Security challenges in mobile ad hoc networks:a survey <s> Denial of service: <s> Existing MANET authentication schemes cannot fully protect nodes from well-known impersonation attacks. Although these schemes cryptographically link an entity to a claimed identity, the actual entity is never linked to the physical node device. However, the link is implicitly assumed. This shortcoming may be easily exploited within a MANET setting, due to the broadcast nature of the access medium. In this paper we propose a multifactor authentication framework that extends the cryptographic link, binding an entity to a physical node device. This is achieved by using two distinct authentication factors; certified keys and certified node characteristics. Although the proposed framework requires additional sensing capabilities from the MANET nodes, it provides the additional confidence level required for node authentication in critical applications. <s> BIB001 </s> Security challenges in mobile ad hoc networks:a survey <s> Denial of service: <s> Impersonation attacks in wireless and mobile networks by professional criminal groups are becoming more sophisticated. We confirm with simple risk analysis that impersonation attacks offer attractive incentives to malicious criminals and should therefore be given highest priority in research studies. We also survey our recent investigations on Radio Frequency Fingerprinting and User Mobility Profiles and discuss details of our methodologies for building enhanced intrusion detection systems for future wireless and mobile networks. <s> BIB002 </s> Security challenges in mobile ad hoc networks:a survey <s> Denial of service: <s> Mobile ad hoc networking (MANET) has become an exciting and important technology in recent years, because of the rapid proliferation of wireless devices. Mobile ad hoc networks is highly vulnerable to attacks due to the open medium, dynamically changing network topology, cooperative algorithms, lack of centralized monitoring and management point. The traditional way of protecting networks with firewalls and encryption software is no longer sufficient and effective for those features. In this paper, we propose a distributed intrusion detection approach based on finish state machine (FSM).A cluster-based detection scheme is presented, where periodically a node is elected as the monitor node for a cluster. These monitor nodes can not only make local intrusion detection decisions, but also cooperatively take part in global intrusion detection. And then we construct the finite state machine (FSM) by the way of manually abstracting the correct behaviours of the node according to the routing protocol of Dynamic Source Routing (DSR). The monitor nodes can verify every node’s behaviour by the FSM, and validly detect real-time attacks without signatures of intrusion or trained data. Compared with the architecture where each node is its own IDS agent, our approach is much more efficient while maintaining the same level of effectiveness. <s> BIB003 </s> Security challenges in mobile ad hoc networks:a survey <s> Denial of service: <s> The growing popularity of wireless ad hoc networks has brought increasing attention to many security issues for such networks. A lot of research has been carried out in the areas of authentication and key management for such networks. However, due to lack of existing standards for such networks, most of the proposed schemes are based on different assumptions and are applicable only in specific environments. Recently Balachandran et al. proposed CRTDH [1], a novel key agreement scheme for group communications in wireless ad hoc networks. The protocol has many desirable properties such as efficient computation of group key and support for high dynamics. However, the protocol does not discuss mutual authentication among the nodes and hence, suffers from two kinds of attacks: man-in-the-middle attack and Least Common Multiple (LCM) attack. This paper identifies the problems with the current CRTDH scheme and discusses these attacks. AUTH-CRTDH, a modified key agreement protocol with authentication capability, is also presented. Results from extensive experiments that were run on the proposed protocol and some other key agreement protocols including CRTDH are also discussed. It can be observed from the experiments that the new scheme is comparable with the CRTDH scheme and better than many other non-authenticated schemes in terms of performance. <s> BIB004 </s> Security challenges in mobile ad hoc networks:a survey <s> Denial of service: <s> Routing scenario in ad hoc networks is different from infrastructure-based wireless networks; since in ad hoc networks each node acts as a router and is responsible for managing topological information and ensuring correct route learning. Although a number of secure routing protocols have been proposed so far, all of them have certain advantages and disadvantages. Hence, security in ad hoc networks is still a contentious area. In this paper we first explore the security problems and attacks in existing routing protocols and then we present the design and analysis of a new secure on-demand routing protocol, called RSRP which confiscates the problems mentioned in the existing protocols. Moreover, unlike Ariadne, RSRP uses a very efficient broadcast authentication mechanism which does not require any clock synchronization and facilitates instant authentication. <s> BIB005 </s> Security challenges in mobile ad hoc networks:a survey <s> Denial of service: <s> Mobile ad-hoc networks (MANETs) are well known to be vulnerable to various attacks, due to features such as lack of centralized control, dynamic topology, limited physical security and energy constrained operations. In this paper we focus on preventing denial-of-service (DoS) attacks. As an example, we consider intruders that can cause DoS by exploiting the route discovery procedure of reactive routing protocols. We show the unsuitability of tools such as control chart, used in statistical process control (SPC), to detect DoS and propose an anomaly-based intrusion detection system that uses a combination of chi-square test & control chart to first detect intrusion and then identify an intruder. When the intruder is isolated from the network we show reduced overhead and increased throughput. Simulation results show that our algorithm performs well at an affordable processing overhead over the range of scenarios tested. <s> BIB006 </s> Security challenges in mobile ad hoc networks:a survey <s> Denial of service: <s> Mobile ad hoc networks are a new wireless networking paradigm for mobile hosts. Unlike traditional mobile wireless networks, ad hoc networks do not rely on any fixed infrastructure. Instead, hosts rely on each other to keep the network connected. The military tactical and other security-sensitive operations are still the main applications of ad hoc networks. One main challenge in design of these networks is their vulnerability to Denial-of-Service (DoS) attacks. In this paper, we consider a particular class of DoS attacks called Jamming. The objective of a jammer is to interfere with legitimate wireless communications. A jammer can achieve this goal by either preventing a real traffic source from sending out a packet, or by preventing the reception of legitimate packets. We propose in this study a new method of detection of such attack by the measurement of error distribution. <s> BIB007 </s> Security challenges in mobile ad hoc networks:a survey <s> Denial of service: <s> Mobile ad hoc networks (MANETs) are dynamic mobile networks that can be formed in the absence of any pre-existing communication infrastructure. MANETs are vulnerable to jamming attack due to their salient characteristics. The objective of a jammer is to interfere with legitimate wireless communications, and to degrade the overall QoS of the network. In this paper, we propose a new method to react at jamming attacks. The military has long dealt with jamming by using frequency-hopping spread spectrum communication. Unlike frequency hopping that takes place at the PHY layer, our purpose takes place at the MAC layer. <s> BIB008 </s> Security challenges in mobile ad hoc networks:a survey <s> Denial of service: <s> Today’s security systems have been drawing great attentions as cryptographic algorithms have gained popularity due to the nature that make them suitable for use in constrained environment such as mobile sensor information applications, where computing resources and power availability are limited. Elliptic curve cryptography (ECC) is one of them, which requires less computational power, communication bandwidth, and memory in comparison with other cryptosystem. In particularly, in order to save pre-computing there is a trend for sensor networks to design a sensor-group-leader rather than every sensor node communicates to the end database, which indicated the needs to prevent from the man-in-the middle attacking. In this paper we first present an algorithm that we called “hidden generation point” ECC protocol to protecting the ECC key exchange system from the man-in-middle attacking in wireless sensor networks. Even though there are other ways to be investigated, which will published in other paper, the major contribution in this paper is showing the hidden generation point” works. Also it is noted that the agent technology provides a method for handling increasing software complexity and supporting rapid and accurate decision making. A multi-agent applying for key exchange is motioned even the further discussed will be presented in another paper as the major task of this paper is presenting “hidden generation point.” <s> BIB009 </s> Security challenges in mobile ad hoc networks:a survey <s> Denial of service: <s> Mobile Ad Hoc Networks are vulnerable to various types of Denial of Service (DoS) attacks for the absence of fixed network infrastructure. The dynamic nature of MANETs makes it susceptible to having their effective operation compromised by a variety of security attacks.. In this paper we present an alternate way to improve on the current Gray Hole/Worm Hole attack scenario and other Man in the Middle attacks to avoid detection and yet effectively drop the data packets. <s> BIB010 </s> Security challenges in mobile ad hoc networks:a survey <s> Denial of service: <s> This paper discusses possible DoS attacks induced by IEEE 802.11 in wireless Ad hoc networks. The protecting flow based solutions are emphatically analyzed with respect to CCA(Colluding adversaries attack) DoS attack at MAC layer. This paper proposes the principles of protecting flow design. By placing protecting flows in different positions, we compared the throughput and delay of these flows being attacked. Simulation results show that the design rule of protecting flow is effective and applicable. <s> BIB011 </s> Security challenges in mobile ad hoc networks:a survey <s> Denial of service: <s> Denial of Service (DoS) attack is a simple form of attack that has significant impact on the legitimate network users in terms of available bandwidth. The purpose of this paper is to detect and identify the attacker who is employing Denial of Service attack to disrupt the network in Mobile Ad-hoc Networks (MANET) using IEEE 802.11 DCF protocols [1][2][3]. The detection process will be examined in a mobile environment with multiple PHY layer techniques (FHSS, DSSS, and OFDM) employing different MAC layer protocols (IEEE 802.11, IEEE 802.11b, and IEEE 802.11g) Attackers manipulate the IEEE 802.11 DCF standards on their machines to illegally increase the probability of successful packet transmission on the expense of the legitimate node's bandwidth. The DoS attacker does not have valid information in the transmitted packets but the attacker's goal is to capture the channel to prevent legitimate users from communicating. DoS attack can be performed and targeted to affect any layer of the OSI layers, in this paper we only deal with attacks on the MAC layer. The theoretical network throughput in terms of maximum number of packets transmitted per second will be derived using two dimensional Markov Chain [4] to determine the network capacity. Solutions of the Markov Chain model will be validated by network simulation [5] to determine the baseline for the maximum achievable throughput in the network under normal conditions where the standards are followed properly. <s> BIB012
In this attack, malicious node prevents other authorized nodes to access network data or services  BIB012  BIB006 BIB011 . Using this attack, a specific node or service will be inaccessible and network resources like bandwidth will be wasted. In addition, packet delay and congestion increases. Jamming attack: Jamming attack is a kind of DOS attack BIB007 . The objective of a jammer is to interfere with legitimate wireless communications. A jammer can achieve this goal by either preventing a real traffic source from sending out a packet, or by preventing the reception of legitimate packets BIB008 . Impersonation Attack: Using this attack, attacker can pretend itself as another node and injects fault information to the network BIB001 BIB001 BIB002 . As MANET has open border and hop-by-hop communications, it's hardly vulnerable against this attack. In some cases even using authentication is useless. Modification Attack: In this attack, malicious nodes sniff the network for a period of time. Then, explore wireless frequency and use it to modify packets   . Man-in-the-middle is a kind of Modification attack. Fabrication Attack: In fabrication attack, malicious node destroys routing table of nodes by injecting fault information BIB003 BIB005  . Malicious node creates fault routing paths. As a result, nodes send their packets in fault routes. Therefore, network resources wasted, packet delivery rate decreased and packet lost will growth. Man-in-the-middle attack: In this attack, malicious node puts itself between source and destination. Then, captures all packets and drops or modifies them BIB009 BIB010 BIB004 . Hop by hop communications are made MANET vulnerable against this attack. Authentication and cryptography are the most effective ways to defeat this attack.