A Novel Metric for Detection of Jellyfish Reorder Attack on Ad Hoc Network

Ad Hoc networks are susceptible to many attacks due to its unique characteristics such as open network architecture, stringent resource constraints, shared wireless medium and highly dynamic topology. The attacks can be of different types out of which denial of service is one of the most difficult attacks to detect and defend. Jellyfish is a new denial of service attack that exploits the end to end congestion control mechanism of TCP (Transmission Control Protocol) which has a very devastating effect on the throughput. The architecture for detection of such attack should be both distributed and cooperative to suit the needs of wireless adhoc networks that is every node in the wireless ad-hoc network should participate in the intrusion detection. We intend to develop an algorithm that detects the jellyfish attack at a single node and that can be effectively deployed at all other nodes in the ad hoc network. We propose the novel metric that detects the Jellyfish reorder attack based on the Reorder Density which is a basis for developing a metric. The comparison table shows the effectiveness of novel metric, it also helps protocol designers to develop the counter strategies for the attack. Index Terms jellyfish attack, Percentage of Late Packets (PL), Mean Displacement of Packets (MD), Mean displacement of late packets (ML), Reorder Entropy(ER).