Diseño de un modelo de autenticación para fortalecer la seguridad a nivel de enrutamiento del protocolo OLSR en una MANET
Cargando...
Fecha
2019
Autores
Díaz Jiménez, Femny Javier
Palacio Velásquez, José Gregorio
Título de la revista
ISSN de la revista
Título del volumen
Editor
Ediciones Universidad Simón Bolívar
Facultad de Ingenierías
Facultad de Ingenierías
Resumen
Las MANET (Mobile Adhoc Network) son redes sin infraestructura formadas por dispositivos móviles, estas redes se generan de forma espontánea, cuando los nodos, los cuales por lo general se encuentran en movimiento constante, se encuentran en el rango de distancia adecuado para poder unirse a la red, esta característica hace que la topología de la red sea muy variable y por lo tanto se requiere de algoritmos de enrutamiento que se adapten a dichos cambios, uno de estos algoritmos es el OLSR.
Uno de los problemas a los que se enfrentan estas redes, es el hecho de, que debido a sus características específicas, se vuelve un poco complicada la implementación de seguridad, ya que es muy difícil controlar la conexión de nodos maliciosos, debido al dinamismo de la misma. Teniendo en cuenta que en este tipo de redes cualquier nodo puede funcionar como enrutador para los otros nodos, es posible que un nodo malicioso, que se encuentre conectado a la MANET, intente inyectar tablas de enrutamiento falsificadas al resto de nodos, lo que afectaría el funcionamiento de la red. La finalidad de este proyecto es definir un mecanismo que permita asegurar dichas tablas de enrutamiento, a través de una técnica de autenticación.
Para dar solución a este problema, se realizó un diseño dividido en cuatro fases, la primera fase aborda el detalle de la conexión y autenticación del nodo, para lo cual se decidió por el uso de firma digital basada en algoritmos de cifrado asimétrico, para lo cual el nodo durante su fase de conexión a la red, le envíe su llave pública a todos sus vecinos, en la fase dos, se basa en un sistema de reputación, en el cual un nodo calcula la reputación de los diferentes nodos con los que ha tenido comunicación, definiendo si el mismo tiene mala o buena reputación, y generando un TLV de reputación, el cual es enviado al resto de nodos y calculando la misma según el esquema planteado basado en el Algoritmo de los generales bizantinos. La tercera fase se basa en la selección del nodo MPR, basado en la voluntad del
mismo para convertirse en MPR y el cálculo de la reputación realizado en la fase 2. Como última fase, para implementar autenticación y validar la integridad de las tablas de enrutamiento, se hará uso de la firma digital, basada en el hash del mensaje, del nodo junto con la tabla de enrutamiento.
Este diseño pretende disminuir en gran medida, no solo la conexión de nodos maliciosos a la red, sino que dado el caso, un nodo malicioso llegara a conectarse y se presentará pérdida de paquetes debido al mismo, el nodo terminaría siendo aislado de la red, ya que nunca haría parte del enrutamiento de paquetes, por su mala reputación.
El alcance de este proyecto llega hasta el diseño de la solución, la cual se basa en una combinación de técnicas que han demostrado ser eficientes en este tipo de redes, a futuro se podría trabajar en la implementación de la solución para medir su efectividad, y buscar algún otro mecanismo de medición de reputación para compararlo con el propuesto.
The MANET (Mobile Adhoc Network) are networks without infrastructure formed by mobile devices, these networks are generated spontaneously, when the nodes, which are usually in constant movement, are in the right distance range to be able to join to the network, this feature makes the topology of the network very variable and therefore requires routing algorithms that adapt to these changes, one of these algorithms is the OLSR. One of the problems faced by these networks is the fact that due to their specific characteristics, the implementation of security becomes a bit complicated, since it is very difficult to control the connection of malicious nodes, due to the dynamism of the same. Taking into account that in this type of networks any node can function as a router for the other nodes, it is possible that a malicious node, which is connected to the MANET, tries to inject falsified routing tables to the rest of the nodes, which would affect the operation of the network. The purpose of this project is to define a mechanism to ensure these routing tables, through an authentication technique. To solve this problem, a design was divided into four phases, the first phase addresses the detail of the connection and authentication of the node, for which it was decided to use a digital signature based on asymmetric encryption algorithms, specifically RSA , for which the node during its phase of connection to the network, sends its public key to all its neighbors, in phase two, it is based on a reputation system, in which a node calculates the reputation of the different nodes with which it has had communication, defining if it has bad or good reputation, and generating a TLV of reputation, which is sent to the rest of the nodes and calculating the same according to the proposed scheme based on the Algorithm of the Byzantine generals. The third phase is based on the selection of the MPR node, based on the will of the same to become MPR and the calculation of the reputation performed in phase 2. As a last phase, to implement authentication and validate the integrity of the routing tables, use will be made of the digital signature, based on the hash of the message, of the node together with the routing table. This design aims to reduce to a large extent, not only the connection of malicious nodes to the network, but if necessary, a malicious node will connect and there will be packet loss due to it, the node would end up being isolated from the network, since it would never be part of packet routing, because of its bad reputation. The scope of this project goes to the design of the solution, which is based on a combination of techniques that have proven to be efficient in this type of networks, in the future we could work on the implementation of the solution to measure its effectiveness, and look for some other mechanism of reputation measurement to compare it with the proposed one.
The MANET (Mobile Adhoc Network) are networks without infrastructure formed by mobile devices, these networks are generated spontaneously, when the nodes, which are usually in constant movement, are in the right distance range to be able to join to the network, this feature makes the topology of the network very variable and therefore requires routing algorithms that adapt to these changes, one of these algorithms is the OLSR. One of the problems faced by these networks is the fact that due to their specific characteristics, the implementation of security becomes a bit complicated, since it is very difficult to control the connection of malicious nodes, due to the dynamism of the same. Taking into account that in this type of networks any node can function as a router for the other nodes, it is possible that a malicious node, which is connected to the MANET, tries to inject falsified routing tables to the rest of the nodes, which would affect the operation of the network. The purpose of this project is to define a mechanism to ensure these routing tables, through an authentication technique. To solve this problem, a design was divided into four phases, the first phase addresses the detail of the connection and authentication of the node, for which it was decided to use a digital signature based on asymmetric encryption algorithms, specifically RSA , for which the node during its phase of connection to the network, sends its public key to all its neighbors, in phase two, it is based on a reputation system, in which a node calculates the reputation of the different nodes with which it has had communication, defining if it has bad or good reputation, and generating a TLV of reputation, which is sent to the rest of the nodes and calculating the same according to the proposed scheme based on the Algorithm of the Byzantine generals. The third phase is based on the selection of the MPR node, based on the will of the same to become MPR and the calculation of the reputation performed in phase 2. As a last phase, to implement authentication and validate the integrity of the routing tables, use will be made of the digital signature, based on the hash of the message, of the node together with the routing table. This design aims to reduce to a large extent, not only the connection of malicious nodes to the network, but if necessary, a malicious node will connect and there will be packet loss due to it, the node would end up being isolated from the network, since it would never be part of packet routing, because of its bad reputation. The scope of this project goes to the design of the solution, which is based on a combination of techniques that have proven to be efficient in this type of networks, in the future we could work on the implementation of the solution to measure its effectiveness, and look for some other mechanism of reputation measurement to compare it with the proposed one.
Descripción
Palabras clave
OLSR, MPR, Criptografía, Firma Digital, Generales bizantinos, Reputación, Cryptography, Digital signature, Byzantine generals, Reputation