A Distributed Court System for Intrusion Detection in OLSR

In this paper, we propose a novel intrusion detection (ID) method, distributed court system (DCS), that is applied on OLSR (optimized link state routing) protocol in mobile ad hoc networks (MANETs), to solve link spoofing in topology control (TC) messages. This system performs similar functions as a court in real-life. Network is organized into one-hop clusters, in which each node performs local monitoring, while cluster heads also assume responsibility of arbitration. A node who discovers abnormal behaviors can report a ` misbehaved ´ node to the corresponding cluster head, which in turn launches an investigation process. The defendant node can overthrow the accusation with proper proof. To show effectiveness of our proposal, four performance parameters, namely, detection rate, false positive rate, detection delay and communication overhead are evaluated in the simulation.