基于身份标识的MANET公开密钥管理方案

基于身份标识的公开密钥管理方案避免了传统PKI模型下繁杂的公钥签发及验证等操作,对于通信带宽有限、结点计算资源有限的MANET来说,具有较强的优势.基于分布式CA的基本思路,采用门限秘密共享体制,提出了一个基于身份标识的MANET公开密钥管理方案,具有较少的通信量与较少的通信环节,能够较好地适应MANET环境.将CA的功能分布到各个网络结点中,克服了传统CA可用性与安全性方面的问题.设计了显式与隐式两种密钥撤销机制,有效地解决了密钥撤销问题.设计了基于时间片的用户密钥定时更新机制,确保了公钥服务的高可用性.     

基于方向的有限洪泛路由协议

将AODV和GPSR这2个协议的设计思想结合起来,提出基于方向的有限洪泛路由协议。该协议结合地理信息,对AODV加以改进。由洪泛方式能请求到最优的转发路由,不会产生绕路,在路由请求的过程中,采用基于方向的有限洪泛,能大量减少RREQ报文和信号冲突,从而提高数据报文的成功传递率。通过仿真实验验证了LFRD的可行性,并证明其在成功传递率、协议带宽消耗等性能方面较AODV有提高。     

A new trust-based mechanism for detecting intrusions in MANET

Providing security to Mobile Ad-hoc Networks (MANET) is a challenging and demanding task. It is important to secure the network against intrusions in MANET for assuring the development of services. For this purpose, some intrusion-detection systems (IDSs) have been developed in traditional works. However, these have some drawbacks, such as that there is no assurance for public key authentication, certificate validation between two nodes is not possible, and they require a large amount of time for processing. To overcome all these issues, a Trust-Based Authentication Routing with Bio-Inspired Intrusion Detection System (TRAB-IDS) is developed in this article. The main aim of this article is to provide security to the network against harmful intrusions. Here, the trust and deep packet inspection (DPI) concepts are integrated for improving the security. Moreover, the certificate authority generates a public and private key pair for initiating the route agent and authenticating the neighboring nodes. Based on the trust of the node, the packet is forwarded to the intermediate node by calculating a bogus key. Then, the DPI is initiated for extracting the packet features and the similarity between the features is estimated. If the packet is matched with the attacker, an error report will be forwarded to the certificate authority; otherwise, the packet will be forwarded to the other node. The experimental results evaluate the performance of the proposed TRAB-IDS in terms of delivery ratio, delay, security cost, and misdetection ratio.     

An address assignment for the automatic configuration of mobile ad hoc networks

Mobile ad hoc networks (MANETs) are infrastructure-less, multi-hop wireless networks, which can be deployed without any pre-existing setup. MANETs are mobile in nature and any node can join and leave the network at any time. Due to mobility, MANETs must be able to configure themselves without human intervention. Configuration (such as address assignment) of a node in such a network is an important issue. In this paper, we present a solution for address assignment, which is distributed in nature and can be used for IP address configuration in MANETs. Each node can allocate the address independent of others. Although our solution uses broadcast messages, results show that by fixing a few parameter values we can reduce the number of broadcast messages. We simulate the protocol and results show that our solution yields better performance those of the earlier algorithms.

MANET自组织按需认证模型的研究

构建安全可信的MANET 必须考虑到其自身的特性。目前关于MANET 的安全认证研究大多是利用中心认证服务器为用户颁发证书,较少考虑到MANET 自身的自组织特点,很难完成网络的快速部署。结合MANET 的特性,提出一种自组织按需式认证方案。该方案不需要中心认证服务器,充分利用节点自身功能,在完成身份认证的同时具有良好的伸缩性。     

具有动态拓扑感知的无线自组对等网

针对无线自组对等网中逻辑拓扑与物理拓扑之间的失配问题,综合节点位置信息和分布状况,构造出具有静态拓扑相关的无线自组对等网.通过中心节点获取网络拓扑的变化信息,将节点标号的最佳分配转化为最大旅行商问题.同时,采用模拟退火算法进行优化求解,实现了网络的动态拓扑感知性.仿真结果表明,该对等网在资源定位过程中,访问路径明显缩短,时延和数据丢包率明显减小.     

一种新的基于ant无线自组网节能协议的研究

节能问题是无线自组网络MANET（Mobile Ad hoc Networks）中的核心和关键问题,同时也面临巨大挑战。结合蚁群理论,通过模拟生物界蚂蚁的信息激素跟踪机制和进一步的行为,提出了一种新的基于蚁群理论的无线网节能机制来延长网络的生命周期。最后通过这协议和单纯的AODV协议做了仿真试验比较,证明其在节能和延长生命周期方面的有效性。     

MANET网中基于簇结构的认证服务方案

针对移动Ad Hoc网络无中心的特性及一般分布式认证中单跳认证节点少于门限值、CA节点不可靠等问题,采用基于多层簇的体系结构和 Feldman可验证秘密共享技术,提出一种基于簇结构的认证服务方案,结果证明该方案可实现各级簇头和簇成员的分布式认证,解决单跳内认证节点少于门限值问题,防止对系统私钥的重构等外部攻击及内部被攻破节点对分布式认证的干扰。     

无线Ad Hoc网络中改进的DYMO路由协议研究

DYMO（Dynamic MANET On-Demand）是Ad Hoc 网络中一种反应式按需路由协议,本质上属于单径路由协议,而多径路由能更好地提高网络性能。首先分析了DYMO协议的优点及存在的问题,在此基础上将DYMO和多径路由结合起来,提出了一种改进的DYMO路由协议I-DYMO,利用多条链路不相交路径来发送数据,并将之与源路由结合起来。仿真结果表明该协议提高了分组投递率并降低了端到端平均时延,在动态移动环境下具有较好的稳定性。     

适合移动Ad hoc网络基于时限撤消的自愈组密钥分发方案的研究

提出一个新的MANET(mobile ad hoc network)中基于时限撤消具有自愈能力的组密钥分发方案,通过双向散列链DDHC(dual directional hash chains)和HBT(Hash binary tree)树结构实现了组密钥之间的冗余关联和访问控制;在没有管理节点协助的情况下,利用当前发布的会话密钥信息和自身秘密信息,合法用户节点可以自主恢复出历史组密钥;通过秘密撤消多项式实现了管理节点的撤消功能;接着,提出一个改进方案。安全性和性能分析表明,新方案能够抵御没有会话交集的用户节点同谋破解攻击;在满足MANET的安全需求前提下,有效地节省网络带宽和存储资源。