Secure Routing and Intrusion Detection in Ad Hoc Networks

TLDR

Many secure routing and intrusion detection schemes have been proposed for ad hoc networks, yet few have been implemented on small handheld devices. This paper presents a proof‑of‑concept implementation of an AODV‑over‑IPv6 secure routing protocol reinforced by a routing‑protocol‑independent IDS for ad hoc networks. The protocol provides nonrepudiation and authentication without relying on a certificate authority or key distribution center, and the IDS detects and thwarts malicious attacks. The combined mechanisms successfully isolate and deny network resources to malicious nodes in several scenarios, though the authors note limitations and propose future improvements.

Abstract

Numerous schemes have been proposed for secure routing and intrusion detection for ad hoc networks. Yet, little work exists in actually implementing such schemes on small handheld devices. In this paper, we present a proof-of-concept implementation of a secure routing protocol based on AODV over IPv6, further reinforced by a routing protocol independent intrusion detection system (IDS) for ad hoc networks. Security features in the routing protocol include mechanisms for nonrepudiation and authentication, without relying on the availability of a certificate authority (CA) or a key distribution center (KDC). We present the design and implementation details of our system, the practical considerations involved, and how these mechanisms can be used to detect and thwart malicious attacks. We discuss several scenarios where the secure routing and intrusion detection mechanisms isolate and deny network resources to nodes deemed malicious. We also discuss shortcomings in our approach, and conclude with lessons learned and ideas for future work