Patent ID: 8122505
Filing Date: 2012-02-21
Classification: H04L,H04W

Abstract:
1. A method to detect malicious behavior in a mobile ad-hoc network, the method comprising: establishing a decoy instance of actual node operating software on an actual node in a mobile ad-hoc network, the decoy instance comprising a copy of the actual node operating software running on the actual node and configured to appear as an actual separate physical node in the mobile ad-hoc network; generating routing information indicating that communication paths directly between nodes external to the mobile ad-hoc network and the decoy instance comprise higher latency and larger loss rates than communication paths between the external nodes and the decoy instance that pass through a real system instance of the node operating software on the actual node; communicating the generated routing information to the external nodes; monitoring communications involving the decoy instance and the external nodes; and detecting attempted routing by the external nodes of communication paths directly between the external nodes and the decoy instance in contradiction to the communicated routing information that indicates malicious behavior within the mobile ad-hoc network.