A Survey on Security in Wireless Mesh Networks
IETE Technical ReviewPublished 1 January 2010
Ping Yi, Yue Wu, Futai Zou, Ning Liu
Citations47
SJR quartileQ2
SJR score0.67
SNIP1.35
Generate an AI Snapshot to get a quick, structured summary of this paper.
Study Snapshot
ObjectiveStudy objective
MethodsResearch methodology
PopulationPopulation studied
Sample sizeSample sizes
OutcomesStudy outcomes here
ResultsStudy results comes here
LimitationsResearch study limitations comes here
A concise AI-generated summary of the paper will appear here once you click Generate AI Snapshot.
TL;DR
The state of the art in security for wireless mesh networks is surveyed, including solutions to the problems of key management, secure network routing, and intrusion detection and some improvements for these drawbacks are proposed.
Abstract
AbstractWireless mesh networks is a new emerging field with its potential applications in extremely unpredictable and dynamic environments. However, it is particularly vulnerable due to its features of open medium, dynamic changing topology, and cooperative routing algorithms. The article surveys the state of the art in security for wireless mesh networks. First, we analyze various possible threats to security in wireless mesh networks. Second, we introduce some representative solutions to these threats, including solutions to the problems of key management, secure network routing, and intrusion detection. We also provide a comparison and discussion of their respective merits and drawbacks, and propose some improvements for these drawbacks. Finally, we also discuss the remaining challenges in the area.
Keywords
Computer ScienceEngineering
Ad hoc On-Demand Distance Vector (AODV) Routing
10,646 Citations2003Colin Perkins, Elizabeth M. Belding‐Royer +1 more
The Ad hoc On-Demand Distance Vector routing protocol uses destination sequence numbers to ensure loop freedom at all times, avoiding problems (such as "counting to infinity") associated with classical distance vector protocols.
Computer NetworksWireless mesh networks: a survey
3,989 Citations2005Ian F. Akyildiz, Xudong Wang +1 more
This paper presents a detailed study on recent advances and open research issues in WMNs, followed by discussing the critical factors influencing protocol design and exploring the state-of-the-art protocols for WMNs.
IEEE NetworkSecuring ad hoc networks
2,351 Citations1999Lidong Zhou, Zygmunt J. Haas
This article takes advantage of the inherent redundancy in ad hoc networks-multiple routes between nodes-to defend routing against denial-of-service attacks and uses replication and new cryptographic schemes to build a highly secure and highly available key management service, which terms the core of this security framework.
The Dynamic Source Routing Protocol (DSR) for Mobile Ad Hoc Networks for IPv4
1,520 Citations2007David B. Johnson, Y. Charlie Hu +1 more
The Dynamic Source Routing protocol is a simple and efficient routing protocol designed specifically for use in multi-hop wireless ad hoc networks of mobile nodes, designed to work well even with very high rates of mobility.
A secure routing protocol for ad hoc networks
1,420 Citations2003K. Sanzgiri, B. Dahill +3 more
This work details security threats against ad hoc routing protocols, specifically examining AODV and DSR, and proposes a solution to one, the managed-open scenario where no network infrastructure is pre-deployed, but a small amount of prior security coordination is expected.
Ariadne
1,300 Citations2002Yih‐Chun Hu, Adrian Perrig +1 more
This paper presents attacks against routing in ad hoc networks, and the design and performance evaluation of a new secure on-demand ad hoc network routing protocol, called Ariadne, which prevents attackers or compromised nodes from tampering with uncompromising routes consisting of uncompromised nodes.
Secure Routing in Mobile Ad hoc Networks
1,241 Citations2022
Wireless NetworksAriadne: A Secure On-Demand Routing Protocol for Ad Hoc Networks
1,037 Citations2005Yih‐Chun Hu, Adrian Perrig +1 more
IEEE Transactions on Mobile ComputingSelf-organized public-key management for mobile ad hoc networks
826 Citations2003Srđjan Čapkun, Levente Buttyán +1 more
This work proposes a fully self-organized public-key management system that allows users to generate their public-private key pairs, to issue certificates, and to perform authentication regardless of the network partitions and without any centralized services.
Ad Hoc NetworksSEAD: secure efficient distance vector routing for mobile wireless ad hoc networks
822 Citations2003Yih-Chun Hu, David B. Johnson +1 more
The quest for security in mobile ad hoc networks
738 Citations2001Jean‐Pierre Hubaux, Levente Buttyán +1 more
An overview of security problems for mobile ad hoc networks is provided, distinguishing the threats on basic mechanisms and on security mechanisms and the solution to protect the security mechanisms is described.
Providing robust and ubiquitous security support for mobile ad-hoc networks
689 Citations2001Jiej, Z. Petros +3 more
This paper describes a solution that supports ubiquitous security services for mobile hosts, scales to network size, and is robust against break-ins and employs localized certification schemes to enable ubiquitous services.
Wireless NetworksIntrusion Detection Techniques for Mobile Wireless Networks
673 Citations2003Yongguang Zhang, Wenke Lee +1 more
This paper examines the vulnerabilities of wireless networks and argues that it must include intrusion detection in the security architecture for mobile computing environment, and develops a key mechanism in this architecture, anomaly detection for mobile ad-hoc network, through simulation experiments.
SEAD: secure efficient distance vector routing for mobile wireless ad hoc networks
642 Citations2003Yih‐Chun Hu, David B. Johnson +1 more
The Secure Efficient Ad hoc Distance vector routing protocol is designed and evaluated, a secure ad hoc network routing protocol based on the design of the Destination-Sequenced Distance-Vector routing protocol (DSDV), which performs well over the range of scenarios, and is robust against multiple uncoordinated attackers creating incorrect routing state in any other node.
Rushing attacks and defense in wireless ad hoc network routing protocols
637 Citations2003Yih‐Chun Hu, Adrian Perrig +1 more
The rushing attack is presented, a new attack that results in denial-of-service when used against all previous on-demand ad~hoc network routing protocols, and Rushing Attack Prevention (RAP) is developed, a generic defense against the rushing attack for on- demand protocols.
Efficient and Secure Source Authentication for Multicast.
629 Citations2001Adrian Perrig, Ran Canetti +2 more
This paper proposes several substantial modifications and improvements to TESLA, which allows receivers to authenticate most packets as soon as they arrive, and improves the scalability of the scheme, reduce the space overhead for multiple instances, increase its resistance to denial-of-service attacks, and more.
IEEE/ACM Transactions on NetworkingThe performance of query control schemes for the zone routing protocol
574 Citations2001Zygmunt J. Haas, M.R. Pearlman
This paper proposes query control schemes for the Zone Routing Protocol that allow ZRP to provide routes to all accessible network nodes, with less control traffic than purely proactive link state or purely reactive route discovery, and with less delay than conventional flood searching.
Secure link state routing for mobile ad hoc networks
466 Citations2003Panos Papadimitratos, Zygmunt J. Haas
The proposed secure link state routing protocol (SLSP) provides secure proactive topology discovery, which can be beneficial to network operation in a number of ways.
How to withstand mobile virus attacks (extended abstract)
453 Citations1991Rafail Ostrovsky, Moti Yung
It is shown how local computations (at each processor) and global computations can be made robust using a constant factor resilience and a polynomial factor redundancy in the computation.
Self-securing ad hoc wireless networks
358 Citations2003Haiyun Luo, Petros Zerfos +3 more
This work provides scalable, distributed authentication services in ad hoc networks, in which multiple nodes collaboratively provide authentication services for other nodes in the network, and formalizes a localized trust model that lays the foundation for the design.
ACM SIGMOBILE Mobile Computing and Communications ReviewSecure ad hoc on-demand distance vector routing
340 Citations2002Manel Guerrero Zapata
An overview of different approaches to provide security features to routing protocols in mobile ad hoc networks (MANET) is given and Secure AODV is described giving a summary of its operation and talking about future enhancements to the protocol.
Illinois Digital Environment for Access to Learning and Scholarship (University of Illinois at Urbana-Champaign)MOCA : MObile Certificate Authority for Wireless Ad Hoc Networks
280 Citations2004Seung Yi, Robin Kravets
This paper presents the MOCA (MObile Certificate Authority) key management framework designed to provide authentication service for ad hoc wireless networks, and presents a set of guidelines for a secure configuration of threshold cryptography to maintain strong security.
A specification-based intrusion detection system for AODV
264 Citations2003Chin-Yang Tseng, P. Balasubramanyam +4 more
This paper proposes a solution based on specification-based intrusion detection to detect attacks on AODV, which employs a tree data structure and can effectively detect most of the serious attacks in real time and with minimum overhead.
Security in Ad Hoc Networks: a General Intrusion Detection Architecture Enhancing Trust Based Approaches
208 Citations2002Patrick Albers, Olivier Camp +4 more
This paper shows how ad hoc networks can be, to a certain extent, secured using traditional techniques, and examines the different intrusion detection techniques and point out the reasons why they usually cannot be used in an ad hoc context.
IEEE/ACM Transactions on NetworkingImpact of Denial of Service Attacks on Ad Hoc Networks
184 Citations2008Imad Aad, Jean‐Pierre Hubaux +1 more
This paper design and study DoS attacks in order to assess the damage that difficult-to-detect attackers can cause, and quantifies via simulations and analytical modeling the scalability of doS attacks as a function of key performance parameters such as mobility, system size, node density, and counter-DoS strategy.
IEEE Wireless CommunicationsSecuring wireless mesh networks
183 Citations2006Naouel Ben Salem, Jean‐Pierre Hubaux
The specifics of WMNs are described and three fundamental network operations that need to be secured are identified, which allow fast, easy, and inexpensive network deployment.
IEEE Communications MagazineThe IEEE 802.11s Extended Service Set Mesh Networking Standard
177 Citations2008Joseph Camp, Edward W. Knightly
How the initial 802.11s standard addresses key factors for standardization of two-tier wireless mesh networks is described and discussed, including efficient allocation of mesh resources at the routing and MAC layers.
Intrusion detection using mobile agents in wireless ad hoc networks
163 Citations2003O. Kachirski, R.K. Guha
This paper implements an efficient and bandwidth-conscious framework that targets intrusion at multiple levels and takes into account the distributed nature of ad hoc wireless network management and decision policies.
IEEE Communications MagazineDetecting and avoiding wormhole attacks in wireless ad hoc networks
117 Citations2008Farid Naït‐Abdesselam, Brahim Bensaou +1 more
An efficient method to detect and avoid wormhole attacks in the OLSR protocOLSR protocolol, which exhibits several advantages, among which are its nonreliance on any time synchronization or location information, and its high detection rate under various scenarios.
Security enhancements in AODV protocol for wireless ad hoc networks
111 Citations2002S. Bhargava, Deepak Agrawal
Certain misbehaviors caused by a malicious node to a reactive routing protocol, specifically the ad hoc on-demand distance vector (AODV) protocol are identified.
IEEE Journal on Selected Areas in CommunicationsA framework for misuse detection in ad hoc Networks-part I
58 Citations2006D. Subhadrabandhu, Sunetra Sarkar +1 more
This work mathematically formulate the problem of maximizing the detection rate subject to limited availability of communication and computational resources, and shows that computing the optimal solution is NP-hard.
Distributed Intrusion Detection for Mobile Ad Hoc Networks
50 Citations2006Ping Yi, Yichuan Jiang +2 more
A cluster-based detection scheme is presented, where periodically a node is elected as the monitor node for a cluster and the finite state machine (FSM) is constructed by the way of manually abstracting the correct behaviours of the node according to the routing protocol of Dynamic Source Routing (DSR).
Routing anomaly detection in mobile ad hoc networks
50 Citations2004Bo Sun, Kui Wu +1 more
A new intrusion detection agent model is presented and utilize a Markov chain based anomaly detection algorithm to construct the local detection engine and simulation results show that the algorithm can achieve low false positive ratio, high detection ratio, and small MTFA, especially when the mobility is low.
On vulnerability and protection of ad hoc on-demand distance vector protocol
48 Citations2003Weichao Wang, Yi Lü +1 more
The analysis shows that the on-demand route query enables the malicious host to conduct real time attacks on AODV, and the vulnerability analysis results and anomaly patterns can be employed by other ad hoc routing protocols to establish intrusion prevention and detection mechanisms.
Journal of Systems Engineering and ElectronicsFlooding attack and defence in ad hoc networks
47 Citations2006Ping Yi, Yafei Hou +3 more
The results of the implementation show FAP can prevent the Ad hoc Flooding attack efficiently, and the proposed defense, Flooding Attack Prevention (FAP), is a generic defense against the ad hoc flooding attack.
Journal of Systems Engineering and ElectronicsDistributed intrusion detection for mobile ad hoc networks
43 Citations2008Ping Yi, Xinghao Jiang +2 more
A distributed intrusion detection approach based on timed automata based on cluster-based detection scheme, where periodically a node is elected as the monitor node for a cluster, which is much more efficient while maintaining the same level of effectiveness.