GeoSec: quarantine zones for mobile ad hoc networks
André König, Matthias Hollick, Tronje Krop, Ralf Steinmetz · Security and Communication Networks · 2008
Abstract With their wireless and infrastructureless nature, mobile ad hoc networks offer new possibilities for communication, but also new possibilities for attacks. An intrusion detection system combined with intrusion response mechanisms is a promising approach which mitigates the effects of attacks, but cannot be taken directly from wired or infrastructure‐based environments. In this paper, we propose an intrusion response mechanism for mobile ad hoc networks that excludes detected adversaries from the network based on their geographical position. To this end, we establish geographical quarantine zones, which block communication around misbehaving nodes. Thus, we depart from the assumption that attacks can be uniquely bound to addresses. Without loss of generality, we show how our approach can be used together with the AODV routing protocol to provide an intrusion response to a combination of Blackhole and Sybil attacks. In a series of simulation studies, we compare our approach with a ‘traditional’, address‐based intrusion response strategy. Copyright © 2008 John Wiley & Sons, Ltd.