Spoofing Attack Detection and Localization in Adhoc network using Received Signal Strength (RSS)

Abstract: A wireless ad hoc network is formed by a collection of nodes, with no preset infrastructure where each node plays a role of router, It is recognition day by day due to wide use of mobile and handheld devices. Due to dynamic nature of this network, Device identity is perhaps one of the most potential challenges in any network security solution. Wireless networks are unarmed to many identity-based attacks in which a malicious device uses forged MAC addresses to masquerade as a specific client or to create multiple illegitimate identities. a spoofing attack is a situation in which one person or program successfully masquerades as another by falsifying data and thereby gaining an illegitimate advantage. identity of a node can be confirmed through cryptographic security, traditional security approaches are not always desirable. we propose to use spatial information, a physical property of each node, so hard to falsify or alter fraudulently. and not depend on on cryptographic security, on the beginning for (1) detecting spoofing attacks; (2) determining the number of attackers when multiple node pretend as a same node identity, and (3) localizing multiple adversaries. We propose to use the correlation between a signal's spatial direction and the average received signal gain of received signal strength (RSS) inherited from wireless nodes to detect the spoofing attacks, It conveys the problem of determining the number of attackers as a multi-class detection problem. Clustering based mechanisms are developed to determine the number of attackers. In this paper enlist the method of spoofing attack detection using spatial correlation between wireless nodes. And cluster based mechanisms to determine the number of attakers in network. We evaluated techniques through two wireless adhoc networks using both an 802.15.4 (ZigBee) network with static and dynamic network wireless network .

Keywords: Wireless network security, spoofing , attack detection, localization.