Trust Management in Mobile Ad Hoc Networks Using a Scalable Maturity-Based Model

Trust Management in Mobile Ad Hoc Networks Using a Scalable Maturity-Based ModelAuthors: Pedro B. Velloso, Rafael P. Laufer, Daniel de O. Cunha, Otto Carlos M. B. Duarte, and Guy Pujolle

Paper Presentation By : Gaurav Dixit (gdixit@vt.edu)1

Outline Introduction Trust Model Implementation Results2

MANets - same node can work as router server client Assumption of good behavior Not true! Trust needs to be measured - This paper provides one such method. Applying human trust dynamics to trust calculation of nodes Builds on recommendationsIntroduction3

Trust level of a node depends on:= (previous individual experiences) + (recommendation from neighbors)

Benefits of trust calculation: avoid sending packets to malicious nodes. increased co-operation among good nodes.

4

Recommendations collected only from neighbors. Advantages for nodes:

Less storage Less power requirement Less processing Better for changing topologies information for entire network not required5

Since, recommendations not forwarded, it is good for networks:

Less recommendation messages travelling in network - low traffic

Low energy consumption for entire network

6

Relationship Maturity

Similar to human trust behavior, more weightage is given to the recommendations from older neighbors.7

Trust Model

Trust level assigned to each neighbor.

Trust value reflects behavior history, and thus expected future behavior.

Node forms opinion based on experiences.Transmission of these opinions about node i are called recommendations.

8

Trust Model

Recommendations compensate for lack of monitoring capabilities.

Paper defines Recommendation Exchange Protocol (REP)9

Trust Model

Trust level varies from 0 to 1.

Recommendation from C more important than that from B, because of relationship maturity.

10

Trust Model: Architecture

Two parts:Learning Plan: gathers and converts information into knowledge.Trust plan: assess trust level of each neighbor using stored knowledge and recommendations. 11

Trust Model: Components

12

Trust Model: Components Behavior monitor observes network, indicates new neighbors to Rec Manager, and send behavior report to Classifier. Classifier sends behavior classification to Experience Calculator. Trust Calculator calculates trust with inputs from experiences and recommendations. Auxiliary Trust Table entries correspond to relationship maturity. Trust table entries have timeout.13

Trust Model: Components

Three operation modes:Simple: Just trust table, REP optionalIntermediate: Simple mode plus storage of recommendationsAdvanced: Complete system implementation.

Recommendation Manager implements REP. All nodes are in advanced mode in this paper.

14

Trust level evaluation

() = (1 )() + ()

() = () + (1 )()

Ta(b) ->Trust calculation from node a for node b Qa(b) -> Personal ExperienceRa(b) -> Recommendations

All variables(except a & b) range from 0 to 1.15

Recommendation Computation

subset of neighbors() relationship Maturity() random variable with normal distribution representing recommendation uncertainty.() = ((), ())

16

First Trust Values

Initial trust values can be: Prudent : Strangers have low trust valueOptimist: High trust in new neighbors.Moderate: Trust value between Prudent and optimist.Fa First trust value

() = (1 ) + ()

17

Recommendation Exchange Protocol

Only one hop neighbors considered. ( IP TTL=1)

Consists of:TREQ: Trust RequestTREP: Trust ReplyTA: Trust Advertisement18

REPTREQ sent when nodes first meet, with IP of new neighbor as target node. Wait time tREQ before sending TREQ

TREP sent by neighbors who have target node as their neighbor, after waiting for random time period tREP

TA sent if trust level changes by threshold

19

Authentication

A pair of public-private key for each node is sufficient for the system to work.

Sybil attack would not be a problem since the malicious identities are quickly found and ignored. 20

Trust Model Implementation

Learning Plan

21

Nature of nodes vary from 0 (untrustworthy) to 1 (trustworthy)

A node with nature of 0.8 would do 8 good actions out of 10.

Behavior Monitor is emulated by concept of perception, which indicates probability of noticing a certain action.

Classifier (perfectly) classifies actions.22

Node will decide for itself whether or not it will use behavior monitor in promiscuous mode. Required perception value and personal constraints would help in this decision.

Experience Calculator observes imin actions before calculating trust. Higher perception would result in more accurate trust level. But higher imin means higher convergence time.

Paper assumes imin =10 23

Results: Small networks

All nodes are at one hop distance.

Time in seconds.Convergence at t=350 for = = = 0.5

24

Results: Small networksOptimistic first trust strategy.

Time in minutes.Nature set to 0.2 .

Number of neighbors varied.

25

Results: Small networksNeighbors =15

Varying alpha

26

Results: Small networksPerception is the fraction of actions a node can notice from its neighbors

Varying

27

Results: Multihop MANetsAnalyzing movement in more complex networks.21 nodes with 250m transmission range, placed in 1000 m 400 m . = = = 0.5First trust optimist (0.9)Nature of nodes = 0.2

28

Results: Multihop m1 keeps 3 old neighborsm2 has no old neighbors

29

Results: Multihop m1 keeps 3 old neighborsm2 has no old neighbors

30

Results: Multihop Node speeds three times faster.

31

Results: Multihop Varying perception lower perception takes longer time to converge.

32

Results: Relationship maturityNode 1,8,15 go to zone F2.

Evaluating trust level of node 8 about node 20

33

Results: Relationship maturityUsing lower perception value(0.2)

Note that recommendations are important in low perception cases

34

Results: Lying Attacks20 nodes -250m transmission range, placed in a150 m 150m

Node 1 changes nature from 0.9 to 0.2

35

Results: Lying AttacksMalicious nodes fixed at 40%

36

Results: Lying AttacksSlander Attack

Node2 evaluating node1 which has nature 0.9

Pessimistic strategy (Fa=0.1)

37

Results: Lying AttacksSlander Attack

Varying alpha

38

Results: Lying AttacksSlander Attack

Varying perception parameter.

39

Results: Lying AttacksSlander Attack

Malicious nodes lie after t=200

40

Results: Lying AttacksSlander Attack

Malicious nodes identification time varying

41

Results: Lying AttacksSlander Attack

Malicious nodes identification time varying

42

REPTo reduce number of messages sent across network: TREQ is sent once containing multiple target nodes, using timer based approach. TREP instead of sending once per request, implemented as broadcast this saves 85% TREP implemented, additionally, with timer, saves 99% messages. TA implemented with a threshold to reduce its occurrence.43

REP

44

REP

Changing the value of Trust threshold()

45

REPChanging the value of Trust threshold() and its impact on trust levels.

46

Discussion Using smart timers in suppressing redundant messages scales well in large networks, reducing overhead for trust management by 85 to 99%. Increasing value of improves the trust model efficiency, since we can use already derived results (by neighbors) in the form of recommendations.

47

Conclusion Flexible trust evaluation model proposed based on concept of human trust, which uses recommendations and relationship maturity. Recommendation Exchange Protocol (REP) proposed. Model highly scalable since only neighbors consulted. Model tolerates 35 % liars Trust level error reduced by 50% by using relationship maturity parameter.

48

Thank You!49