Different Types of Attacks on Multicast in Mobile Ad Hoc Networks Reporter : Claudia 12011/12/ /06 $20.00 © 2006 IEEE

Outline  Basic knowledge  Mobile Ad Hoc Networks (MANET)  Ad hoc On Demand Distance Vector (AODV) protocol  MANET  Rushing attack  Blackhole attack  Neighbor attack  Jellyfish attack  Summary  Reference 22011/12/ /06 $20.00 © 2006 IEEE

Mobile Ad Hoc Networks (MANET)  Def. A self-configuring infrastructureless network of mobile devices connected by wireless links.  Characteristic  Each device in a MANET is free to move independently in any direction, and will therefore change its links to other devices frequently.  Each device must forward traffic unrelated to its own use, and therefore be a router /12/ /06 $20.00 © 2006 IEEE

Ad hoc On Demand Distance Vector (AODV) protocol  On Demand routing.  Distance Vector.  Hello messages.  Route discovery.  Sequence number. 2011/12/ /06 $20.00 © 2006 IEEE

Ad hoc On Demand Distance Vector (AODV) protocol (cont.)  Route discovery(Example from reference [5].) 2011/12/ /06 $20.00 © 2006 IEEE5

Ad hoc On Demand Distance Vector (AODV) protocol (cont.)  Route discovery(Example from reference [5].) 2011/12/ /06 $20.00 © 2006 IEEE6

Ad hoc On Demand Distance Vector (AODV) protocol (cont.)  Route discovery(Example from reference [5].) 2011/12/ /06 $20.00 © 2006 IEEE7

Ad hoc On Demand Distance Vector (AODV) protocol (cont.)  Route discovery(Example from reference [5].) 2011/12/ /06 $20.00 © 2006 IEEE8

Ad hoc On Demand Distance Vector (AODV) protocol (cont.)  Route discovery(Example from reference [5].) 2011/12/ /06 $20.00 © 2006 IEEE9

Rushing attack  By skipping some of the routing processes, can quickly forward these packets and make other router discard the normally-process packets.  Cause the attacker is able to gain access to the forwarding group. 2011/12/ /06 $20.00 © 2006 IEEE

Rushing attack (cont.)  Picture from reference [1]. 2011/12/ /06 $20.00 © 2006 IEEE11

Blackhole attack  Using rushing attack at first.  Drops all of data packets it receives.  Cause very low packet delivery ratio. 2011/12/ /06 $20.00 © 2006 IEEE

Blackhole attack(cont.)  Picture from reference [1]. 2011/12/ /06 $20.00 © 2006 IEEE13

Jellyfish attack  Using rushing attack at first.  Delays data packets unnecessarily for some amount of time before forwarding them.  Results in significantly high end-to-end delay and delay jitter. 2011/12/ /06 $20.00 © 2006 IEEE

Jellyfish attack(cont.)  Picture from reference [1]. 2011/12/ /06 $20.00 © 2006 IEEE15

Jellyfish attack(cont.)  Picture from reference [1]. 2011/12/ /06 $20.00 © 2006 IEEE16

Neighbor attack  Using rushing attack at first.  Attacker simply forwards the packet without recording its ID in the packet.  Resulting in a disrupted route. 2011/12/ /06 $20.00 © 2006 IEEE

Summary  Protocols that use the duplicate suppression mechanism such as ODMRP, ADMR are very vulnerable to rushing attacks.  Jellyfish attacks do not affect the packet delivery ratio or the throughput of a multicast group, but they severely increase the packet end-to-end delay and delay jitter.  The operations of blackhole attacks and neighbor attacks are different, they both cause the same degree of damage to the performance of a multicast group in terms of packer loss rate. 2011/12/ /06 $20.00 © 2006 IEEE18

Reference  [1] = [1] =  [2] [2]  [3] rotocols [3] rotocols  [4] [4]  [5] [5] /12/ /06 $20.00 © 2006 IEEE