A Summary For Detecting Malicious Variable Routing

To reduce the risk of these types of attacks, routers should be hardened, packet filtering controls should be used and routing information should be controlled.

3.2. BlackHole. In this attack,malicious nodes advertise very short paths (sometimes zero-cost paths) to every other node, forming routing black holes within the network [41]. As their advertisement propagates, the network routes more traffic in their direction. In addition to disrupting traffic delivery, this causes intense resource contention around the malicious node as neighbors compete for limited bandwidth.

In this report I will be describing the ways in which networks can be attacked, also be giving real life example of each of the below.

The first reason may be a failure of a router which is not detected by other routers. Packets which originally are forwarded to the failed router get dropped and never arrive at their destinations. Another formation is called dead address. An IP address specifies a host machine which does not work or the IP address is not even assigned with a host. There may be other possibilities, here we do not discuss further.[4] To have a good understanding of how black holes form, an example is shown (see figure 7).

In simulated network the source node designated as1 initiates the routing procedure by sending RREQ or Route Request message to its surrounding nodes. The RREQ message sent by the source node is denoted in the color green. The other RREQ messages are shown in cyan, yellow, black etc. The source node 1 is sending the RREQ message to its neighbour nodes 5, 6, 9, 11 and 13 and the links are formed shown by the green line. Every time node 5,6,9,11,13 is sending the RREQ message to its neighbour and the links are formed.

In order to avoid this problem, a technique called probability distribution algorithm is introduced. In probability distribution algorithm, the random traffic between the primary network users are analyzed. The nearby nodes behaviors are learnt by the secondary node. The probability of the traffic in the neighboring nodes are studied by the node that tries to transmit data. When the traffic is free then the secondary node establishes the connection. If there is traffic then the secondary node searches for other nodes. Thus the data transmission occurs in this CR

Electronic technology is growing at a rapid rate; more devices are made mobile and wireless, but with those improvement and developments come flaws and malicious opportunities. Cyber attacks are on the rise and no system or device is immune. Many organizations employ multiple layers of firewalls but that doesn’t completely eliminate the threat. Attacks against firewalls and virtual private networks or VPNs are constantly being exploited with new methods everyday, but they are yet another obstacle that a cyber criminal must overcome.

Security is always the main issue for a network, when it is a wireless system the security becomes the main concern for a user. A wireless P2P network is suffering from mainly two security attacks i) Virus Attack ii) Intruders. Intruder does not only mean it want to hack the private information over the network, it also include to use a node bandwidth and increase the Delay of Service for other host over the network. This work is basically based on such type of attack. There are some system that exists on same attack model by comparing the hop time and some other means. But in all such system the Detection system is performed on a centralized system. We are proposing and intelligent predictive system

A node with the best behavior is assigned with the highest trust value e.i. 2, the nodes detected with the malicious behavior is assigned with the trust value < 0.5. The road side units (RSUs) are updated with the calculated trust values. Here, attacks related to the Link layer and physical layer are not considered. Instead, we have route trust values of the nodes and total number of nodes. Main advantage of the system is that malicious nodes are isolated from taking part in the network communication as we consider only most trustworthy node in the network.

The Mobile ad hoc networks is one of the emerging technologies today. The instability of the nodes in a mobile ad hoc network makes it difficult to calculate the reliability of the network. When a node moves freely move in a

The café latte attack relies on a user’s laptop being connected to a Wired Equivalent Privacy (WEP) protected network and tricks the user into sending thousands of WEP-encrypted ARP (Address Resolution Protocol) requests. An ARP is a network protocol that maps together a network layer address and a data link layer hardware address. For example, an ARP is used to resolve IP addresses to their corresponding Ethernet address (Leyden, 2007). For a café latte attack to be successful, the cyber-criminal does not have to be in the same area as the user but can also be in a remote location to intercept the WEP key. A cyber-criminal can take advantage of the message modification flaws in the 802.1WEP architecture and the shared key authentication by flooding a network with encrypted Address Resolution Protocol (ARP) requests. A café latte attack functions by using a bit-flipping technique that modifies the Media Access Control (MAC) address and Internet Protocol address (IP address) of a user’s computer which is collected when gratuitous ARP requests are sent from the cyber-criminal. When the user responds to the gratuitous ARP requests, the cyber-criminal can quickly crack the WEP key from the user’s traffic. With a café latte attack, a cyber-criminal can obtain the WEP key in less

Today, security devices such as Firewall, IDS are used on the many organization's networks for preventing security attacks. But, these devices can only diagnose illegitimate traffic and prevent it. They cannot prevent attacks which are as a result of the network devices vulnerabilities in the switches, routers, and etc. A malicious user who is within the network can implement many attacks by using these vulnerabilities. This paper explains the kind of existing vulnerabilities in Cisco switches and methods of preventing these attacks from

Although, there is one of the vulnerabilities that is pretty much impossible to guard against, DoS like Molta points out, “Other problems are looming, the most pernicious of which are DoS (denial of service) attacks. While DoS is a fact of life on all networks, it's worse on wireless networks because not only do you need to guard against attacks at Layer 2 and above, you're also extremely vulnerable to physical-layer attacks to the medium” (Molta, 2002, p. 18). In this essay, some vulnerabilities will be looked at that can affect Wi-Fi home users as well as businesses that implement wireless networks because both types of networks can be affected by the same types of intrusion or disruption attacks. Even though this paper is about vulnerabilities, it is important to point out that wi-fi networks can still be operated safely with a high level of security in place.

The paper comprehensively discussed about the DOS attacks on IEEE 802.11 frame type of management. There are 15 DOS attacks discussed in this paper. We will identify only 10 main attacks from the paper.

The expanded probability of listening in, caricaturing, and denial‐of‐service assaults ought to be deliberately considered. Existing connection security procedures are frequently connected inside of remote systems to decrease security dangers. As an advantage, the decentralized way of system control in MANETs gives extra vigor against the single purposes of disappointment of more incorporated methodology