| 摘要: |
| 分析了移动自组网(mobile ad hoc network,简称MANET)暴露拓扑带来的安全问题,提出了一种拓扑隐藏的安全多路径路由协议.在路由发现过程中,不在路由包中携带任何路径信息,从而有效隐藏网络拓扑.通过按需的邻居发现进行身份认证并建立路由表项,最终采用排除节点的方法实现多路径的选取;在路由维护过程中,设计了专门的错误发现机制以检验所选路径的有效性和安全性.该协议综合考虑时间因素和路径长度因素,实现了安全的最短路径确定.安全分析表明,该方案可以抵御黑洞攻击、虫洞攻击、rushing 攻击和sy |
| 关键词: 拓扑隐藏 无线自组网 安全路由 多路径路由 最短路径 |
| DOI：10.3724/SP.J.1001.2011.03801 |
| 分类号: |
| 基金项目:国家自然科学基金(60803139); 国家科技支撑计划(2008BAH37B07) |
|
| Topology-Hiding Secure Multipath Routing Protocol for MANET |
|
HU Qi1,2, ZHANG Jiao1,2, ZHANG Yu-Jun1, LI Zhong-Cheng1
|
|
1.Network Technology Research Center, Institute of Computing Technology, The Chinese Academy of Sciences, Beijing 100190, China;2.School of Information Science and Engineering, Graduate University, The Chinese Academy of Sciences, Beijing 100049, China
|
| Abstract: |
| This paper provides a detailed analysis on the threats of topology-exposure in Mobile Ad Hoc Network (MANET) and proposes a secure topology-hiding multipath routing protocol based on the analysis. In Route Discovery, the new protocol exposes no routing information in packets to hide the network topology and adopts a node-excluded mechanism to find multiple paths. During this process, this protocol implements on-demand Neighbor Discovery to verify node identities. In Route Maintenance, a fault detection mechanism is designed to provide assurance that the selected paths are available and secure. Considering the factors of both reaction time and the path length, the scheme aims to find the shortest secure path. The security analysis shows that this scheme can resist the black hole attack, the wormhole attack, the rushing attack, the sybil attack, and other types of common attacks. Through extensive simulations, results demonstrate that this approach can find many more active paths than SRP without bringing negative influences into the normal scenario. Furthermore, this solution largely improves the packet delivery ratio in the black hole attack scenario at an acceptable cost. |
| Key words: topology-hiding mobile ad hoc network routing security multipath routing shortest path |
