A Specification-Based Intrusion Detection Model for Wireless Ad Hoc Networks
Hsiao‐Ching Lin, Ming-Kung Sun, Han-Wei Huang, Chinyang Henry Tseng, Hui‐Tang Lin · 2012
Mobile ad hoc networks (MANET) have the properties of open medium and decentralized structure, so malicious nodes can easily attack MANET nodes. Furthermore, it is more difficult to establish a protection mechanism on a dynamic topology than a fixed one. In this paper, we propose a specification-based intrusion detection model (SIDM) with the concept of previous two forwarders (PTF) which utilizes the previous hop routing messages to assure the integrity of the routing message. As a result, all vulnerable message fields that could be tampered with during transmission are protected by our method. The proposed SIDM is lightweight and deployable in a distributed environment. By employing the designed idea into the AODV routing protocol, the experimental results demonstrate suitable performance in MANET.