Main Article Content
Abstract
Mobile Ad Hoc networks are self-organizing networks in which nodes can transfer data between each other by direct connection or by using neighbors node, these nodes runs on battery and to keep them active in network battery life must be efficiently utilized. Mobile Ad Hoc networks can also be attack by malicious nodes to disturb network services; various types of attacks are available such as black hole (in this attack neighbor accepts data from source and drop all packets instead of sending to destination) grey hole (in this attack chosen some packets will be drop and rest sent to destination) worm hole (in this attack neighbor will use another malicious neighbor to transfer data and form a tunnel instead of sending to destination). To avoid such attacks Intrusion Detection Systems are developed and will be run in nodes all the time to monitor nodes behavior, If any nodes dropping packets then this IDS will detect and inform to other nodes about this nodes behavior. Running all the time IDS can consume much battery power and node lifetime can be reduce, to overcome from such issue we introduce concept called Efficient IDS Usage, in this technique a single node with high battery is responsible to monitor behavior of all neighbor nodes in its proximity and other nodes IDS will be in inactive state to save their battery for future use, if selected monitoring nodes energy drop to certain level then another node with high battery will be chosen as next monitoring node. In this paper at the time of network setup all nodes will discover their one hop neighbor and choose one node with high battery as monitoring node and make that node IDS active to monitor them, leftover nodes will be instruct to go to idle or inactive state to save their energy for future use. In a region whatever node sends packet then node with IDS will intercept that packet and perform filteration on that packet to detect abnormal behavior. If packet contains valid data then it will forward to destination otherwise packet will be drop at IDS node.