Packet-Hiding Methods for Preventing Selective Jamming Attacks

Abstract

The open nature of the wireless medium leaves it vulnerable to intentional interference attacks, typically referred to as jamming. This intentional interference with wireless transmissions can be used as a launch pad for mounting Denial-of-Service attacks on wireless networks. Typically, jamming has been addressed under an external threat model. However, adversaries with internal knowledge of protocol specifications and network secrets can launch low-effort jamming attacks that are difficult to detect and counter. In this work, we address the problem of selective jamming attacks in wireless networks. In these attacks, the adversary is active only for a short period of time, selectively targeting messages of high importance. We illustrate the advantages of selective jamming in terms of network performance degradation and adversary effort by presenting two case studies; a selective attack on TCP and one on routing. We show those selective jamming attacks can be launched by performing real-time packet classification at the physical layer. To mitigate these attacks, we develop three schemes that prevent real-time packet classification by combining cryptographic primitives with physical layer attributes. We analyze the security of our methods and evaluate their computational and communication overhead.

Existing System In Existing System Wireless networks rely on the uninterrupted availability of the wireless medium to interconnect participating nodes. However, the open nature of this medium leaves it vulnerable to multiple security threats. Anyone with a transceiver can eavesdrop on wireless transmissions, inject spurious messages, or jam legitimate ones. While eavesdropping and message injection can be prevented using cryptographic methods, jamming attacks are much harder to counter. They have been shown to actualize severe Denial-of-Service (DoS) attacks against wireless networks. This strategy has several disadvantages. o First, the adversary has to expend a significant amount of energy to jam frequency bands of interest. o Second, the continuous presence of unusually high interference levels makes this type of attacks easy to detect. Proposed System In Proposed System, we address the problem of jamming under an internal threat model. We consider a sophisticated adversary who is aware of network secrets and the implementation details of network protocols at any layer in the network stack. The adversary exploits his internal knowledge for launching selective jamming attacks in which specific messages of high importance are targeted. To launch selective jamming attacks, the adversary must be capable of implementing a classify-then-jam strategy before the completion of a wireless transmission. Such strategy can be actualized either by classifying transmitted packets using protocol semantics, or by decoding packets on the fly. To mitigate such attacks, we develop three schemes that prevent classification of transmitted packets in real time. Our schemes rely on the joint consideration of cryptographic mechanisms with PHY-layer attributes. We analyze the security of our schemes and show that they achieve strong security properties, with minimal impact on the network performance.

Modules: 1. Hiding Based On Commitments A Strong Hiding Commitment Scheme (SHCS) Cryptographic Puzzle Hiding Scheme (CPHS) An AONT-based Hiding Scheme (AONT-HS) 2. Packet-Hiding Techniques 3. Real-Time Packet Classification 4. Selective Jamming Attacks 5. Simulation Modules Description: A Strong Hiding Commitment Scheme (SHCS) In this Module, We propose a strong hiding commitment scheme (SHCS), which is based on symmetric cryptography. To satisfy the strong hiding property while keeping the computation and communication overhead to a minimum. To satisfy the strong hiding property, the packet carrying d is formatted so that all bits of d are modulated in the last few PHY layer symbols of the packet. To recover d, any receiver must receive and decode the last symbols of the transmitted packet, thus preventing early disclosure of d. We now present the implementation details of SHCS. Cryptographic Puzzle Hiding Scheme (CPHS) In this Module, we analyze the implementation details which impact security and performance. Cryptographic puzzles are primitives as a method for establishing a secret over an insecure channel. They find a wide range of applications from preventing DoS attacks to providing broadcast authentication and key escrow schemes. Proposed a construction called time-lock puzzles, which is based on the iterative application of a precisely controlled number of modulo operations. Time-lock puzzles have several attractive features such as the fine

granularity in controlling tp and the sequential nature of the computation. Moreover, the puzzle generation requires significantly less computation compared puzzling solving. An AONT-based Hiding Scheme (AONT-HS) In this Module, packets are pre-processed by an AONT before transmission but remain unencrypted. The jammer cannot perform packet classification until all pseudo-messages corresponding to the original packet have been received and the inverse transformation has been applied. Packet-Hiding Techniques In this Module, packet-hiding techniques on the network performance via extensive simulations. To implement the hiding sub layer and measure its impact on the effective throughput of end-to-end connections and on the route discovery process in wireless ad-hoc networks. We chose a set of nodes running 802.11b at the PHY and MAC layers, AODV for route discovery, and TCP at the transport layer. Aside from our methods, we also implemented a simple MAC layer encryption with a static key. This packet-hiding methods require the processing of each individual packet by the hiding sub layer. We emphasize that the incurred processing delay is acceptable, even for real time applications. The SCHS requires the application of two permutations and one symmetric encryption at the sender, while the inverse operations have to be performed at the receiver. Real-Time Packet Classification In this module, once a packet is classified, the adversary may choose to jam it depending on his strategy. Consider the generic communication system depicted. At the PHY layer, a packet m is encoded, interleaved, and modulated before it is transmitted over the wireless channel. At the receiver, the signal is demodulated, deinterleaved, and decoded, to recover the original packet m.

Selective Jamming Attacks In this module, proposed a jamming-resistant communication model for pair wise communications that does not rely on shared secrets. Communicating nodes use a physical layer modulation method called Uncoordinated Direct- Sequence Spread Spectrum (UDSSS). They also proposed, a jamming-resistant broadcast method in which transmissions are spread according to PN codes randomly selected from a public codebook. Several other schemes eliminate overall the need for secret PN codes Simulation In this module, for each jamming strategy. We observe that a selective jamming attack against RREQ messages is equally effective to a constant jamming attack. However, selective jamming is several orders of magnitude more efficient. On the other hand, random jamming fails to disrupt the route discovery process due to the flooding mechanism of AODV.

System Requirements: Hardware Requirements:

System Hard Disk : Pentium IV 2.4 GHz. : 40 GB.

Floppy Drive : 1.44 Mb. Monitor Mouse Ram : 15 VGA Color. : Logitech. : 512 Mb.

Software Requirements:
Operating system : - Windows XP. Coding Language : C#.Net Database : Sql Server 2005