The Research Of Intrusion Detection For OLSR Protocol In Wireless Mesh Networks

As the technology of wireless network advances and the demand for wireless networks increases quickly, the original wireless network cannot meet the need of users, a new wireless network - Wireless Mesh Network has become the focus of attention. Wireless Mesh Network is a high-capacity, high-speed, distributed network which can provide users with anytime, anywhere network services. The backbone of Wireless Mesh Networks access to the Internet through gateway and the Client access to the Wireless Mesh Network through the mesh router. It provides the perfect solution for "Last kilometer" of the Internet.Wireless Mesh Network not only has the characteristics of the other wireless network but also some new characteristics such as self-organization, multi-hop and collaboration. It is because of the existence of these features, make the wireless Mesh network cannot be compared with the other wireless network in advantages. But in the view of security, these characteristics bring a lot of security threats, and routing attacks is one of main threats of Wireless Mesh Network. Therefore, it is significant to deploy an effective intrusion detection system for strengthening the security of Wireless Mesh Network.OLSR routing protocol is one of the recommended routing protocol in 802.11s standard and is a typical proactive routing protocol. It can adapt to specific network environment of Wireless Mesh Network. Therefore, we design a distributed intrusion detection system to detect security threats of OLSR routing protocol in this paper. Including the following work.1. Analyzed of the OLSR routing protocol, Summarized the existing security threats of OLSR routing protocol, Proposed four possible attacks to the OLSR routing protocol messages.2. In order to overcome the possible attacks in OLSR routing protocol, we designed a distributed intrusion detection system for Wireless Mesh Network, including routing behavior detection module and forward consistency detection module. Routing behavior detection module take charge of comparing whether the topology information taken in the routing message is consistent with the actual network's topology.In order to make the intrusion detection system have enough topology of two-hop Neighbor nodes, we designed the detection Information exchange mechanism. Forward consistency detection module takes charge of detecting whether the forwarded routing messages have been interpolated. Forward consistency detection module compares the Message Authentication Code of forwarder which is generated by Hash and HMAC with the received routing messages to detect whether the routing message have be interpolated.3. We test this proposed Intrusion detection system in the simulation environment of Ubuntu9.10 and NS2.34. The results showed that this Intrusion detection system can be adequate for Wireless Mesh Network with higher attack detection rate and lower resource utilization rate.