Skip to main content

Table 1 Comparison of Single Black Hole Attack Detection Schemes

From: A survey of black hole attacks in wireless mobile ad hoc networks

Schemes Routing protocol Simulator Detection type Publication year Results Defects
Neighborhood-based and Routing Recovery [26] AODV NS-2 Single detection 2003 The probability of one attacker can be detected is 93% Failed when attackers cooperate to forge the fake reply packets
Redundant Route and Unique Sequence Number Scheme [27] AODV NS-2 Single detection 2004 Verify 75% to 98% of the routes Attackers can listen to the channel and update the tables for last sequence number
Time-based Threshold Detection Scheme [28] Secure AODV (SAODV) GloMoSim Single detection 2007 The PDR of SAODV is around 90 to 100% when AODV is around 80% The end-to-end delay increases when the malicious node is away from source node
Random Two-hop ACK and Bayesian Detection Scheme [29] DSR GloMoSim-based Cooperative detection 2007 The true positive rate can achieve 100% when existing 2 witness The proposed scheme is not efficient when k equals to 3, reducing the true positives
REAct [30] DSR - Single detection 2009 Reduces the communication overhead but enlarges the identification delay The binary search method is easily expose audit node's information
DPRAODV [31] AODV NS-2 Single detection 2009 The PDR is improved by 80-85% than AODV when under black hole attack A little bit higher routing overhead and end-to-end delay than AODV
Next Hop Information Scheme [32] AODV NS-2 Single detection 2010 The PDR is improved by 40-50% and the number of packets dropped is decreased by 75-80% than AODV Few additional delay
Nital Mistry et al.'s Method [33] AODV NS-2 Single detection 2010 The PDR is improved by 81.811% when network size varying, and rise 70.877% when mobility varying Rise in end-to-end delay is 13.28% when network size varying, and rise 6.28% when mobility varying
IDS based on ABM [34] MAODV NS-2 Single detection 2010 The packet loss rate can be decreased to 11.28% and 14.76% Cooperative isolation the malicious node, but failed at collaborative black hole attacks
  1. -: means unmentioned