Black hole attack detection and tracking method based on suspicion accumulation

Abstract

The invention belongs to the field of mobile ad hoc network routing security, and discloses a black hole attack detection and tracking method based on doubtful accumulation. According to the method, in a detection period, a passive monitoring mode is adopted, a node detects whether current topology update meets a suspicious condition, and if a data packet of the topology update meets the suspicious condition, the node adds a IV-type suspicious degree to a reputation registration table corresponding to the suspicious node; The node monitors the packet loss rate in each routing path, and triggers active detection if the packet loss rate exceeds the threshold value; an active detection mode is aodpted to detect suspicious behaviors so as to determine a correspondingly increased doubtful value, and performing weighted calculation on credit changes at different moments according to a forgetting factor so as to obtain a final doubtful value; And according to the final doubtful value of the suspicious node, the network control station determines whether the suspicious node is a malicious node through analysis, and once the suspicious node is confirmed to be the malicious node, the networkcontrol station broadcasts the whole network so as to isolate the malicious node from the whole network.

Description

technical field [0001] The invention belongs to the field of mobile ad hoc network (Mobile Ad-hoc Networks, MANET) routing security, and relates to a black hole attack detection and tracking method based on accumulation of suspicion under network attack using table-driven routing equipment. Background technique [0002] With the advancement of science and technology, the volume of wireless communication equipment is getting smaller and smaller, the communication range is gradually increasing, and the communication quality is gradually increasing. The network built by multiple wireless communication equipment is called a wireless ad hoc network. The wireless ad-hoc network is self-organized through several parallel wireless communication devices, and each device is also responsible for relaying the business data of other nodes in the process of sending its own business data. The most classic application of wireless ad hoc network is the tactical mobile ad hoc network composed...

AI Technical Summary

Problems solved by technology

This algorithm does not take into account the characteristics of intense topology changes and complex channel conditions in ad hoc networks, and the algorithm does not give a specific technical means to achieve detection

[0009] At present, most of the research is only to detect a certain malicious behavior of black hole attack, and lacks comprehensive considerations from various aspects, so more frequent misjudgments will occur

Images