抵抗AODV黑洞攻击的路由认证链机制

在移动自组网中,黑洞攻击是一种主要的针对AODV协议的攻击方式,黑洞攻击是指黑洞节点通过更改序列号或跳数等手段欺骗合法节点将路由导向它,从而将从源节点接收到的数据包丢弃的攻击,多个黑洞联合攻击的威胁更大。为此,该文提出一种基于安全递归函数的认证链机制,即一条路由的接续节点依赖递归函数的确定性状态转移关系实现安全的唯一关联,从而使得整条路由形成为一个认证链。该机制中,即使是采用简单递归函数类中的伪随机线性序列,只要其线性复杂度大于认证链上的节点数,则可以使得黑洞攻击者无法获取两倍于序列线性复杂度以上的连续状态值,从而可以保障路由的安全可认证性。最终证明,该文提出的路由认证链机制是一种新颖且有效的防御黑洞攻击的方法。

Route Authentication Chain Mechanism Against AODV Black Hole Attack

The black hole attack is the main kind of attacks against AODV protocol in an Ad hoc network, black hole attack is a black hole node spoofing a legitimate node by changing the serial number or hop count, thereby drop the received packets, a much more threat by a joint attack of multiple black holes. This paper proposes an authentication chain mechanism based on the secure recursive function to overcome the black hole attack, by which the successive nodes of a route are unified only on the deterministic state transition relation of the recursive function to implement a unique association for security so that the whole route form an authentication chain. With the mechanism of this paper, even if the pseudo-random linear sequence as a kind of simple recursive function is adopted, as long as its linear complexity is greater than the number of nodes in the authenticating chain so that the attacker cannot obtain continuous state values of more than two times the linear complexity of the sequence, and then the secure authentication of the route can be guaranteed. Therefore, the mechanism and method presented in this paper is a novel and effective method to defend against the black hole attack.