AbstractsComputer Science

Misbehavior Detection and Attacker Identification in Vehicular Ad-hoc Networks

by Norbert Bißmeyer




Institution: Technische Universität Darmstadt
Department: Fachbereich Informatik
Degree: PhD
Year: 2014
Record ID: 1118221
Full text PDF: http://tuprints.ulb.tu-darmstadt.de/4257/


Abstract

The objective of the research presented in this dissertation is to detect misbehavior in vehicular ad hoc networks (VANETs) and to identify the responsible attackers or faulty nodes in order to exclude them from active network participation. Vehicles and roadside units use wireless ad hoc communication in VANETs to increase traffic safety and efficiency by exchanging cooperative awareness information and event-based messages. Considering both presence and status of vehicles moving in a defined range drivers can be notified instantly about upcoming potentially dangerous situations such as a sudden braking action of a vehicle driving in front or the tail end of a traffic jam ahead. VANET nodes frequently broadcast mobility-related information (i.e. absolute values for position, time, heading, and speed) within a communication range of several hundred meters to establish a cooperative awareness of single-hop neighbors. Due to the ad hoc communication between network nodes traffic safety applications become feasible that have low latency requirements. The protection against external attackers in VANETs is provided by applying cryptographic methods. Only registered nodes of the VANET are equipped with valid keys that are certified by a trusted certificate authority. Internal attackers who possess appropriate hardware, software, and valid certificates must be considered as a dangerous threat. Attackers who either extract valid keys and certificates from a communication unit or install a malware on VANET devices on board of vehicles or on roadside units are able to send bogus messages that are accepted by unsuspecting vehicles. We demonstrate that the processing of fake information may affect the safety and efficiency of the overall traffic in the attackers' single or multi-hop communication range. Most existing solutions in the context of misbehavior detection in VANETs are based on data-centric plausibility and consistency checks. We propose in this dissertation new methods and frameworks to evaluate the behavior of VANET nodes based on cooperatively exchanged location-related information. Most existing solutions are only tested within simulations. In contrast we analyzed the applicability of misbehavior detection in VANETs under real conditions. Long-term experiments in outdoor field operational tests and dedicated trials with test vehicles revealed new insights with respect to misbehavior detection and attacker identification which are presented in this dissertation. Based on this knowledge a novel strategy has been developed that consists of three main contributions: local misbehavior detection, local short-term identification of potential attackers, and central long-term identification of attackers. The concept for local misbehavior detection on VANET nodes is based on different information sources such as received packets or sensor measurements to perform data consistency and data plausibility checks. In case of detected inconsistencies or implausible movement characteristics the suspicious node is observed…