Research On Wormhole Attack Detection In Ad Hoc Networks

Ad hoc networks are prone to many kind of attacks because of their open network architecture,stringent resource constraints and highly dynamic network topology. Wormhole attack is a severeattack among many attacks in Ad hoc networks. Compared with other attacks, wormhole attackgenerally relays packets at the physical layer. Wormhole attack mainly focuses on routing protocols.Attackers attract network traffic by giving a shortest path to destination, drop or transmit receivedpackets, then launch black hole attacks or denial of service attacks in future to destroy theavailability of networks. As wormhole attack is immune to authentication and cryptography, it iseasy to implement. To avoid problems brought by wormhole, a wormhole detection scheme isneeded, which can mitigate the impact of wormhole in routing discovery process and make sure theavailability of networks.Existing wormhole detection schemes can be divided into two classes: one is selecting atrustable path after routing discovery process; the other is nodes impacted by wormhole do nothingin routing discovery process. Wormhole detection brings high energy and time delay cost, and thelimited resources will quickly run out. Neighbor routing scheme and node characteristics schemeare proposed in this paper, both of them have less energy and time delay cost.Neighbor routing scheme(DWNR), based on DeWorm and E2SIW methods, uses the neighbornumber of routing nodes to get a set of abnormal node and then detect the presence of a wormholeby using the neighbor information of abnormal node after routing process is completed. Thisscheme reduces number of route query. In node characteristics scheme(DWNC), the behavior of anode depends on the status of the node, the status of a node can be set up according to its number ofneighbor node and neighbor node status. Simulation results and theoretical analysis show thatcompared with comparison methods, neighbor routing method can detect wormhole with lessnumber of routing query, a significant reduction of energy and time delay cost. Node characteristicsmethod can detect wormhole efficiently with lower false positives.