一种面向MANET的启发式恶意节点发现与隔离策略

摘要

In order to adapt the change of network topology and enhance the security of routing protocol,a heuristic strategy of malicious node discovery and isolation is proposed for security applications of Mobile Ad-hoc Network (MANET).It calculates the difference value between two destination sequence numbers from the received packet and routing table respectively,compares it with the heuristic calculated difference threshold to distinguish whether a node is suspicious,and executes bait detection for suspicious nodes to find and identify the malicious nodes.And then,the malicious nodes are isolated to build a secure and reliable route for data transmission.Simulation results show that,compared with two secure routing protocols including SAODV and ARAN,the AODV routing protocol modified by the new strategy has higher packet delivery rate and more stable transmission performance in the case of different number of nodes,node movement speed and the proportion of malicious nodes.%为适应网络拓扑结构的不断变化并增强路由协议的安全性,面向移动自组织网络安全应用,提出一种启发式恶意节点发现与隔离策略.计算接收到的数据包中的目的序列号以及路由表中目的序列号的差异,将该差异与启发式计算得到的差异阈值进行比较来判别节点是否可疑.对可疑节点进行诱饵检测,发现和确认恶意节点,并对恶意节点实施隔离,构建安全、可靠的数据传输路由.仿真实验结果表明,在节点数量、节点移动速度和恶意节点所占比例不同的情况下,与SAODV和ARAN两种安全路由协议相比,采用该策略改进的AODV路由协议的报文送达率更高、传输性能更稳定.