Privacy preserving and truthful detection of packet

#13/ 19, 1st Floor, Municipal Colony, Kangayanellore Road, Gandhi Nagar, vellore – 6.
Off: 0416-2247353 / 6066663 Mo: +91 9500218218 /8870603602,
Project Titles: http://shakastech.weebly.com/2015-2016-titles
Website: www.shakastech.com, Email - id: shakastech@gmail.com, info@shakastech.com
PRIVACY-PRESERVING AND TRUTHFUL DETECTION OF PACKET
DROPPING ATTACKS IN WIRELESS AD HOC NETWORKS
ABSTRACT
Link error and malicious packet dropping are two sources for packet losses in multi-hop
wireless ad hoc network. While observing a sequence of packet losses in the network, whether
the losses are caused by link errors only, or by the combined effect of link errors and malicious
drop are to be identified. In the insider-attack case, whereby malicious nodes that are part of the
route xploit their knowledge of the communication context to selectively drop a small amount of
packets critical to the network performance. Because the packet dropping rate in this case is
comparable to the channel error rate, conventional algorithms that are based on detecting the
packet loss rate cannot achieve satisfactory detection accuracy. To improve the detection
accuracy, the correlations between lost packets is identified. Homomorphism linear authenticator
(HLA) based public auditing architecture is developed that allows the detector to verify the
truthfulness of the packet loss information reported by nodes. This construction is privacy
preserving, collusion proof, and incurs low communication and storage overheads. To reduce the
computation overhead of the baseline scheme, a packet-block based mechanism is also proposed,
which allows one to trade detection accuracy for lower computation complexity.

Off: 0416-2247353 / 6066663 Mo: +91 9500218218 /8870603602,
INTRODUCTION
In a multi-hop wireless network, nodes cooperate in relaying/ routing traffic. An
adversary can exploit this cooperative nature to launch attacks. For example, the adversary may
first pretend to be a cooperative node in the route discovery process. Once being included in a
route, the adversary starts dropping packets. In the most severe form, the malicious node simply
stops forwarding every packet received from upstream nodes, completely disrupting the path
between the source and the destination. Eventually, such a severe Denial-of-Service (DoS) attack
can paralyze the network by partitioning its topology. Even though persistent packet dropping
can effectively degrade the performance of the network, from the attacker’s standpoint such an
“always-on” attack has its disadvantages.
PROBLEM DEFINITION
Detecting selective packet-dropping attacks is extremely challenging in a highly dynamic
wireless environment. The difficulty comes from the requirement that we need to not only detect
the place (or hop) where the packet is dropped, but also identify whether the drop is intentional
or unintentional. Specifically, due to the open nature of wireless medium, a packet drop in the
network could be caused by harsh channel conditions e.g., fading, noise, and interference, link
errors, or by the insider attacker. In an open wireless environment, link errors are quite
significant, and may not be significantly smaller than the packet dropping rate of the insider
attacker. So, the insider attacker can camouflage under the background of harsh channel
conditions. In this case, just by observing the packet loss rate is not enough to accurately identify
the exact cause of a packet loss.

Off: 0416-2247353 / 6066663 Mo: +91 9500218218 /8870603602,
EXISTING SYSTEM
The related work can be classified into the following two categories.
_ High malicious dropping rates The first category aims at high malicious dropping rates,
where most (or all) lost packets are caused by malicious dropping. In this case, the impact of link
errors is ignored. Most related work falls into this category. Based on the methodology used to
identify the attacking nodes, these works can be further classified into four subcategories.
 Credit systems
A credit system provides an incentive for cooperation. A node receives credit by relaying packets
for others, and uses its credit to send its own packets. As a result, a maliciously node that
continuous to drop packets will eventually deplete its credit, and will not be able to send its own
traffic.
 Reputation systems
A reputation system relies on neighbors to monitor and identify misbehaving nodes. A node with
a high packet dropping rate is given a bad reputation by its neighbors. This reputation
information is propagated periodically throughout the network and is used as an important metric
in selecting routes. Consequently, a malicious node will be excluded from any route.
 End-to end or hop-to-hop acknowledgements
To directly locate the hops where packets are lost. A hop of high packet loss rate will be
excluded from the route.
 Cryptographic methods
Bloom filters used to construct proofs for the forwarding of packets at each node. By examining
the relayed packets at successive hops along a route, one can identify suspicious hops that exhibit
high packet loss rates.
_ Number of maliciously dropped packets is significantly higher than that caused by link
errors

Off: 0416-2247353 / 6066663 Mo: +91 9500218218 /8870603602,
The second category targets the scenario where the number of maliciously dropped packets is
significantly higher than that caused by link errors, but the impact of link errors is non-
negligible.
Disadvantages
_ Most of the related works assumes that malicious dropping is the only source of packet loss.
_ For the credit-system-based method, a malicious node may still receive enough credits by
forwarding most of the packets it receives from upstream nodes.
_ In the reputation-based approach, the malicious node can maintain a reasonably good
reputation by forwarding most of the packets to the next hop.
_ While the Bloom-filter scheme is able to provide a packet forwarding proof, the correctness of
the proof is probabilistic and it may contain errors.
_ As for the acknowledgement-based method and all the mechanisms in the second category,
merely counting the number of lost packets does not give a sufficient ground to detect the real
culprit that is causing packet losses.
PROPOSED SYSTEM
_ To develop an accurate algorithm for detecting selective packet drops made by insider
attackers.
_ This algorithm also provides a truthful and publicly verifiable decision statistics as a proof to
support the detection decision.
_ The high detection accuracy is achieved by exploiting the correlations between the positions of
lost packets, as calculated from the auto-correlation function (ACF) of the packet-loss bitmap–a
bitmap describing the lost/received status of each packet in a sequence of consecutive packet
transmissions.

Off: 0416-2247353 / 6066663 Mo: +91 9500218218 /8870603602,
_ By detecting the correlations between lost packets, one can decide whether the packet loss is
purely due to regular link errors, or is a combined effect of link error and malicious drop.
_ The main challenge in our mechanism lies in how to guarantee that the packet-loss bitmaps
reported by individual nodes along the route are truthful, i.e., reflect the actual status of each
packet transmission.
_ Such truthfulness is essential for correct calculation of the correlation between lost packets,
this can be achieved by some auditing.
_ Considering that a typical wireless device is resource-constrained, we also require that a user
should be able to delegate the burden of auditing and detection to some public server to save its
own resources.
_ Public-auditing problem is constructed based on the homomorphism linear authenticator
(HLA) cryptographic primitive, which is basically a signature scheme widely used in cloud
computing and storage server systems to provide a proof of storage from the server to entrusting
clients.
Advantages
_ High detection accuracy
_ Privacy-preserving: the public auditor should not be able to decern the content of a packet
delivered on the route through the auditing information submitted by individual hops
_ incurs low communication and storage overheads at intermediate nodes
HARDWARE REQUIREMENTS
Processor : Any Processor above 500 MHz
Ram : 128Mb.
Hard Disk : 10 GB.
Compact Disk : 650 MB

Off: 0416-2247353 / 6066663 Mo: +91 9500218218 /8870603602,
Input device : Standard Keyboard and Mouse.
Output device : VGA and High Resolution Monitor.
SOFTWARE SPECIFICATION
Operating System : Windows Family.
Programming Language : JDK 1.5 or higher
Database : MySQL 5.0

Privacy preserving and truthful detection of packet

More Related Content

Similar to Privacy preserving and truthful detection of packet (20)

More from Shakas Technologies (20)

Recently uploaded (20)

Privacy preserving and truthful detection of packet