Routing Protocols Security in Adhoc Networks

1
?? ??? ??? ??????? ????? ???? ??????? ??????
??? ??????? ??????? ????? ??? ????? ?????
????????? ???????? ?? ???? ??? ??????? Routing
Protocols Security in Ad-hoc Networks ?????
???? http//ee.sharif.edu/farhat
2
??? ?????

• ??????? ???? ??? ???????
• ????????? ???? ??? ???????
• ????? ?? ?? ????? ???? ??? ???????
• ????? ?????? ??? ?? ???? ??? ???????
• ????? ???? ?? ???? ??? ???????
• ?????? ??? AODV? DSR? ARAN? ARIADNE ? SMR
• ?????? ???? ELMAR
• ?????? ???? SELMAR
• ?????? ?????? ? ????? ?????? ??
• ????? ???? ? ?????????
• ?????

3
???????

• ?????? ?? ???? ????? ????? ?????? ????????
  ????????
• ?????? (?? ???? ?? ???????) ? ?????? ???? ?? ???
  ??

4
????? ?? ????? ????????
5
????????

• ???? ??? ??? ????? (Tactical Networks)
• ??????? ????? ???????
• ?????? ? ??????? ??????
• ???? ??? ???? (Sensor Networks)
• ?????? ?? ?? ????? ???? ???? ??? ???? ??????? ???
  (real-time) ?? ????? ?????? ???? ????? ??????
• ????? ??? ???????? ???? ???? ??? ???? ????? ???
• ????? ??? ????????? (Emergency Services)
• ?????? ????? ? ??? ?????
• ????? ??? ???? ???????? ?? ????? ????? ? ???
• ???? ??? ????? (Commercial Environments)
• ????? ?????????? ???? (?????? ?? ???? ??????????
  ?? ?? ??? ?? ?? ????)

6
????????

• ???? ??? ????? ? ????? (Home and Enterprise
  Networking)
• ???? ???? ?? ???
• ???? ???? ?? ???
• ????????? ?????? (Educational Applications)
• ???? ??? ??? ?????
• ???? ??? ??????? ?????
• ?????? (Entertainment)
• ???? ??? ?????????
• ????? ??? ?????
• ????? ??? ???? ?? ???? (Location-Aware Services)
• ????? ??? ????? ????? (???????? ? ???????)

7
????? ?? ?? ?????

• ????? ??? ???? ???? ????? ???? ????? ????
• ??? (Broadcast)
• ??????? (Forwarding)
• ???????? (Routing)
• ??? ???? (Route Discovery)
• ??????? ???? (Route Maintenance)
• ??????? ???? ?????? ???? ?? ????? ??? ??
• ??? ???? ?????? ???? ?? ??? ??? ???? ???? ?????
  ????? ????
• ?????? ????? ?????? ??? ???? ??? ????
• (?? ???? ????? ???? ???????? ????)
• ??????? ???? ???????? ? ???????? ?? ?????? ??
  ???? ??? ????

8
????? ?? ?? ?????

• ???? ?? ???? ????? ???? ?????? ???? (????? ????
  ??? ?????)
• ????? ???? ??? ?? ?? ??????
• ??????? ?? ????? ?????
• ?????? ?? ???????? (Selfishness) ? ????? ????????
• ????? ????? ?????? ??? ??
• ?? ???? ???? ??????
• ??? ??? ????? ?????? (Cooperative Security)
• ??????? ?????? ???? ????
• ????? ???? ? ??? ????? ???? ??? ??? ???? ????? ??
  ??????
• ????? ??????? ????? ??? ??? ??

9
????? ?????? ???

• ????? ???? (Active)
• ?????? ????? ????? ???? ??? ??????? (malicious)
  ???? ????? ?????
• ??? ??? ? ?????? ???? ?? ?? ??? ?????? ?? ???
  ??? ????
• ????? ???? (modification)
• ??? ???? ??? (impersonation)
• ??? ???? (fabrication)
• ????? ??????? (Passive)
• ?????? ??? ??????? (selfish) ?? ?????? ?? ???
  ????? ?????
• ??? ???? ?????? ???? ????? ????

10
????? ?????? ???

• ????? ????? ????? (Denial of Service)
• ????? ????? ????????
• ????? ???? ???? ???? ?? ???? ??? ???? ?????
• ????? ???? ?????
• ????? ???? ???? ????? ????? ???? ?????? ????
  ????????? ?? ????? ??? ??
• ???? ???????? (Black-hole)
• ?????? ????? ?????? (????????? ????) ???? ?????
• ??? ?????? ???? ?? ??? ???
• ??? ????? ?????? (??? ???? ??)

11
????? ?????? ???

• ???? ???? ??????? (Grey-hole)
• ?????? ????? ?????? (????????? ????) ???? ?????
• ??? ?????? ???? ?? ??? ???
• ??? ????? ?????? ???? (???? ???? ??? ????)
• ??????? ???? ??? ???????? ???? ???? ????
• ???? ?????? ?????? (Gratuitous Detour)
• ?????? ??? ??? ????? ?? ??????? ????????
• ?????? ?????? ???? ???? ????
• ???? ???? (Rushing)
• ??? ???? ????? ?????? ??????? ???? ?? ????? ????
• ?????? ??? ????? ??? ??????? ???? ?? ??? ?????
  ???? ??? ??

12
???? ???? ????

• ???? ???? ???? ?? ????? ?? ???? ???????
• ????? ?? ???? (?????? ????? ????? VPN) ???? ??
  ????? ????
• ????? ????? ???? ????? ???? ???? ???? ??
• ????? ???? ???? ????? ?? ??? ????????

13
????? ??? ??????

• ?????? (Availability)
• ???????? (Confidentiality)
• ????? ????? (Authentication)
• ???????? (Integrity)
• ????? ?????? (Access Control)
• ???????????? (Nonrepudiation)

14
????? ????

• ????? ??????? ???? ?????
• ??? ????? ????? ???? ????? ??????? ??
• ??????? ?? ???? SUCV ?? ???? ????? ???? ?????
• ??????? ?? ?????? Diffie-Hellman ??? ?? ?????
  ??????? ?????
• ????? ???? ??????? ????? ????? ??? ??? ???? ???
  ?? ???????? ?? ??? ?? ????

15
????? ????

• ???? ????? ???? ??? ??? ??? ????
• ????? ?? ?? ??? CA (Certificate Authority)
• ????????? ?? ??? (???? ? ???? ????? ? ????? CA)
• CA? ???? ?? (??????? ?????)
• ???? ?????? ??? (???? ????) ??? CA ? ??? ????
  ???? ???? ????? ???? ????
• ???? ?????? ??? ?? ???? ???? ???? ????? ????
  ???????
• ??? ??? ????

16
??? ????? ????

• ????? ???? ??????? ????? ????? ???? ??? ??? ?????
• ???? ????? ???? ?????? ???? (CA? ???? ??)
• ????? ??????? ???? ????? ?? ???? ?????? PGP
• ???? ????? ??????? ???? ?????? ???????

17
?????? AODV
18
?????? AODV

• ???? ? ??? ???? ??????? ???? ???? ??? ????
• ?? ??? ?? ?? RReq ?? ???? ?????
• ??? ?????? ???? ????? ???? RReq ?? ??? ??????.
• ??? ?????? ?????
• ??? ?? ???? ????? (Route Table) ???? ???? ?? ??
  ???? ???????? ????? ????? ???? ???? ???? (Route
  Reply Packet) ?? ?? ???? ? ???? ???? ???????.
• ??? ?? Route Table?? ???? ???? ?? ?? ???? ??????
  ?????
• ?????? ??????? Hop ??? ?????? ???? RReq ?????
  ??????? ???? ???? ???????? ?????

19
ARANAuthenticated Routing for Ad-hoc Networks

• ??????? ?? ???????? ?????????
• ???????? ?? ???? ?????? AODV
• ????????? ???? ??? ???? ???? ???? (CA) ???? ??
  ???
• ???? IP ?? ???? ????? ???? ?????
• ????????? ???? ???????? ?? ???? ???? ???? ????
• ???? ???? ?? ???? ????? ?????
• ????? ???????? ?? ???? ????? ?? ????? ???.

20
ARAN
Route Discovery
Route Maintenance
21
ARIADNEA Secure On-demand Routing Protocol

• ??????? ?? ???????? ??????
• ???????? ?? ????? ?????? DSR
• ???????? ?? ????? ???? ???? ???? ???? ??????
  TESLA
• ????? ????? ???? ??
• ???? ????? ??? ?? ??? ??? ?????
• ???? ????? ??? ??? ??? ????? ?? ????? ???????
• ????? ????? ???? ?????
• ???? ???? ?? ?????? ?? ?? ???? ??? ??? ????? ???!

22
ARIADNERoot Discovery
23
????? ???? (Packet Leashes)

• ???? ???? ?????? ARIADNE
• ????? ????? ??????? ???? ???? ? ???? ???? ????
  ??????
• ????? ???? ???? ???? ???? ?? ???????? ???
• ????? ????
• ????????? ?? ????? (geographical)
• ????? (temporal) ?? ??????? ?? ?????? TESLA

24
TESLA(Timed Efficient Stream Loss-Tolerant
Authentication) with Merkle Hash Tree
25
SMRSplit Multipath Routing

• ?? ????? ?????? DSR
• ????? ??? ???? ?????? ???-????
• ???????? ???? ??? ???????? ??
• ?? ??? ?????? ?? ???? ?
• ??? ???? ?????? ?? ???? ?? ?????!

26
ELMAREfficient Local-Multipath Adaptive Routing

• ????? ???? ??? ??????? ? ???? ????
• ?????? ???? ???? ??? ??????? ? ???? ?? ?? ???
  ?????? ????
• ??????? ????? ????? ?? ?? ???
• ??? ???? ??? ?? ???? ??? ???? ?? ????? ?????
• ????? ?????? ???? ???? ?? ????? ?????? Ack
• ??????? ???? ?? ???? ??????? (??? ?????? Ack)

27
ELMAREfficient Local-Multipath Adaptive Routing
28
ELMAREfficient Local-Multipath Adaptive Routing
29
ELMAREfficient Local-Multipath Adaptive Routing
30
ELMARSelfishness Resilience
31
ELMARSelfishness Resilience
32
ELMARWormhole Attack Resilience
33
?????? PGP
34
SELMARSecure Efficient Local-Multipath Adaptive
Routing

• ??? ?? ?????????? ???? ????? ??? ????
• ???????? ?? ???? ?????? ELMAR
• AODV-flooding? ???? ???? ?????? ???? ???????
• ???????? ?????? ???? ????? ??? ???? ? ???? ??
  ???? ????? ????
• ????? ??????? ???? ??????
• ???? ??????? ?? ???????? ????????

35
SELMARSecure Efficient Local-Multipath Adaptive
Routing

• ????? ???? ????? ??? ??? ??? ????? ?? ???? ?????
  ????
• ????? ????? ????
• ??? ???? ? ???? (????? ????? ?? ?????) ???? ????
  ????
• ??? ??? ????? (????? ?????) ???? ???? ?????
  ?????? ??
• ???? ???? ????? EMAC ?? ?? ?????
• ????? ????? NMAC ?? ?? ?????
• ????? ?????? ????? ???? ?? ???? ?????? Nounce

36
SELMARRoute Discovery (Route Request)
37
SELMARRoute Discovery (Route Reply)
38
?????? ?????? ? ????? ?????? ??
39
????? ????

• ??????? ???? ??? ??????? ?? ????? ?????? ????
  ???.
• ?????? ??? ?? ???????? ??????? ??????? ?? ?????
  ??? ??? ?? ??????.
• ???? ???? ???? ????? ????????? ???? ?? ??? ????
  ?? ???.
• ?????? ??? ??????????? ?? ?????? ?????? ?????
  ?????? ?? ???? ?? ????.
• ?????? ???? SELMAR ?? ????? ????? ?????? ???
  ?????? ???? ????.
• ??? ????? ??? ????? ????? ? ?????? ???? ???? ????!

40
?????????

• ?????? ?????? ??? ????? ??? ?? ??? ????? ? ??????
• ??????? ? ?????? ???? ??? ????? ?????? ???
  ???????? ???
• ???? ????? ???? ???? ?????? ?????? ???????? ???
• ???? ????? ?? ?????? ??? ???? ???? ??? ?? ???
  ???????
• ????? ????? ?????? ???????? ?? ???? ?? ??? ?????
  ????? ? ??????

41
?????

• K. Sanzgiri, B. Dahill, B. N. Levine, C. Shields,
  E. M. Belding-Royer, ARAN A Secure Routing
  Protocol for Ad Hoc Networks, UMass Tech Report
  02-32, 2002
• Y. Hu, D. B. Johnson, A. Perrig, ARIADNE A
  Secure On-Demand Routing Protocol for Ad Hoc
  Networks, in proceedings of MOBICOM 2002
• C. E. Perkins, E. M. Royer, and S. R. Das, Ad-hoc
  On-demand Distance Vector (AODV) routing, IETF
  MANET Group, Jan 2002
• D. B. Johnson, D. A. Maltz, Y. C. Hu, and J. G.
  Jetcheva, The Dynamic Source Routing Protocol for
  Mobile Ad-hoc Networks, IETF MANET Group, Feb
  2002
• S. Lee and M. Gerla, Split Multipath Routing
  with Maximally Disjoint Paths in Ad Hoc
  Networks, Proc. of IEEE ICC, Vol.10,
  pp.3201-3205, May 2001

42
?? ???? ?? ???? ???