Research And Design On Intrusion Detection System In MANET

Mobile ad hoc networks (MANET) as a new mobile multi-hop wireless networks, can be attacked easily by eavesdropping, forgery, denial of service attacks. Beside encryption, authentication, firewall and other security technologies, intrusion detection system is necessary to guarantee the security of MANET. Once the intrusion is detected, the network will be able to respond in time to prevent intrusions and ensure network security.First of all, we analyzed the security needs of current mobile Ad Hoc network, and discussed the weak point and the threat of network security. Then, we pointed out the goal of mobile Ad Hoc network security, and made a brief introduction about intrusion detection, focusing on an overview of mobile Ad Hoc network intrusion detection technology research.Secondly, propose robustness of node in mobile ad-hoc networks (MANET). A robustness estimation model was presented, and then a robustness-based clustering solution for IDS (RBCS-IDS) was raised, and gave nodes their robustness estimation. This solution only extended the original HELLO message for the benefit of small costs and it could be better suitable for the needs of IDS in MANET. It also has less communication costs and better efficiency than other clustering algorithms.Thirdly, this paper presents an algorithm of globally detecting packet dropping attacks for IDS in MANET based on cluster heads collaboration after analyzing existing packet dropping attack detection algorithm. The solution monitors nodes communication status and judges malicious nodes by IDS cluster heads more efficient than existing algorithms. Simulation results show this algorithm performs well regarding malicious node detection rate and false alarm rate.