Secure Routing for Mobile Ad hoc Networks

Panagiotis Papadimitratos,Zygmunt J. Haas

2024-03-01

Abstract:The emergence of the Mobile Ad Hoc Networking (MANET) technology advocates self-organized wireless interconnection of communication devices that would either extend or operate in concert with the wired networking infrastructure or, possibly, evolve to autonomous networks. In either case, the proliferation of MANET-based applications depends on a multitude of factors, with trustworthiness being one of the primary challenges to be met. Despite the existence of well-known security mechanisms, additional vulnerabilities and features pertinent to this new networking paradigm might render such traditional solutions inapplicable. In particular, the absence of a central authorization facility in an open and distributed communication environment is a major challenge, especially due to the need for cooperative network operation. In particular, in MANET, any node may compromise the routing protocol functionality by disrupting the route discovery process. In this paper, we present a route discovery protocol that mitigates the detrimental effects of such malicious behavior, as to provide correct connectivity information. Our protocol guarantees that fabricated, compromised, or replayed route replies would either be rejected or never reach back the querying node. Furthermore, the protocol responsiveness is safeguarded under different types of attacks that exploit the routing protocol itself. The sole requirement of the proposed scheme is the existence of a security association between the node initiating the query and the sought destination. Specifically, no assumption is made regarding the intermediate nodes, which may exhibit arbitrary and malicious behavior. The scheme is robust in the presence of a number of non-colluding nodes, and provides accurate routing information in a timely manner.

Cryptography and Security

What problem does this paper attempt to address?

This paper attempts to address the problem of achieving secure routing in Mobile Ad Hoc Networks (MANETs). Specifically, the authors focus on designing a route discovery protocol that can effectively resist attacks on the route discovery process by malicious nodes, ensuring the correct transmission of connection information without relying on fixed infrastructure and central authorization facilities. The paper proposes a Secure Routing Protocol (SRP) aimed at ensuring the correctness and timeliness of route replies, providing accurate topology information even in the presence of malicious nodes in the network.

### Main Issues:
1. **Lack of Fixed Infrastructure**: There is no fixed infrastructure in MANETs to support specific network functions such as routing, naming services, certification authorities, etc.
2. **Presence of Malicious Nodes**: Any node can disrupt network operations by compromising the route discovery process, such as by forging, tampering with, or replaying route replies.
3. **Lack of Trust Relationships**: In MANETs, it cannot be assumed that there are pre-established trust relationships between all nodes, as nodes can freely join and leave the network.
4. **Balance Between Performance and Security**: It is necessary to minimize delays and transmission overhead in the route discovery process while ensuring security.

### Solutions:
- **Secure Association**: Only requires a secure association between the querying node and the target node, without requiring intermediate nodes to perform complex encryption verification.
- **Message Authentication Code (MAC)**: Uses a shared key to generate a message authentication code to ensure the integrity and authenticity of route requests and replies.
- **Path Verification**: Ensures that the received routing information is correct by verifying the content and geometry of the route reply.
- **Attack Resistance Mechanisms**: Various mechanisms are designed to resist different types of attacks, including Denial of Service (DoS) attacks and route information tampering attacks.

### Goals:
- **Provide Correct Connection Information**: Ensures that the querying node can obtain accurate network topology information.
- **Timely Response**: Quickly establishes correct routes even in the presence of malicious nodes.
- **Reduce Overhead**: Minimizes transmission and processing overhead in the route discovery process.

Through these methods, the paper aims to enhance the security and reliability of MANETs, making them more widely usable in various application scenarios.