vix.ing · top · new · best · stats · spec

ATTENTION: ATTackEr traceback using MAC layer abNormality detecTION

2005/08/02 by Yongjin Kim, Kim, Yongjin, Ahmed Helmy +1
Computer Science · #FOS: Computer and information sciences #Mobile Ad Hoc Networks #Network Security and Intrusion Detection #Networking and Internet Architecture (cs.NI) #Security in Wireless Sensor Networks #cs.NI

paper · pdf · doi:10.48550/arxiv.cs/0508010

arxiv created 2005/08/02 · openalex publication_date 2005/08/02 · arxiv updated 2009/12/01 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28

Abstract

Denial-of-Service (DoS) and Distributed DoS (DDoS) attacks can cause serious problems in wireless networks due to limited network and host resources. Attacker traceback is a promising solution to take a proper countermeasure near the attack origins, to discourage attackers from launching attacks, and for forensics. However, attacker traceback in Mobile Ad-hoc Networks (MANETs) is a challenging problem due to the dynamic topology, and limited network resources. It is especially difficult to trace back attacker(s) when they are moving to avoid traceback. In this paper, we introduce the ATTENTION protocol framework, which pays special attention to MAC layer abnormal activity under attack. ATTENTION consists of three classes, namely, coarse-grained traceback, fine-grained traceback and spatio-temporal fusion architecture. For energy-efficient attacker searching in MANETs, we also utilize small-world model. Our simulation analysis shows 79% of success rate in DoS attacker traceback with coarse-grained attack signature. In addition, with fine-grained attack signature, it shows 97% of success rate in DoS attacker traceback and 83% of success rate in DDoS attacker traceback. We also show that ATTENTION has robustness against node collusion and mobility.

Related