A Specification-Based Intrusion Detection Model for Wireless Ad Hoc Networks

Mobile ad hoc networks (MANET) have the properties of open medium and decentralized structure, so malicious nodes can easily attack MANET nodes. Furthermore, it is more difficult to establish a protection mechanism on a dynamic topology than a fixed one. In this paper, we propose a specification-based intrusion detection model (SIDM) with the concept of previous two forwarders (PTF) which utilizes the previous hop routing messages to assure the integrity of the routing message. As a result, all vulnerable message fields that could be tampered with during transmission are protected by our method. The proposed SIDM is lightweight and deployable in a distributed environment. By employing the designed idea into the AODV routing protocol, the experimental results demonstrate suitable performance in MANET.