Security in Adhoc Networks ????? ?? ???? ??? ??????? ???? ?????

1
?? ??? ??? ??????? ????? ???? ??????? ??????
??? ????? ?? ???? ??? ??????? (Security in Ad-hoc
Networks) ????? ???? farhat_at_ee.sharif.edu
2
??? ?????

• ??????? ???? ??? ???????
• ????????? ???? ??? ???????
• ???????? ?????? ?? ???? ??? ???????
• ????? ?????? ??? ?? ???? ??? ???????
• ?????? ???? ELMAR
• ?????? ???? SELMAR
• ?????? ?????? ? ????? ?????? ??
• ????? ???? ? ?????????

3
???????

• ?????? ?? ???? ????? ????? ?????? ????????
  ????????
• ?????? (?? ???? ?? ???????) ? ?????? ???? ?? ???
  ??

4
????????

• ???? ??? ??? ????? (Tactical Networks)
• ??????? ????? ???????
• ?????? ? ??????? ??????
• ???? ??? ???? (Sensor Networks)
• ?????? ?? ?? ????? ???? ???? ??? ???? ??????? ???
  (real-time) ?? ????? ?????? ???? ????? ??????
• ????? ??? ???????? ???? ???? ??? ???? ????? ???
• ????? ??? ????????? (Emergency Services)
• ?????? ????? ? ??? ?????
• ????? ??? ???? ???????? ?? ????? ????? ? ???
• ???? ??? ????? (Commercial Environments)
• ????? ?????????? ???? (?????? ?? ???? ??????????
  ?? ?? ??? ?? ?? ????)

5
????????

• ???? ??? ????? ? ????? (Home and Enterprise
  Networking)
• ???? ???? ?? ???
• ???? ???? ?? ???
• ????????? ?????? (Educational Applications)
• ???? ??? ??? ?????
• ???? ??? ??????? ?????
• ?????? (Entertainment)
• ???? ??? ?????????
• ????? ??? ?????
• ????? ??? ???? ?? ???? (Location-Aware Services)
• ????? ??? ????? ????? (???????? ? ???????)

6
?????? ??? ????

• ??? ???? ?????? ???? ?? ??? ??? ???? ???? ?????
  ????? ????
• ??????? ???? ?????? ???? ?? ????? ??? ??
• ??????? ???? ???????? ? ???? ????????
• ????? ??? ???? ???? ????? ???? ????? ????
• ????? ???? ? ??? ????? ???? ??? ??? ???? ????? ??
  ??????
• ????? ??????? ????? ??? ??? ??

7
???????? ?????? ????

• ?????? (Availability)
• ???????? (Confidentiality)
• ????? ????? (Authentication)
• ???????? (Integrity)
• ????? ?????? (Access Control)
• ???????????? (Non-repudiation)

8
???????? ????

• ?????? ???? (Key Management)
• ???????? ??? (Secure Routing)
• ????? ????? (Cooperation Enforcement)
• ??????? ?????? (Intrusion Detection)
• ?????? ?????? (Trust Management)
• ????? ?? ???? ??? ????? ??

9
????? ?????? ???

• ????? ???? (Active)
• ?????? ????? ????? ???? ??? ??????? (malicious)
  ???? ????? ?????
• ??? ??? ? ?????? ???? ?? ?? ??? ?????? ?? ???
  ??? ????
• ????? ???? (modification)
• ??? ???? ??? (impersonation)
• ??? ???? (fabrication)
• ????? ??????? (Passive)
• ?????? ??? ??????? (selfish) ?? ?????? ?? ???
  ????? ?????
• ??? ???? ?????? ???? ????? ????

10
????? ?????? ???

• ????? ????? ????? (Denial of Service)
• ???? ???????? (Black-hole)
• ???? ???? ??????? (Grey-hole)
• ???? ?????? ?????? (Gratuitous Detour)
• ???? ???? (Rushing)
• ???? ???? ???? (Wormhole Attack)

11
???? ???? ????

• ????? ?? ???? (?????? ????? ????? VPN) ???? ??
  ????? ????
• ????? ????? ???? ????? ???? ???? ???? ??
• ????? ???? ???? ????? ?? ??? ????????

12
????? ????

• ????? ??????? ???? ?????
• ??? ????? ????? ???? ????? ??????? ??
• ??????? ?? ???? SUCV ?? ???? ????? ???? ?????
• ??????? ?? ?????? Diffie-Hellman ??? ?? ?????
  ??????? ?????
• ????? ???? ??????? ????? ????? ??? ??? ???? ???
  ?? ???????? ?? ??? ?? ????

13
????? ????

• ???? ????? ???? ??? ??? ??? ????
• ????? ?? ?? ??? CA (Certificate Authority)
• ????????? ?? ??? (???? ? ???? ????? ? ????? CA)
• CA? ???? ?? (??????? ?????)
• ???? ?????? ??? (???? ????) ??? CA ? ??? ????
  ???? ???? ????? ???? ????
• ???? ?????? ??? ?? ???? ???? ???? ????? ????
  ???????
• ??? ??? ????

14
??? ????? ????

• ????? ???? ??????? ????? ????? ???? ??? ??? ?????
• ???? ????? ???? ?????? ???? (CA? ???? ??)
• ????? ??????? ???? ????? ?? ???? ?????? PGP
• ???? ????? ??????? ???? ?????? ???????

15
?????? AODV
16
?????? AODV

• ???? ? ??? ???? ??????? ???? ???? ??? ????
• ?? ??? ?? ?? RReq ?? ???? ?????
• ??? ?????? ???? ????? ???? RReq ?? ??? ??????.
• ??? ?????? ?????
• ??? ?? ???? ????? (Route Table) ???? ???? ?? ??
  ???? ???????? ????? ????? ???? ???? ???? (Route
  Reply Packet) ?? ?? ???? ? ???? ???? ???????.
• ??? ?? Route Table?? ???? ???? ?? ?? ???? ??????
  ?????
• ?????? ??????? Hop ??? ?????? ???? RReq ?????
  ??????? ???? ???? ???????? ?????

17
ARANAuthenticated Routing for Ad-hoc Networks

• ??????? ?? ???????? ?????????
• ???????? ?? ???? ?????? AODV
• ????????? ???? ??? ???? ???? ???? (CA) ???? ??
  ???
• ???? IP ?? ???? ????? ???? ?????
• ????????? ???? ???????? ?? ???? ???? ???? ????
• ???? ???? ?? ???? ????? ?????
• ????? ???????? ?? ???? ????? ?? ????? ???.

18
ARAN
Route Discovery
Route Maintenance
19
ARIADNEA Secure On-demand Routing Protocol

• ??????? ?? ???????? ??????
• ???????? ?? ????? ?????? DSR
• ???????? ?? ????? ???? ???? ???? ???? ??????
  TESLA
• ????? ????? ???? ??
• ???? ????? ??? ?? ??? ??? ?????
• ???? ????? ??? ??? ??? ????? ?? ????? ???????
• ????? ????? ???? ?????
• ???? ???? ?? ?????? ?? ?? ???? ??? ??? ????? ???!

20
ARIADNERoot Discovery
21
????? ???? (Packet Leashes)

• ???? ???? ?????? ARIADNE
• ????? ????? ??????? ???? ???? ? ???? ???? ????
  ??????
• ????? ???? ???? ???? ???? ?? ???????? ???
• ????? ????
• ????????? ?? ????? (geographical)
• ????? (temporal) ?? ??????? ?? ?????? TESLA

22
TESLA(Timed Efficient Stream Loss-Tolerant
Authentication) with Merkle Hash Tree
23
SMRSplit Multipath Routing

• ?? ????? ?????? DSR
• ????? ??? ???? ?????? ???-????
• ???????? ???? ??? ???????? ??
• ?? ??? ?????? ?? ???? ?
• ??? ???? ?????? ?? ???? ?? ?????!

24
ELMAREfficient Local-Multipath Adaptive Routing

• ????? ???? ??? ??????? ? ???? ????
• ?????? ???? ???? ??? ??????? ? ???? ?? ?? ???
  ?????? ????
• ??????? ????? ????? ?? ?? ???
• ??? ???? ??? ?? ???? ??? ???? ?? ????? ?????
• ????? ?????? ???? ???? ?? ????? ?????? Ack
• ??????? ???? ?? ???? ??????? (??? ?????? Ack)

25
ELMAREfficient Local-Multipath Adaptive Routing
26
ELMAREfficient Local-Multipath Adaptive Routing
27
ELMAREfficient Local-Multipath Adaptive Routing
28
ELMARSelfishness Resilience
29
ELMARSelfishness Resilience
30
ELMARWormhole Attack Resilience
31
?????? PGP
32
SELMARSecure Efficient Local-Multipath Adaptive
Routing

• ??? ?? ?????????? ???? ????? ??? ????
• ???????? ?? ???? ?????? ELMAR
• ???????? ?????? ???? ????? ??? ???? ? ???? ??
  ???? ????? ????
• ????? ??????? ???? ??????
• ???? ??????? ?? ???????? ????????

33
SELMARSecure Efficient Local-Multipath Adaptive
Routing

• ????? ???? ????? ??? ??? ??? ????? ?? ???? ?????
  ????
• ????? ????? ????
• ??? ???? ? ???? (????? ????? ?? ?????) ???? ????
  ????
• ??? ??? ????? (????? ?????) ???? ???? ?????
  ?????? ??
• ???? ???? ????? EMAC ?? ?? ?????
• ????? ????? NMAC ?? ?? ?????
• ????? ?????? ????? ???? ?? ???? ?????? Nounce

34
SELMARRoute Discovery (Route Request)
35
SELMARRoute Discovery (Route Reply)
36
?????? ?????? ? ????? ?????? ??
37
????? ????

• ??????? ???? ??? ??????? ?? ????? ?????? ????
  ???.
• ?????? ??? ?? ???????? ??????? ??????? ?? ?????
  ??? ??? ?? ??????.
• ???? ???? ???? ????? ????????? ???? ?? ??? ????
  ?? ???.
• ?????? ??? ??????????? ?? ?????? ?????? ?????
  ?????? ?? ???? ?? ????.
• ?????? ???? SELMAR ?? ????? ????? ?????? ???
  ?????? ???? ????.
• ??? ????? ??? ????? ????? ? ?????? ???? ???? ????!

38
?????????

• ?????? ?????? ??? ????? ??? ?? ??? ????? ? ??????
• ??????? ? ?????? ???? ??? ????? ?????? ???
  ???????? ???
• ???? ????? ???? ???? ?????? ?????? ???????? ???
• ???? ????? ?? ?????? ??? ???? ???? ??? ?? ???
  ???????
• ????? ????? ?????? ???????? ?? ???? ?? ??? ?????
  ????? ? ??????

39
?????

• K. Sanzgiri, B. Dahill, B. N. Levine, C. Shields,
  E. M. Belding-Royer, ARAN A Secure Routing
  Protocol for Ad Hoc Networks, UMass Tech Report
  02-32, 2002
• Y. Hu, D. B. Johnson, A. Perrig, ARIADNE A
  Secure On-Demand Routing Protocol for Ad Hoc
  Networks, in proceedings of MOBICOM 2002
• C. E. Perkins, E. M. Royer, and S. R. Das, Ad-hoc
  On-demand Distance Vector (AODV) routing, IETF
  MANET Group, Jan 2002
• D. B. Johnson, D. A. Maltz, Y. C. Hu, and J. G.
  Jetcheva, The Dynamic Source Routing Protocol for
  Mobile Ad-hoc Networks, IETF MANET Group, Feb
  2002
• S. Lee and M. Gerla, Split Multipath Routing
  with Maximally Disjoint Paths in Ad Hoc
  Networks, Proc. of IEEE ICC, Vol.10,
  pp.3201-3205, May 2001

40
?? ???? ?? ???? ???