Defense Against Packet Injection in Ad Hoc Networks

Publication Type

Journal Article

Publication Date

2007

Abstract

Wireless ad hoc networks have very limited network resources and are thus susceptible to attacks that focus on resource exhaustion, such as the injection of junk packets. These attacks cause serious denial-of-service via wireless channel contention and network congestion. Although ad hoc network security has been extensively studied, most previous work focuses on secure routing, but cannot prevent attackers from injecting a large number of junk data packets into a route that has been established. We propose an on-demand hop-by-hop source authentication protocol, namely Source Authentication Forwarding (SAF), to defend against this type of packet injection attacks. The protocol can either immediately filter out injected junk packets with very high probability or expose the true identity of an injector. Unlike other forwarding defences, this protocol is designed to fit in the unreliable environment of ad hoc networks and incurs lightweight overhead in communication and computation.

Keywords

packet injection, source authentication, secure forwarding, denial of service, DoS attacks, ad hoc networks, wireless networks, security, junk data packets

Discipline

Computer Sciences | Management Information Systems

Research Areas

Information Systems and Management

Publication

International Journal of Security and Networks

Volume

2

Issue

1/2

First Page

154

Last Page

169

ISSN

1747-8405

Identifier

10.1504/IJSN.2007.012832

Publisher

InderScience

Additional URL

http://dx.doi.org/10.1504/IJSN.2007.012832

Link to Full Text

Share

COinS