Research And Simulation On Wormhole Attack Detection Algorithm In Space Information Networks

Space information network is a kind of comprehensive heterogeneous network. It can be used in many applications and it has a very important strategic significance. Space information network has many characteristics that make it vulnerable to various kinds of attacks, such as node diversity, exposed to the space environment and wireless communication. Among the attacks, wormhole attack is a severe form of attacks against routing protocols. It can be devided into two types which are obvious wormhole and hidden wormhole according to the form of the attacker. The wormhole attack is easy to launch, tough to detect and has a huge destructiveness. As a result, the research on wormhole attack detection algorithm in space information network is of great significance.This thesis proposes a wormhole attack detection algorithm based on time delay and abnormal topology in space information network. The algorithm is mainly composed of three phases:triggering, detection and response. It triggers detection algorithm when node finds suspicious link with abnormal round trip time in the process of route discovery or neighbour establishment. The detection phase includes three parts:detect suspicious neighbors, judge malicious nodes and find abnormal topology. Firstly, node uses round trip time to detect one-hop suspicious neighbors and two-hop suspicious neighbors. Secondly, node uses topological features to confirm. It uses the number of same neighbor between two neighbors to judge obvious wormhole attack. It uses the number of nodes which are mutually non-one-hop neighbors in the intersection of the two nodes which are two-hop neighbors, and the number of same true neighbor between two neighbors to judge hidden wormhole. It uses the virtual topology and link establishment conditions between satellites to judge wormhole attack in satellite network. In the response phase, to use the way of sending warning messages to isolate false neighbors or malicious nodes to ensure the security of network.This thesis uses the network simulation software NS2 to evaluate the proposed algorithm and analyse the performance of the detection algorithm. The simulation results show that the proposed algorithm not only can detect both obvious wormhole and hidden wormhole but also has high detection rate and a low false positive rate.