MSc (Res) Enhancing Bio-inspired Intrusion Response in Ad-hoc Networks Maryamosadat Kazemitabar A



Download 1.68 Mb.
Page7/9
Date28.05.2018
Size1.68 Mb.
#50805
1   2   3   4   5   6   7   8   9

27WPAN


In order to find the network feedback time for a typical WPAN, we simulated a network of 12 nodes, scattered in an area of 150*200 m2. The test was repeated 30 times and the position of the misbehaving nodes were varied to form a valid test. A sample run is presented in Figure 12. The 90 runs were then analysed for their throughput and other network measures using gawk and Excel.



(a)



(b)

Figure 12- A simulation of a WPAN with 12 nodes. (a) The initial flow between two nodes consists of nodes 0, 3, 7, 11 before the attack. (b) The rerouted path after node 3 is affected in the attack and is shut down by an immune-based intrusion response system.

The visualised examples of WPAN simulations are illustrated in Figure 12. Figure 12-(a) represent initial flow(s) before any interruption or attack. Figure 12-(b) display rerouted paths after some nodes in the initial paths are affected in the attacks and are shut down by the intrusion response system.



After drawing the 30 runs of the simulation with the shutdown response call occurring to random nodes in the network, three sets of charts were visually distinguishable (Figure 13). A set of unaffected runs where the misbehaving nodes were not in the route of the flow and so the response had no effect on the flow. A set of non-recovering runs where the shutdown nodes were in a way that the flow was not able to reroute, and the recovered flows where the shutdown node was in the route but the flow had managed to find a new path and maintain the flow successfully. In Figure 13 the 30 runs are shown, but some of the runs have similar curves and seem to be one. The percentage of these three sets changes in all three types of network, as the number of affected runs changes, this is shown in Table ‎5 -7.


Non-recovered flows

No-affected flows

Recovered flows

Figure 13- Three reaction to response in WPAN, when50% of nodes are shutdown at time 4.0s: non-affected, recovered, and non-recovered flows.



Table ‎5‑5- The percentage of these three sets changes in all three types of network, as the number of affected runs changes




WPAN

Behaviour

10% off

20% off

50% off

Recovered

7%

20%

23%

Not recovered

13%

27%

60%

Not affected

80%

53%

17%

Figure 14, illustrates the average throughput of recovered flows of the 30 runs in a WPAN when some nodes are affected after the shutdown response. The response causes a rapid drop in throughput and as the network recovers it rises, we can safely say that it has recovered when the throughput reaches the 98% normal curve, which is 98% of the control curve. We found out that in a WPAN when 10%, 20% and 50% of nodes are shut down, the throughput reaches 98% of its normal value at 6.1 s (Figure 14), 5.6 s (Figure 15) and 4.7 s (Figure 16), respectively. The 98% mark was calculated from control experiments as the 98% of the average normal WPAN throughput curve.

Figure 14- When 10% of nodes misbehaves in a WPAN, the throughput reaches 98% of its normal value at 6.1 s.



Figure 15- When 20% of nodes misbehaves in a WPAN, the throughput reaches 98% of its normal value at 5.6 s.



Figure 16- When 50% of nodes misbehaves in a WPAN, the throughput reaches 98% of its normal value at 4.7 s.




Download 1.68 Mb.

Share with your friends:
1   2   3   4   5   6   7   8   9




The database is protected by copyright ©ininet.org 2024
send message

    Main page