1© BAE Systems and Ericsson 2005. All rights reserved
Mikael Fredin - Ericsson Microwave Systems, SwedenLeif Axelsson - Ericsson Microwave Systems, Sweden
Andrew McCabe – BAE SYSTEMS ATC, UKAlan Cullen - BAE SYSTEMS ATC, UK
The authors gratefully acknowledge the support of their colleagues in BAE SYSTEMS plc, Ericsson Microwave Systems AB and EricssonTelebit A/S, and the support from the UK, Swedish and Danish MoDs under the EUCLID/Eurofinder programme, Project RTP6.22
(B2NCW).
Vulnerability modelling of ad hoc routing protocols – a comparison of OLSR and DSR
5th Scandinavian Workshop on Wireless Ad-hoc NetworksMay 3-4, 2005
© BAE Systems and Ericsson 2005. All rights reserved 2
Contents• Goals• OLSR/DSR Recap (key points) • Modelling Overview
– Node Model– Simulation Scenarios– Radio model– Jamming model
• Simulation results• Visualisation of jamming• Additional investigations / protocol optimisations• Conclusions
© BAE Systems and Ericsson 2005. All rights reserved 3
Goals
• To carry out vulnerability modelling of two contrasting ad hoc routing protocols, one reactive (DSR), and one proactive (OLSR)
• In particular, to investigate the effect a jammer has on a network of static sensors in the following scenarios:– Different network sizes: 30 nodes and 70 nodes– Different jamming powers and duty cycles– Different jammer positions (Central and corner locations)– Medium radio transmit power (~10% packet lost at 250 units)
© BAE Systems and Ericsson 2005. All rights reserved 4
OLSR Refresher (key points)
• OLSR is a proactive protocol:– Routing messages are sent at ‘regular’ intervals, regardless of user traffic:
• All nodes broadcast HELLO messages.• Only a subset of the nodes (the MPR nodes) flood TC messages.
• Only the MPR nodes may relay user traffic.• Different message periods may be used
=> trade-off between responsiveness and overheads.
• Option to use link quality information (link layer notifications) from the lower layer, to prevent the use of poor quality links.
• Routing messages may be brought forward (sent immediately) when topology change is detected (e.g. due to mobility, or during startup)
© BAE Systems and Ericsson 2005. All rights reserved 5
DSR Refresher (key points)
• Reactive (on-demand) routing protocol– Routing information only exchanged when data is sent– Main mechanisms: route discovery and route maintenance
• Known routes are cached locally in each node (route cache). – If a valid route does not exist in the local cache, a route discovery packet is flooded
across the network. Wait for route reply.
• User packets include source route and maintenance overheads– All user packets carry a full source route as overhead.– Optionally route maintenance can be applied to each packet.
• Route maintenance detects broken links– If a packet cannot be forwarded (broken route) a route error packet is sent back to the
packet source node. – Node that detects the broken link tries to salvage the packet.
© BAE Systems and Ericsson 2005. All rights reserved 6
OLSR & DSR: OPNET Implementation
• Results produced using OPNET Modeller environment
• OLSR– Proprietary implementation (platform independent C++ code)
• Interfaced to OPNET 10.5A (PL3) via a custom ‘wrapper’ process • Fully compatible with RFC 3626• Includes an implementation option to enforce a minimal intervals between
successive messages.
• DSR– Using the standard DSR model supplied with OPNET 10.5A (PL1)
(this model not 100% compliant with DSR draft 9)
© BAE Systems and Ericsson 2005. All rights reserved 7
Modelling Overview
Rx
MAC
IP
APP
Tx
ARP
UDP
OLSR
DSR
Node model
• Ad-hoc Nodes contain:• Ad Hoc Routing protocol (OLSR or DSR)• Application process (source/sink of user traffic)• IP stack • Radio communications
• Statistics collected on:• The percentage of user packets sent by each node that are
successfully delivered to their intended destination• Average hop counts for delivered user packets • Routing overhead transmitted onto the network
Tx
Jammer Node Pulse lengthDuty cycleJammer Power
Packetgenerator
• Jammer Node contains:• Packet generator• Radio transmitter
© BAE Systems and Ericsson 2005. All rights reserved 8
Modelled Scenarios:• Ad hoc nodes, randomly positioned within 500 x 500 world
• multiple simulation runs: different node positions and user traffic
• Number of nodes: 30, 70• No mobility (nodes assumed stationary)• ‘Medium’ radio power used for ad-hoc transmissions• Jammer node placed at:
– centre of world– one corner of world
• 3 different jammer power used– 10%, 100%, 1000% (relative to ad hoc node transmit power)
• Various jammer pulse lengths and duty cycles• User Traffic: Each node sends one 1024-bit user packet per sec to a random destination
– Used only to monitor traffic route-ability/connection– Not concerned with collision/congestion etc (implementation-
specific)
30 nodes, central jammer (LLN links)
70 nodes, corner jammer (LLN links)
© BAE Systems and Ericsson 2005. All rights reserved 9
SNR (jamming) -> BER -> Pr{packet error}
SNR (no Jamming) -> BER -> Pr{packet error}
Model takes account of how much of the packet is jammed:
SNR3SNR2 SNR1
SNR2 -> BER2SNR1 -> BER1
Propagation Model
• SNR-based propagation model• Packet reception probability depends on:
• Distance of transmitter from receiver• Distance of jammer from receiver
=> same for T1, T2 and T3
R J
T2
T1
T3
dist-N dist-J
BackgroundNoise
Jamming InterferenceWanted signal
××××=
hTxBandwidtverlapBandwidthORxAGainPathLossTxAGainTxPowerRxPower
= 22
2
16 DPathLoss
πλ
+
=NoiseBackgroundceNoiseInterferen
werRxSignalPoLogSNR 1010
BER = Function of {modulation type, SNR}
Packet Loss Rate = Function of {BER, no of bits}
Expected Packet Loss RateMedium Power - No Jamming
0.00001
0.0001
0.001
0.01
0.1
1
0 50 100 150 200 250 300 350 400 450
Propagation Distance
Loss
rate
1384 bits 584 bits Old Model
© BAE Systems and Ericsson 2005. All rights reserved 10
• Simulation Results:– User Traffic: Percentage successfully delivered– User Traffic: Average hop count– Routing overhead: Messages transmitted per node – OLSR , DSR , Comparisons – Jammer Effectiveness / Figure of Merit
• Visualisation of jamming
• Additional investigations / optimisations:
• Summary / Conclusions
© BAE Systems and Ericsson 2005. All rights reserved 11
User data delivered successfully (30 nodes, jammer in centre)
0%
10%
20%
30%
40%
50%
60%
70%
80%
90%
100%
50us
/ 50
0us
50us
/ 5m
s
50us
/ 50
ms
5ms
/ 50m
s
5ms
/ 500
ms
5ms
/ 5s
0.5s
/ 5s
0.5s
/ 50
s
0.5s
/ 50
0s
Con
tinuo
us
Burst type
Prop
ortio
n de
liver
ed
10% OLSROLSR baseline
User data delivered successfully (30 nodes, jammer in centre)
0%
10%
20%
30%
40%
50%
60%
70%
80%
90%
100%
50us
/ 50
0us
50us
/ 5m
s
50us
/ 50
ms
5ms
/ 50m
s
5ms
/ 500
ms
5ms
/ 5s
0.5s
/ 5s
0.5s
/ 50
s
0.5s
/ 50
0s
Con
tinuo
us
Burst type
Prop
ortio
n de
liver
ed
10% OLSR100% OLSROLSR baseline
User data delivered successfully (30 nodes, jammer in centre)
0%
10%
20%
30%
40%
50%
60%
70%
80%
90%
100%
50us
/ 50
0us
50us
/ 5m
s
50us
/ 50
ms
5ms
/ 50m
s
5ms
/ 500
ms
5ms
/ 5s
0.5s
/ 5s
0.5s
/ 50
s
0.5s
/ 50
0s
Con
tinuo
us
Burst type
Prop
ortio
n de
liver
ed
10% OLSR100% OLSR1000% OLSROLSR baseline
User Packets delivered: 30 Nodes, Centre Jammer
User data delivered successfully (30 nodes, jammer in centre)
0%
10%
20%
30%
40%
50%
60%
70%
80%
90%
100%
50us
/ 50
0us
50us
/ 5m
s
50us
/ 50
ms
5ms
/ 50m
s
5ms
/ 500
ms
5ms
/ 5s
0.5s
/ 5s
0.5s
/ 50
s
0.5s
/ 50
0s
Con
tinuo
us
Burst type
Prop
ortio
n de
liver
ed 10% DSR10% OLSR100% OLSR1000% OLSROLSR baseline
User data delivered successfully (30 nodes, jammer in centre)
0%
10%
20%
30%
40%
50%
60%
70%
80%
90%
100%
50us
/ 50
0us
50us
/ 5m
s
50us
/ 50
ms
5ms
/ 50m
s
5ms
/ 500
ms
5ms
/ 5s
0.5s
/ 5s
0.5s
/ 50
s
0.5s
/ 50
0s
Con
tinuo
us
Burst type
Prop
ortio
n de
liver
ed 10% DSR100% DSR10% OLSR100% OLSR1000% OLSROLSR baseline
User data delivered successfully (30 nodes, jammer in centre)
0%
10%
20%
30%
40%
50%
60%
70%
80%
90%
100%
50us
/ 50
0us
50us
/ 5m
s
50us
/ 50
ms
5ms
/ 50m
s
5ms
/ 500
ms
5ms
/ 5s
0.5s
/ 5s
0.5s
/ 50
s
0.5s
/ 50
0s
Con
tinuo
us
Burst type
Prop
ortio
n de
liver
ed
10% DSR100% DSR1000% DSR10% OLSR100% OLSR1000% OLSROLSR baseline
User data delivered successfully (30 nodes, jammer in centre)
0%
10%
20%
30%
40%
50%
60%
70%
80%
90%
100%
50us
/ 50
0us
50us
/ 5m
s
50us
/ 50
ms
5ms
/ 50m
s
5ms
/ 500
ms
5ms
/ 5s
0.5s
/ 5s
0.5s
/ 50
s
0.5s
/ 50
0s
Con
tinuo
us
Burst type
Prop
ortio
n de
liver
ed
10% DSR100% DSR1000% DSRDSR baseline10% OLSR100% OLSR1000% OLSROLSR baseline
[10% 1% 0.1%] [10% 1% 0.1%] [10% 1% 0.1%] [100%]
© BAE Systems and Ericsson 2005. All rights reserved 12
Hop counts (30 nodes, jammer in centre)
0.0
0.5
1.0
1.5
2.0
2.5
3.0
50us
/ 50
0us
50us
/ 5m
s
50us
/ 50
ms
5ms
/ 50m
s
5ms
/ 500
ms
5ms
/ 5s
0.5s
/ 5s
0.5s
/ 50
s
0.5s
/ 50
0s
Con
tinuo
us
Burst type
Hop
cou
nt
OLSR baseline
User Packet Hop Counts (30 Nodes, Centre Jammer)
Hop counts (30 nodes, jammer in centre)
0.0
0.5
1.0
1.5
2.0
2.5
3.0
50us
/ 50
0us
50us
/ 5m
s
50us
/ 50
ms
5ms
/ 50m
s
5ms
/ 500
ms
5ms
/ 5s
0.5s
/ 5s
0.5s
/ 50
s
0.5s
/ 50
0s
Con
tinuo
us
Burst type
Hop
cou
nt
10% OLSR100% OLSR1000% OLSROLSR baseline
Hop counts (30 nodes, jammer in centre)
0.0
0.5
1.0
1.5
2.0
2.5
3.0
50us
/ 50
0us
50us
/ 5m
s
50us
/ 50
ms
5ms
/ 50m
s
5ms
/ 500
ms
5ms
/ 5s
0.5s
/ 5s
0.5s
/ 50
s
0.5s
/ 50
0s
Con
tinuo
us
Burst type
Hop
cou
nt
DSR baseline10% OLSR100% OLSR1000% OLSROLSR baseline
Hop counts (30 nodes, jammer in centre)
0.0
0.5
1.0
1.5
2.0
2.5
3.0
50us
/ 50
0us
50us
/ 5m
s
50us
/ 50
ms
5ms
/ 50m
s
5ms
/ 500
ms
5ms
/ 5s
0.5s
/ 5s
0.5s
/ 50
s
0.5s
/ 50
0s
Con
tinuo
us
Burst type
Hop
cou
nt
10% DSR100% DSR1000% DSRDSR baseline10% OLSR100% OLSR1000% OLSROLSR baseline
[10% 1% 0.1%] [10% 1% 0.1%] [10% 1% 0.1%] [100%]
© BAE Systems and Ericsson 2005. All rights reserved 13
Routing Messages Transmitted (30Nodes, Centre Jammer)Routing Messages Transmitted
(30 Nodes, jammer in centre)
0
1
2
3
4
5
50us
/ 50
0us
50us
/ 5m
s
50us
/ 50
ms
5ms
/ 50m
s
5ms
/ 500
ms
5ms
/ 5s
0.5s
/ 5s
0.5s
/ 50
s
0.5s
/ 50
0s
Con
tinuo
us
Burst type
Mes
sage
s tr
ansm
itted
per
nod
e pe
r sec
10% OLSR100% OLSR1000% OLSROLSR baseline
Routing Messages Transmitted(30 Nodes, jammer in centre)
0
5
10
15
20
25
50us
/ 50
0us
50us
/ 5m
s
50us
/ 50
ms
5ms
/ 50m
s
5ms
/ 500
ms
5ms
/ 5s
0.5s
/ 5s
0.5s
/ 50
s
0.5s
/ 50
0s
Con
tinuo
us
Burst type
Mes
sage
s tr
ansm
itted
per
nod
e pe
r sec
10% OLSR100% OLSR1000% OLSROLSR baseline
Routing Messages Transmitted(30 Nodes, jammer in centre)
0
5
10
15
20
25
50us
/ 50
0us
50us
/ 5m
s
50us
/ 50
ms
5ms
/ 50m
s
5ms
/ 500
ms
5ms
/ 5s
0.5s
/ 5s
0.5s
/ 50
s
0.5s
/ 50
0s
Con
tinuo
us
Burst type
Mes
sage
s tr
ansm
itted
per
nod
e pe
r sec
10% DSR100% DSR1000% DSRDSR baseline10% OLSR100% OLSR1000% OLSROLSR baseline
[10% 1% 0.1%] [10% 1% 0.1%] [10% 1% 0.1%] [100%]
© BAE Systems and Ericsson 2005. All rights reserved 14
Jammer Effectiveness (30 Nodes, Centre Jammer)Jammer Effectiveness
30 Nodes : Central Jammer
0%
10%20%
30%
40%50%
60%
70%
80%90%
100%N
oJam
min
g
50us
/ 50
ms
: 10%
JPw
r, 0
.01%
avg
pw
r
5ms
/ 5s
: 10%
JPw
r, 0
.01%
avg
pw
r
50us
/ 5m
s : 1
0% J
Pwr,
0.1
% a
vg p
wr
5ms
/ 500
ms
: 10%
JPw
r, 0
.1%
avg
pw
r
0.5s
/ 50
s : 1
0% J
Pwr,
0.1
% a
vg p
wr
50us
/ 50
ms
: 100
% J
Pwr,
0.1
% a
vg p
wr
5ms
/ 5s
: 100
% J
Pwr,
0.1
% a
vg p
wr
50us
/ 50
0us
: 10%
JPw
r, 1
% a
vg p
wr
5ms
/ 50m
s : 1
0% J
Pwr,
1%
avg
pw
r
0.5s
/ 5s
: 10
% J
Pwr,
1%
avg
pw
r
50us
/ 5m
s : 1
00%
JPw
r, 1
% a
vg p
wr
5ms
/ 500
ms
: 100
% J
Pwr,
1%
avg
pw
r
0.5s
/ 50
s : 1
00%
JPw
r, 1
% a
vg p
wr
50us
/ 50
ms
: 100
0% J
Pwr,
1%
avg
pw
r
5ms
/ 5s
: 100
0% J
Pwr,
1%
avg
pw
r
Con
tinuo
us :
10%
JPw
r, 1
0% a
vg p
wr
50us
/ 50
0us
: 100
% J
Pwr,
10%
avg
pw
r
5ms
/ 50m
s : 1
00%
JPw
r, 1
0% a
vg p
wr
0.5s
/ 5s
: 10
0% J
Pwr,
10%
avg
pw
r
50us
/ 5m
s : 1
000%
JPw
r, 1
0% a
vg p
wr
5ms
/ 500
ms
: 100
0% J
Pwr,
10%
avg
pw
r
0.5s
/ 50
s : 1
000%
JPw
r, 1
0% a
vg p
wr
Con
tinuo
us :
100%
JPw
r, 1
00%
avg
pw
r
50us
/ 50
0us
: 100
0% J
Pwr,
100
% a
vg p
wr
5ms
/ 50m
s : 1
000%
JPw
r, 1
00%
avg
pw
r
0.5s
/ 5s
: 10
00%
JPw
r, 1
00%
avg
pw
r
Con
tinuo
us :
1000
% J
Pwr,
100
0% a
vg p
wr
user
pac
kets
del
iver
edOLSR DSR
© BAE Systems and Ericsson 2005. All rights reserved 15
Jammer Figure of Merit (30 Nodes, Centre Jammer) Jammer Figure of Merit
30 Nodes : Central Jammer
0.1
1.0
10.0
100.0
1000.0
50us
/ 50
ms
: 10%
JP
wr,
0.0
1% a
vg p
wr
5ms
/ 5s
: 10%
JP
wr,
0.0
1% a
vg p
wr
50us
/ 5m
s : 1
0% J
Pw
r, 0
.1%
avg
pw
r
5ms
/ 500
ms
: 10%
JP
wr,
0.1
% a
vg p
wr
0.5s
/ 50
s : 1
0% J
Pw
r, 0
.1%
avg
pw
r
50us
/ 50
ms
: 100
% J
Pw
r, 0
.1%
avg
pw
r
5ms
/ 5s
: 100
% J
Pw
r, 0
.1%
avg
pw
r
50us
/ 50
0us
: 10%
JP
wr,
1%
avg
pw
r
5ms
/ 50m
s : 1
0% J
Pw
r, 1
% a
vg p
wr
0.5s
/ 5s
: 10
% J
Pw
r, 1
% a
vg p
wr
50us
/ 5m
s : 1
00%
JP
wr,
1%
avg
pw
r
5ms
/ 500
ms
: 100
% J
Pw
r, 1
% a
vg p
wr
0.5s
/ 50
s : 1
00%
JP
wr,
1%
avg
pw
r
50us
/ 50
ms
: 100
0% J
Pw
r, 1
% a
vg p
wr
5ms
/ 5s
: 100
0% J
Pw
r, 1
% a
vg p
wr
Con
tinuo
us :
10%
JP
wr,
10%
avg
pw
r
50us
/ 50
0us
: 100
% J
Pw
r, 1
0% a
vg p
wr
5ms
/ 50m
s : 1
00%
JP
wr,
10%
avg
pw
r
0.5s
/ 5s
: 10
0% J
Pw
r, 1
0% a
vg p
wr
50us
/ 5m
s : 1
000%
JP
wr,
10%
avg
pw
r
5ms
/ 500
ms
: 100
0% J
Pw
r, 1
0% a
vg p
wr
0.5s
/ 50
s : 1
000%
JP
wr,
10%
avg
pw
r
Con
tinuo
us :
100%
JP
wr,
100
% a
vg p
wr
50us
/ 50
0us
: 100
0% J
Pw
r, 1
00%
avg
pw
r
5ms
/ 50m
s : 1
000%
JP
wr,
100
% a
vg p
wr
0.5s
/ 5s
: 10
00%
JP
wr,
100
% a
vg p
wr
Con
tinuo
us :
1000
% J
Pw
r, 1
000%
avg
pw
r
(% u
ser p
acke
ts lo
st) /
(avg
e ja
mm
er p
ower
)OLSR DSR
This Figure of Merit emphasises packets lost
per unit of jamming power
© BAE Systems and Ericsson 2005. All rights reserved 16
• Simulation Results:– Traffic delivered– Hop count– Routing messages transmitted– Comparisons / Figure of Merit
• Visualisation of jamming
• Additional investigations / optimisations:
• Summary / Conclusions
© BAE Systems and Ericsson 2005. All rights reserved 17
Probability of packet loss under Jamming
Depends on: Jammer Tx Power (relative to ad-hoc node transmit power): Relative distance of jammer and source node from the receiving node (key factor): Packet size (weak dependence).
Note the narrow transition region - due to the rapid BER vs SNR falloff
0 100 200 300 400 5000
100
200
300
400
500
Jammer Distance
Node Separation
Probability of packet loss:Packet Size: 1384 bits; Jammer Power 1000%
0.0%-20.0% 20.0%-40.0% 40.0%-60.0% 60.0%-80.0% 80.0%-100.0%
0 100 200 300 400 5000
100
200
300
400
500
Jammer Distance
Node Separation
Probability of packet loss:Packet Size: 1384 bits; Jammer Power 100%
0 100 200 300 400 5000
100
200
300
400
500
Jammer Distance
Node Separation
Probability of packet loss:Packet Size: 1384 bits; Jammer Power 10%
Background noise asymptote
© BAE Systems and Ericsson 2005. All rights reserved 18
Visualisation of Jamming in a 30 node Network
10% jammer power
CentreJammer
100% jammer power 1000% jammer power
Green links: (good) have better than 50% success in both directions.
Red Links: (asymmetric)have better than 50% success in only one direction, worse than 50% success in other direction.
Yellow Links: (bad) worse than 50% delivered in both directions
* Only showing LLN links here *(not so easy to draw for non-LLN case)
© BAE Systems and Ericsson 2005. All rights reserved 19
• Simulation Results:– Traffic delivered– Hop count– Routing messages transmitted– Comparisons / Figure of Merit
• Visualisation of jamming
• Additional investigations / optimisations:
• Summary / Conclusions
© BAE Systems and Ericsson 2005. All rights reserved 20
Additional investigations / optimisations
• 70 node networks– Jammer in corner/centre
• OLSR minimal intervals– Pulsed jamming can lead to significant increases in the OLSR routing overhead transmitted onto the network.– This can be countered by enforcing a minimum interval between successive OLSR transmissions.– Minimum intervals up to the default message intervals have little adverse effect on user traffic delivery.
• OLSR Link Layer Notification– Hop counts higher when LLNs used– User packet delivery better when LLNs are used– Routing overhead higher when LLNs are used (more MPRs, more hops)
• DSR Route Maintenance, salvaging and retransmissions– User packet delivery better when salvaging is used– User packet delivery also better when retransmissions are used– Routing overhead higher when salvaging and/or retransmission are used– Route maintenance increases the routing overhead but also increases user packet delivery
© BAE Systems and Ericsson 2005. All rights reserved 21
• Simulation Results:– Traffic delivered– Hop count– Routing messages transmitted– Comparisons / Figure of Merit
• Visualisation of jamming
• Additional investigations / optimisations:
• Summary / Conclusions
© BAE Systems and Ericsson 2005. All rights reserved 22
Summary & Conclusions: Generalities
• Long distance links are more susceptible to jamming than short links.– During jamming, an ideal routing protocol would aim to use a route with
many short hops in preference to a route with a few long hops.– Both protocols tended to use shorter hops when the jamming was
continuous (i.e. when it was clear that certain links were non-operational)– Neither protocol succeeded in converging towards shorter hops in the
presence of pulsed jamming
• In general, OLSR packet delivery rates were better than DSR– Mainly due to OLSR’s use of Link Layer Notifications (LLNs)
• OLSR selected shorter hops which are more robust to jamming– However DSR has salvaging
• No benefits over OLSR under severe jamming, where frequently no alternative route would be available.
• Succeeded in a few cases of less severe jamming.
© BAE Systems and Ericsson 2005. All rights reserved 23
Summary & Conclusions: Routing Overhead
• OLSR– With OLSR’s responsiveness to topology changes constrained by
enforcing minimum intervals between successive transmissions:• The overhead increase during jamming is relatively small (typically <30%).• During severe jamming, the overhead falls due to network fragmentation.
– When shorter OLSR minimum intervals were used• The routing overhead increased significantly (by OOM for fast pulsed jamming)• Little change in user traffic delivery performance.
• DSR– Under some jamming conditions there were repeated unsuccessful
searches for unreachable destinations - this causing up to a factor of 10 increase in overhead
• Familiar weakness with reactive protocols• Serious problem due to additional network load and power consumption
© BAE Systems and Ericsson 2005. All rights reserved 24
Summary & Conclusions (cont)
• Hop counts– Higher for OLSR than DSR during jamming
• Mainly due to OLSR’s use of LLNs, resulting in OLSR using shorter links but needing more hops.
• Jammer duty cycles– Matching the jamming cycles to the OLSR “HELLO” or “TC” default
message intervals did not provide any additional jammer advantage.• OLSR’s message ‘jitter’ helps to mitigate against this type of attack• Synchronising jamming to actual OLSR emissions would most likely provide a
jammer advantage - not tested as part of this work– DSR does not emit routing messages to a fixed cycle time and is therefore
not additionally susceptible to any specific cycle.
© BAE Systems and Ericsson 2005. All rights reserved 25
Summary & Conclusions (cont)
• A possible enhancement to DSR is to flood the “route error” message locally, rather than sending it right back to the source, so that nodes around a failing link are notified sooner.
• Jammer planning– A jammer placed at the geographical centre is more disruptive than a
jammer placed at the corner of the network (as expected).– Using multiple low power jammers is more a power efficient way of
disrupting a network than using a single high power jammer.