Abstract:Network coding has been shown to be an effective approach to improve the wireless system performance. However, many security issues impede its wide deployment in practice. Besides the well-studied pollution attacks, there is another severe threat, that of wormhole attacks, which undermines the performance gain of network coding. Since the underlying characteristics of network coding systems are distinctly different from traditional wireless networks, the impact of wormhole attacks and countermeasures are generally unknown. In this paper, we quantify wormholes' devastating harmful impact on network coding system performance through experiments. We first propose a centralized algorithm to detect wormholes and show its correctness rigorously. For the distributed wireless network, we propose DAWN, a Distributed detection Algorithm against Wormhole in wireless Network coding systems, by exploring the change of the flow directions of the innovative packets caused by wormholes. We rigorously prove that DAWN guarantees a good lower bound of successful detection rate. We perform analysis on the resistance of DAWN against collusion attacks. We find that the robustness depends on the node density in the network, and prove a necessary condition to achieve collusion-resistance. DAWN does not rely on any location information, global synchronization assumptions or special hardware/middleware. It is only based on the local information that can be obtained from regular network coding protocols, and thus the overhead of our algorithms is tolerable. Extensive experimental results have verified the effectiveness and the efficiency of DAWN.

Correlation based analysis of spreading Codered worms

Research of Characteristics of Worm Traffic

Worm Intrusion Alarm Modeling Based on Network Traffic Character

Cooperation System of Worm Detection and Quarantine in Real Time

Detecting Randomly Scanning Worms Based on Heavy-Tailed Property

Worm traffic modeling for network performance analysis

Research and Development of Worm Detection Technologies

The multi-fractal nature of worm and normal traffic at individual source level

Design and Implementation of Network Worm Detection System for Internal Network

Study on Event-Sequence Based Worm Behavior Analysis in Internet

An Agent-Oriented Network Worm Defense System based on Optimized Path

Analysis Algorithm for the Worm Network Behavior Based on Event Sequence

Wormhole Attack Detection Algorithms in Wireless Network Coding Systems

Worm detection technology research of net-flow dynamic critical line established based on statistical analytic method

Analysis of Abnormalities of Worm Traffic for Obtaining Worm Detection Vectors

A Coordinated Worm Detection Method Based on Local Nets

Learning the Propagation of Worms in Wireless Sensor Networks

Comprehensive analysis of a stochastic wireless sensor network motivated by Black-Karasinski process

Research of Internet Worm Infection Probability Estimation Based on Comprehensive Analysis of Net-Flow and Packets

An Investigation on Instant Messaging Worm Based on Complex Network Theory

Research of Worm-Propagation Prediction Based on Stochastic Experiment