Step 5: Challenging process

Step 6: If reply will not come then the node will be declared as malicious node Step 7: Broadcast the alarm message Step 8: End the process Figure 2 shows the algorithm of our proposed scheme.

Fig. 2: Flowchart of proposed scheme IV. RESULT AND ANALYSIS In simulation, we have used NS-2.35 tool.

A. Simulation Parameters: Parameters Value Area 500 M× 500 M Number of Source Nodes 10, 20, 30 Traffic Type CBR Packet Size 512 Bytes No. Of Malicious Node 1 Routing Protocol AODV Simulation Type 200.00 S Table 1: simulation parameters B. Packet Delivery Ratio: PDR = number of total packets received / number of total packets sent

All rights reserved by www.ijsrd.com

778

Secure Routing Against Flooding Attack in MANET (IJSRD/Vol. 4/Issue 04/2016/190)

Fig. 3: PDR after applying proposed method From the figure 3 we can say that, after applying our proposed method using shared secret key, PDR will increasing. So we can say that the flooding attack is prevented accurately.

C. Throughput in Kbps: In data transmission, network throughput is the amount of data traversed successfully from one place to another in a given time period, and typically measured in bits per second (bps).

Fig. 5: Routing load after applying proposed method V. CONCLUSION MANET’s are the most promising field of research but there are always security threats from attacker due to their characteristics. And now-a-days denial of service attacks are very dangerous for MANET. Flooding Attack is the part of this attack. In this paper we proposed a novel scheme which provides more security and prevent flooding attacks accurately, which decreases the overhead of routing. And our technique is also very simple not complex compare to other existing scheme.

REFERENCES

Fig. 4: Throughput after applying proposed method If any flooder node present in the network then the throughput will decreases as shown in upper chart. But after applying our proposed method the throughput will increases any very nearer to the normal scenario.

D. Routing Load: Effect of malicious node on AODV protocol in terms of normalized routing overhead with respect to no. of nodes is shown in figure 5. In case of flooding, effect of malicious node increases almost exponentially, hence can lead to network failure.

We can see that our proposed method prevent flooding attack and the overhead after applying proposed work will be decreased.

[1] L. Abusalah, A. Khokhar, G. BenBrahim, W. ElHajj “TARP: Trust Aware Routng Protocol” (ACM 1-59593306-9/06/0007, 2006) [2] Indira N, “Establishing a secure routing in MANET using a Hybrid Intrusion Detection System”, (IEEE 9781-4799-8159-5/14, 2014) [3] Partha Sarathi Banerjee, Krishanu Das, Subhankar Das, S. R. Bhadra Chaudhuri, “AMSPR: A Secure Multipath Routing in Mobile Ad Hoc Networks (MANET)”, (IEEE 978-1-4799-6052-1/14, 2014) [4] Lu Han, “Wireless Adhoc Networks”, October 8, 2004.

[5] Himadri Nathsaha, Dr. Debika Bhattacharya and Dr. P.K. Banrejee, “Secure Multipoint Relay based routing in MANET”, ACM 978-1-4503-1310-0/12/10, CCSEIT2012 Coimbatore.

[6] Jai Shree Mehta, ShilpaNupur, and Swati Gupta, “An Overview of MANET: Concepts, Architecture & Issues”, International Journal of Research in Management, Science & Technology (E-ISSN: 23213264), April 2015.

[7] Ankur O. Bang andPrabhakar L. Ramteke, “MANET: History, Challenges and Applications”, International Journal of Application or Innovation in Engineering &Management (IJAIEM) September 2013, ISSN 2319 – 4847.

[8] Prof. B.N. Jagdale and Mrunal S. Patil , “Emulating Cryptographic Operations for Secure Routing in Ad-hoc Network ” , IEEE 2015 , International Conference on Pervasive Computing (ICPC).

[9] Jiwen CAI , Ping YI , Jialin CHEN, Zhiyang WANG, Ning LIU , “An Adaptive Approach to Detecting Black

All rights reserved by www.ijsrd.com

779

Secure Routing Against Flooding Attack in MANET (IJSRD/Vol. 4/Issue 04/2016/190)

and Gray Hole Attacks in Ad Hoc Network ”, 2010 24 th IEEE International conference on Advanced Information Networking and Applications.

[10] Mohamed M. Ibrahim , Nayera Sadek , Mohamed EIBanna, “Prevention of Flooding Attack in Wireless AdHoc AODV-based networks using Real-time Host Intrusion Detection” (IEEE 978-1-4244-3474-9/09 , 2009) [11] Muhammad Asif Raza,Asim-ur-Rehman Khan and Muhammad Raza, “A Restrictive Model (RM) for Detection and Prevention of INVITE Flooding Attack”, (IEEE 978-1-4673-5885-9/13, 2013) [12] Meenakshi Patel, Sanjay Sharma, Sanjay Sharma, “Detection and Prevention of Flooding Attack Using SVM”, (IEEE 978-0-7695-4958-3/13, 2013) [13] Kashif Laeeq,"RFAP, A Preventive Measure against Route Request Flooding Attack in MANETS", IEEE, 2012.

[14] Ms. Neetu Singh Chauhan, Ms. Shweta Yadav, “Flooding Attacks Prevention in MANET”, IJCTEE, 2011 [15] https://www.google.co.in/search?q=mobile+ad+hoc+ne twork&biw=1366&bih=667&tbm=isch&tbo=u&source =univ&sa=X&ved=0ahUKEwicnIWm8KbMAhVHbY4 KHRuAAjAQsAQIKw#imgrc=1aQVBe1kdu9aKM%3 A [16] Taranpreet Kaur , Amanjot singh Toor , Krishan kumar Saluja , “Defending MANET’s against Flooding Attacks for Military Applications under Group Mobility” , IEEE, 2014.

All rights reserved by www.ijsrd.com

780