Dynamic Routing with Security Considerations
Chin-Fu Kuo, Member, IEEE, Ai-Chun Pang, Member, IEEE, and Sheng-Kun Chan
Abstract-Security has become one of the major issues for data communication over wired and wireless networks.
Different from the past work on the designs of cryptography algorithms and system infrastructures, we will process
a dynamic routing algorithm that could randomize delivery paths for data transmission. The algorithm is easy to
implement and compatible with popular routing protocols, such as Routing Information Protocol in wired networks
and Destination-Sequenced Distance vector protocol in wireless network, without introducing extra control
messages. An analytic study on the proposed algorithm is presented. And a series of simulation experiments are
conducted to verify the analytic results and to show the capability of the proposed algorithm.
Index Terms-Security-enhanced data transmission, dynamic routing, RIP .DSDV
1 INTRODUCTION
In the past, various security-enhanced measures have been proposed to improve the security of data transmission
over public [Link] work on security –enhanced dats transmission includes the designs of cryptography
algorithms and system infrastructures and security-enhanced routing methods. Their common objectives are often to
defeat various threats over the Internet including eavesdropping, spoofing, session hijacking, etc..
Among many well-known, designs for cryptography based system, the IP security (IPSEC)[23] and the Secure
Socket Layer.(SSL)[21] are popularly supporter and implemented in many system and platforms. Although IPSec
and SSL do greatly improve the security. Level for data Transmission, they unavoidably introduce substantial over-
heads [1],[7],[13],especially on gateway/host performance and effective network bandwidth. For example ,the data
transmission overhead is 5 cycle/bye over an Intel Pentium II with the linux IP stack alone,and the overhead increses
to 58 cycles/byte when Advanced Encryption Standard(AEs)[10] is adopted for encryption/decryption for IPsec[7].
Another alternative for security-enhanced data transmission is to dynamically route packets between each source
and its destination so that the chance for system break-in due to successful interception of consecutive packets for a
session is [Link] intention os security –enhanced routing is different from the adopting of multiple paths between
a source and a destination to increase the through put of data [Link] particular,Lou et al.[14],[15] prposed a
secure routing protocol to improve the security of end to end data transmission based on multiple path [Link]
set of multiple paths between each source and its destination is determined in an online fashion,and extra control
message exchanging is needed.
Bohaccek [Link] [2]*prposed a secure stochastic routing mechanism to improve routing [Link] to the work
prposed by Lou [Link][14],[15],a set of path is discovered for each source and its destination in an online fashion
based on message [Link] a mass of control message is [Link] and papavassilio[25] explred the
tradingof security level and traffic dispersion. The prposed a traffic dispersion scheme to reduce the probability of
eavesdropped information along the used paths provided that the set of data delivery paths is discovered in
[Link] excellent research results have been prposed for security –echanced dynamic routing ,manyof them
rely on the discovery of multiple paths either in an online or offline [Link] those online path searching
approaches,thhe discovery of multiple paths involves a significant number of controls signals over the [Link]
the other hand,the discovery of paths in an offline fashion might not be suitable to networks with a dynamic
changing [Link],we will propose a dynamic routing algorithm to provide scurtity-enhanced data
delivery without introducing any extra control messages. The object of this work is to explore a security-enhanced
dynamic routing algorithm based on distributed routing information widely supported in existing wired and wireless
networks. we aim at the randomization of delivery paths for data transmission to provide considerably small path
similarity(i.e the number of common links between two delivery paths) of two consecutive transmitted packets. The
proposed algorithm should be easy to implement and compatible with popular routing protocols, such as Routing
Information Protocol (RIP) for wired networks and Destination Sequenced Distance vector(DSDV) protocol for
wireless networks (20) over existing infrastructures. These protocols shall not increase the number of control
messages if the proposed algorithm is