# Hybrid Acknowledgment Punishment Scheme Based on Dempster-Shafer Theory for MANET

Mahdi Bounouni, Louiza Bouallouche-Medjkoune

► To cite this version:

Mahdi Bounouni, Louiza Bouallouche-Medjkoune. Hybrid Acknowledgment Punishment Scheme Based on Dempster-Shafer Theory for MANET. 6th IFIP International Conference on Computational Intelligence and Its Applications (CIIA), May 2018, Oran, Algeria. pp.436-447, 10.1007/978-3-319-89743-1_38. hal-01913881

HAL Id: hal-01913881

https://inria.hal.science/hal-01913881

Submitted on 6 Nov 2018

HAL is a multi-disciplinary open access
archive for the deposit and dissemination of sci-
entific research documents, whether they are pub-
lished or not. The documents may come from
teaching and research institutions in France or
abroad, or from public or private research centers.

L'archive ouverte pluridisciplinaire HAL, est
destinée au dépôt et à la diffusion de documents
scientifiques de niveau recherche, publiés ou non,
émanant des établissements d'enseignement et de
recherche français ou étrangers, des laboratoires
publics ou privés.

<figure><img src="image_1.png" /></figure>

Distributed under a Creative Commons Attribution 4.0 International License
# Hybrid Acknowledgment Punishment Scheme based on Dempster-Shafer Theory for MANET

Mahdi Bounouni¹,² and Louiza Bouallouche-Medjkoune¹

¹ LaMOS Research Unit, Faculty of Exact Sciences, University of Bejaia, Bejaia 06000, Algeria

² Faculty of Law and Political Sciences, University of Setif 2, Algeria
Bounouni@gmail.com
louiza_medjkoune@yahoo.fr

**Abstract.** In this paper, we cope with malicious nodes dropping packets to disrupt the well-functioning of mobiles ad hoc networks tasks. We propose a new hybrid acknowledgment punishment scheme based on Dempster Shafer theory, called HAPS. The proposed scheme incorporates three interactive modules. The monitor module monitors the behaviour of one-hop nodes in the data forwarding process. The reputation module assesses the direct and the indirect reputation of nodes using Dempster Shafer theory, which is a mathematical method, that can aggregate multiple recommendations shared by independent sources, while some of these recommendations might be unreliable. Since recommendations exchange between nodes consumes resources, a novel recommendation algorithm has been incorporated to deal with false dissemination attack and to minimize the recommendation traffic. The exclusion module punishes nodes regarded as malicious. The simulation results show that HAPS improves the throughput and reduces the malicious dropping ratio in comparison to existing acknowledgment scheme.

**Keywords:** Mobile ad hoc network, security, cooperation, Dempster Shafer theory, uncertainty

## 1 Introduction

Mobile ad hoc network (MANET) is a collection of wireless mobile nodes that are able to perform the network tasks without requiring a fixed infrastructure or centralized administration. The communication between nodes follows a multi-hop approach. This approach depends on the assumption that all mobile nodes cooperate. Nevertheless, this assumption cannot be ensured due to the MANET features including the distributed nature, resource constraint of nodes [1]. These features make MANET vulnerable to selfish and malicious nodes. Selfish nodes may refuse to relay packets for other nodes to preserve their resources. On the other hand, malicious nodes may drop all packets passing through them in order to disrupt the functioning of the networks activities. Therefore, to improve the network performance, it is critical to cope against the selfish and malicious behavior.
In the literature, one can categorize two types of related works dealing with selfish and malicious nodes dropping packets: credit-based schemes [3–7] and reputation-based schemes [2, 5, 8–10, 12, 13, 18–21, 24]. The goal of incentive-based schemes consists of encouraging nodes to relay packets for the benefits of other nodes by using credit. Node earns credits by relaying packets for other nodes and loses credits to send their packets. In the reputation-based schemes, each node monitors its one-hop nodes and computes their reputation values according to their behaviour. Almost of the reputation-based schemes use the watchdog technique [2] for the monitoring. However, this technique presents several feebleness as reported in [2, 11]. To deal with this feebleness, the acknowledgment technique is proposed in [12]. This technique permits to expand the range of neighbours monitoring to the two-hop by introducing a new kind of packet called TWOACK packet.

One of the recent scheme employing the acknowledgment technique is EAACK scheme [13]. EAACK can detect and punish malicious links. EAACK can effectively resolve some feebleness of the watchdog technique. However, EAACK is still vulnerable to other threats. (1) When nodes move faster, their neighbourhoods change often and therefore, malicious nodes have a several chances to drop more packets. Because, each new neighbour for malicious node forms a potential malicious link. This threat is inherited from TWOACK scheme [12], since TWOACK scheme can detect only malicious links and EAACK is based on TWOACK. (2) All requests initiated by malicious nodes are still relayed because the purpose is to relive malicious nodes from relaying data packets instead of punishing them.

To address the above threats, we propose a hybrid acknowledgment punishment scheme based on Dempster Shafer theory [14, 15, 23], called HAPS. HAPS scheme aims to enhance the performance of EAACK [13] by punishing malicious nodes more severely. HAPS is structured around three interactive modules: monitor, reputation, exclusion. The monitor module monitors the behavior of one-hop nodes in the data forwarding process. The reputation module computes the direct and indirect reputation values of neighbour nodes based on the information provided by the monitor module and the recommendations shared between nodes. We propose a new combination algorithm based on Dempster Shafer theory [14, 15] to compute the direct reputation value of the node. Thus, HAPS enables nodes to share their recommendations about other nodes, but only when it is necessary, and the combination of different recommendations is done based on Dempster Shafer Theory. The exclusion module punishes all nodes having reputation values smaller than the reputation threshold.

The remainder of this paper is organized as follows. In the section 2, We present some preliminaries on Dempster Shafer Theory. Section 3 is devoted to the adversarial model. In section 4, we present our proposed scheme (HAPS). In section 5, we examine the performance of HAPS via simulation and finally conclude the paper.
## 2 Preliminaries on Dempster-Shafer Theory

Dempster Shafer theory of evidence [14, 15] is a mathematical method, handling the uncertainty and the subjective judgment. This method is especially efficient in situation when there is a need to aggregate multiple evidences shared by independent sources while some shared evidences might be unreliable, imprecise or incomplete/ambiguous. Let $\varphi = \{A_1, \dots, A_n\}$ be a finite set of mutually exclusive and exhaustive hypotheses denoted as the frame of discernment, where $A_i$ are the individual hypotheses [22]. $2^{\varphi}$ denotes the possible subsets (or power set) of $\varphi$. In this section, we outline some basic concepts of Dempster Shafer theory.

**Definition 1 [15]**: A basic probability assignment function (BPA) or a mass function $m$ is a function that assigns to each subset of $\varphi$ a quantity of belief which is a number between 0 and 1. $m$ is defined from $2^{\varphi} \to [0, 1]$ and satisfying the following two constraints:

$$m(\emptyset) = 0 \quad \text{et} \quad \sum_{A \in \varphi} m(A) = 1 \qquad (1)$$

**Definition 2 [15]**: let $m: 2^{\varphi} \to [0, 1]$ be a mass function. The belief function $bel: 2^{\varphi} \to [0, 1]$ related to the mass function $m$ over $\varphi$ is defined as follows

$$bel(A) = \sum_{B \in A} m(B) \qquad (2)$$

$bel(A)$ corresponds to the total of belief given to the hypotheses A.

**Definition 3 [15]**: Dempsters rule of combination permits to combine independent evidences issued from independent sources by applying the orthogonal sum $\oplus$. Given two mass functions $m_1$ and $m_2$ over the same frame of discernment $\varphi$. According to the Dempsters rule of combination, $m_1$ and $m_2$ can be combined into a new mass function $m: 2^{\varphi} \to [0, 1]$ as follows:

$$m(C) = m_1(A) \oplus m_2(B) = \frac{\sum_{A_i \cap B_j = C} m_1(A_i) m_2(B_j)}{1 - K_{12}} \qquad (3)$$

Where $K_{12} = \sum_{A_i \cap B_j = \emptyset} m_1(A_i) m_2(B_j)$. $m(c)$ represents the mass function of the combined evidence and $K_{12}$ reflects the amount of conflicts between $m_1$ and $m_2$.

According to the Dempsters rule of combination, we can combine $n$ evidences as follows:

$$m_1 \oplus m_2 \dots \oplus m_n(C) = \frac{\sum_{C_1 \cap \dots \cap C_n = C} m_1(C_1) m_2(C_2) \dots m_n(C_n)}{1 - K_{1 \dots n}} \qquad (4)$$

Where $K = \sum_{C_1 \cap \dots \cap C_n = \emptyset} m_1(C_1) m_2(C_2) \dots m_n(C_n) < 1$.
## 3 Adversarial Model

According to their purposes, nodes may behave maliciously in order to degrade the network performance. In our paper, we suppose that malicious nodes may launch: (1) Black hole attack by dropping all data packets passing through them. (2) False dissemination attack by sharing fake recommendation to falsely improve or degrade the reputation value of the malicious or honest node, respectively.

## 4 The Proposed HAPS Scheme

HAPS scheme is structured around three interactive modules: monitor, reputation, exclusion.

### 4.1 Monitor Module

This module monitors the behaviour of one-hop nodes in the data forwarding process. HAPS employ the monitoring technique proposed in the EAACK scheme [13]. EAACK scheme is the result of the combination of three modes: ACK, S-ACK and MRA. In this paper, we implement only ACK and S-ACK modes. In the ACK mode, the destination node should send back an ACK packet to the source node for every data packet received. The S-ACK mode is similar to the TWOACK scheme. In the S-ACK mode, a new kind of packet called S-ACK is used. Each node forwarding data packets should send an S-ACK packet to the two-hop node in the opposite direction of the forwarding path.

<figure><img src="image_2.png" /><figcaption>Fig. 1. Monitoring scenario</figcaption></figure>

To illustrate the functioning of this technique, let $p = \{N_s, ..., N_i, N_j, N_k, ..., N_d\}$ the selected forwarding path, $<N_i, N_j, N_k> \in p$ a triplet of nodes taken as an example (see Fig. 1). List<ID> denotes the list of ID of data packets sent or forwarded waiting to be acknowledged. The source $N_s$ sends data packets to the
destination $N_d$ through the path $p$. In the startup, the ACK mode is employed. In this mode, $N_s$ adds the ID of each data packet sent $D$ to $List_{ID}$. Each ID is maintained for $\theta$ second. Upon reception of $D$ at $N_d$, it should send back an ACK packet to $N_s$. For each ACK packet relayed by all nodes $N_i \in p$, the monitor module of $N_i$ registers a good action through the link $(N_j, N_k)$. If $N_s$ receives an ACK packet before $\theta$ expires, which means that there are no malicious actions along the path $p$, it removes the ID of $D$ from $List_{ID}$. Otherwise, $N_s$ switches to the S-ACK mode. $N_i$ adds the ID of each data packet forwarded $D$ to $List_{ID}$. Each ID is maintained for $\vartheta$ second. $N_j$ will forward $D$ to $N_k$ if it behaves cooperatively. Once the packet $D$ reaches $N_k$, it should send back an S-ACK packet $N_i$ if it does not behave maliciously. If $N_i$ receives S-ACK packet before $\vartheta$ expires, it deletes the ID of $D$ from $List_{ID}$ and registers a good action against the link $(N_j, N_k)$. Otherwise, if $N_i$ does not receive S-ACK packet after $\vartheta$ expires, $N_i$ removes the ID of $D$ from $List_{ID}$ and registers a bad action against the link $(N_j, N_k)$. The same process is repeated for each triplet of nodes along $p$. This process is repeated until $N_s$ receives a switch packet from $N_d$, which means that $p$ is a safer path. Therefore, $N_s$ switches to the ACK mode.

## 4.2 Reputation Module

This module assesses and manages the reputation values of one-hop nodes. The reputation is classified into three types: direct, indirect and final. This module maintains four parameters ranging from 0 and 1: the reputation value of each monitored link $(N_j, N_k) \in FL_i^j$ denoted by $R_i(j, k)$ where $FL_i^j$ denotes the set of forwarding links in which $N_j$ is involved. The direct, indirect and final reputation values denoted by $DR_i^j(t)$, $IR_i^j(t)$ and $FR_i^j(t)$, respectively, where denotes the time of the computation of the reputation value.

### Direct Reputation

A reputation is considered type direct, if it is computed based only on the recommendation of the monitor module. The reputation module of $N_i$ evaluates the trustworthiness of $N_j$ in all forwarding links $(N_j, N_k) \in FL_i^j$ in which is involved (see Fig. 1). If the monitor module detects a good action, $R_i(j, k)$ is increased. Otherwise, $R_i(j, k)$ is decreased. To compute the direct reputation value $DR_i^j(t)$ of $N_j$ at time slot $t$, we propose a combination algorithm based on Dempter Shafer theory [14, 15, 23]. This algorithm combines and aggregates the reputation values of all links $R_i(j, k), (N_j, N_k) \in FL_i^j$ to come up to a single reputation value of $N_j$. The proposed algorithm functions as follows. In the startup, $R_i(j, k)$ of each link $(N_j, N_k) \in FL_i^j$ is initialized to neutral$_v$ and it is updated according to the action detected by the monitor module. We consider two exclusive and exhaustive hypothesis that construct the frame of discernment $\varphi = \{C, \bar{C}\}$ where C means that the node $N_j$ is cooperative and $\bar{C}$ means that the node $N_j$ is uncooperative. The power set $2^\varphi$ consists of four elements:$\emptyset, C$ = cooperative, $\bar{C}$ = uncooperative and hypothesis $U = \varphi ($
$N_j$ is either cooperative or uncooperative which represents the uncertainty). In this scenario, the reputation module of $N_i$ perceives the reputation of each link $(N_j, N_k) \in FL_i^j$ as recommendation provided by $N_k$. The reputation module determines the state of the node $N_j$ in the link $(j, k)$ according to $R_i(j, k)$. If reputation module states that $N_j$ is cooperative through the link $(j, k)$, which means that $R_i(j, k) \ge neutral_v$, The BPA of $N_k$ is:

$$ 
\begin{aligned}
m_k(C) &= R_i(j, k) \\
m_k(\bar{C}) &= 0 \\
m_k(U) &= 1 - R_i(j, k)
\end{aligned} 
\qquad (5) $$

If reputation module states that $N_j$ is uncooperative through the link $(j, l)$, which means that $R_i(j, k) < neutral_v$, the BPA of $N_l$ is

$$ 
\begin{aligned}
m_l(C) &= R_i(j, l) \\
m_l(\bar{C}) &= neutral_v - R_i(j, l) \\
m_l(U) &= 1 - neutral_v
\end{aligned} 
\qquad (6) $$

The direct reputation value $DR_i^j(t)$ is computed by combining all recommendations collected from all links $(N_j, N_k) \in FL_i^j$ by applying the Dempster rule of combination. $neutral_v - R_i(j, l)$ value reflects the degree of maliciousness of the link $(j, l)$. The rational of this algorithm is that: a malicious node should compromise multiple forwarding links (multiple forwarding paths) to achieve its purpose that consists on disrupting the data forwarding process. Therefore, it is involved in multiple bad actions that cause the degradation of its direct reputation value. On the other hand, an honest node is involved in more good actions than bad actions; therefore, it can improve its direct reputation value.

## Indirect Reputation

A reputation is considered indirect, if it is computed based only on the recommendations shared between neighbours. In HAPS, this reputation is calculated and used only when there is need. The exchange method is done only when it is necessary, especially when a particular neighbour needs to send its packets. The goal is to improve the accuracy of the computation of nodes reputation and to minimize the recommendations traffics. When a node termed requestor needs to relay its packets through neighbours, all neighbours exchange their computed direct reputation values about this requestor. After that, they compute its indirect reputation value by aggregating all received recommendations using Dempster Shafer theory. Note that recommendations from nodes regarded as malicious are ignored.

When $N_i$ receives a RREQ packet, it checks whether the requestor $N_j$ is a neighbour $(N_j \in NG_i)$. If the requestor $N_j$ is not neighbour, $N_i$ simply forwards the RREQ packet. Else, $N_i$ shares its recommendation about $N_j$ in the neighbourhood and set the timer $T_r$. To prevent malicious nodes from colluding
with other nodes or from manipulating the reputation values of some nodes, node $N_i$ accepts only recommendation received before $T_r$ expire. In order to compute the indirect reputation value of $N_j$, $N_i$ aggregates all received recommendations using Dempster Shafer Theory. The recommendation of $N_i$ about $N_j$ is one among the set {cooperative-uncooperative}. Therefore, the frame of discernment is $\varphi = \{cooperative, uncooperative\}$. For instance, the reputation value of $N_k$ at $N_i$ is $DR_i^k(t)$. If $N_k$ states that $N_j$ is cooperative, the BPA of $N_k$ is [16]:

$$ 
\begin{aligned}
m_k(C) &= DR_i^k(t) \\
m_k(\bar{C}) &= 0 \\
m_k(U) &= 1 - DR_i^k(t)
\end{aligned} 
\qquad (7) $$

If $N_k$ claims that $N_j$ is uncooperative, the BPA of $N_k$ is:

$$ 
\begin{aligned}
m_k(C) &= 0 \\
m_k(\bar{C}) &= DR_i^k(t) \\
m_k(U) &= 1 - DR_i^k(t)
\end{aligned} 
\qquad (8) $$

The indirect reputation value of $N_j$ is obtained after combining all recommendations using the Dempster's rule of combination. According to Dempster Shafer Theory features, the relevance of a recommendation depends on the reputation value of the recommender, which permit to get a reliable reputation value. This feature make our approach resilient to false recommendation dissemination. Thus, our approach can cope with collusion attack that occurs when a group of malicious nodes provides fake recommendations about an honest node. Because, the time $T_{rec}$ between the diffusion and the combination of recommendations is very low. Then, these nodes have not sufficient times to collude.

### Illustration example:

Let assume three nodes $N_k$, $N_l$ and $N_f$ with reputation values 0.4, 0.45 and 0.9 at $N_i$, respectively. They share their recommendations about $N_j$. $N_k$ claims that $N_j$ is cooperative, $N_l$ and $N_f$ claims that $N_j$ is uncooperative. Hence, the mass function are:

$$ 
\begin{aligned}
m_k(C) &= 0.9, \quad m_k(\bar{C}) = 0, \quad m_k(U) = 0.1 \\
m_l(C) &= 0, \quad m_l(\bar{C}) = 0.3, \quad m_l(U) = 0.7 \\
m_f(C) &= 0, \quad m_f(\bar{C}) = 0.3, \quad m_f(U) = 0.7
\end{aligned} 
$$

The reputation module of $N_i$ combines $m_k$ and $m_l$ as follows:

$$ K_{kl} = m_k(C) m_l(\bar{C}) + m_k(\bar{C}) m_l(C) = 0.27 $$
$$m_{kl}(C) = m_k \oplus m_l(C) = \frac{m_k(C)m_l(C) + m_k(C)m_l(U) + m_k(U)m_l(C)}{1 - K_{kl}} = 0.863$$

$$m_{kl}(\bar{C}) = m_k \oplus m_l(\bar{C}) = \frac{m_k(\bar{C})m_l(\bar{C}) + m_k(\bar{C})m_l(U) + m_k(U)m_l(\bar{C})}{1 - K_{kl}} = 0.041$$

$$m_{kl}(U) == m_k \oplus m_l(U) = \frac{m_k(U)m_l(U)}{1 - K_{klf}} = 0.0958$$

The obtained $m_{kl}$ is combined with $m_f$ as:

$$K_{klf} = m_{kl}(C)m_f(\bar{C}) + m_{kl}(\bar{C})m_f(C) = 0.258$$

$$m_{klf}(C) = m_{kl} \oplus m_f(C) = \frac{m_{kl}(C)m_f(C) + m_{kl}(C)m_f(U) + m_{kl}(U)m_f(C)}{1 - K_{klf}} = 0.815$$

$$m_{klf}(\bar{C}) = m_{kl} \oplus m_f(\bar{C}) = \frac{m_{kl}(\bar{C})m_f(\bar{C}) + m_{kl}(\bar{C})m_f(U) + m_{kl}(U)m_f(\bar{C})}{1 - K_{kl}} = 0.094$$

$$m_{klf}(U) == m_k \oplus m_l(U) = \frac{m_k(U)m_l(U)}{1 - K_{klf}} = 0.0905$$

From this result, the indirect reputation value $IR_i^j(t)$ of node $N_j$ is 0.81.

## Final reputation

After obtaining $DR_i^j(t)$ and $IR_i^j(t)$, the final reputation value $FR_i^j(t)$ is computed by combining $DR_i^j(t)$ and $IR_i^j(t)$ with the following equation:

$$FR_i^j(t) = \delta * DR_i^j(t) + (1 - \delta) * IR_i^j(t). \quad (9)$$

Where $\delta(0 < \delta < 1)$ determines the relevance of direct reputation compared to the indirect reputation.

## 4.3 Exclusion Module

The exclusion module is responsible for punishing malicious nodes. It considers a node having final reputation value smaller than the threshold as malicious. This module puts the detected node in its black list *Blacklist*, and it sends a misbehaving report to the source node of data packets to proceed to its punishment. All nodes forwarding, receiving or overhearing the misbehaving report put the detected node in their *Blacklist* and proceed to its punishment. The punishment consists on: (1) invalidating all forwarding paths involving this node and evicting to route their data packets through this node. (2) Refusing to forward packets initiated from this node by discarding all its RREQ packets generated.
# 5 Performance Evaluation

In this section, we conduct a series of simulation experiments to examine the performance efficiency of the HAPS scheme using the network simulator NS-2.34. We evaluate the effectiveness of the HAPS scheme on the exclusion of malicious nodes dropping data packets in comparison to EAACK [13]. We simulate 40 mobile nodes deployed within an area of 700 * 700 m. The number of malicious nodes varies from 2 to 12. The rest of simulation parameters are shown in Table 1. The following two metrics are used to examine the efficiency of HAPS:

<table><caption>**Table 1.** Malicious scenario parameters</caption><thead><tr><td>Parameter</td><td>Value</td></tr></thead><tbody><tr><td>Number of node</td><td>40</td></tr><tr><td>Routing protocol</td><td>DSR</td></tr><tr><td>Simulation area</td><td>700 m × 700 m</td></tr><tr><td>Transmission range</td><td>250 m</td></tr><tr><td>Node speed</td><td>2m/s, 4m/s, 6m/s,8m/s and 10m/s</td></tr><tr><td>Pause time</td><td>0 s</td></tr><tr><td>Number of malicious nodes</td><td>2, 4, 6, 8, 10, 12</td></tr><tr><td>Number of CBR</td><td>20 connections</td></tr><tr><td>Simulation time</td><td>600 s</td></tr></tbody></table>

- **Average throughput (Kbps)** represents the total size of data packets that successfully reached their destination over the simulation times.

- **Malicious dropping ratio** refers to the ratio between the total numbers of data packets dropped by malicious nodes to the total numbers of data packets sent.

All plotted results are obtained after averaging the result of 20 simulation runs.

## 5.1 Average Throughput (Kbps)

Fig. 2 shows the average throughput of HAPS and EAACK under varying the number of malicious nodes. We can observe that as the number of malicious nodes increases, the average throughput of two schemes decreases. However, the obtained results indicate that HAPS improves the average throughput much more than EAACK. This improvement is due to the fact that HAPS can identify and isolate malicious nodes instead of malicious links. Therefore, using HAPS scheme, the established paths between each pair of nodes is more reliable.
<figure><img src="image_3.png" /><figcaption>Fig. 2. Average throughput vs Number of malicious nodes</figcaption></figure>

<figure><img src="image_4.png" /><figcaption>Fig. 3. Malicious dropping ratio Vs Number of malicious nodes</figcaption></figure>

<figure><img src="image_5.png" /><figcaption>Fig. 4. Malicious dropping ratio Vs Nodes speeds</figcaption></figure>

## 5.2 Malicious Dropping Ratio

Fig. 3 depicts the malicious dropping ratio of HAPS and EAACK as a function of the number malicious nodes. The results show that the malicious dropping ratio increases as the number of malicious nodes increases. But, the malicious dropping ratio with HAPS increases more gently than with EAACK. This is because AASC penalizes malicious nodes more effectively and severely compared EAACK that is able to isolate only malicious links.

Fig. 4 plots the malicious dropping ratio across varying the node speed. In this scenario, the network contains 4 malicious nodes. From this figure, we can observe that HAPS has a lower malicious dropping ratio in all cases compared to EAACK. This gap is more apparent when the nodes move faster. Because, when the nodes move faster, their neighbourhoods change frequently. As EAACK
isolates only malicious links, each new neighbour for malicious nodes forms a new opportunity (malicious link) to drop more packets. Therefore, HAPS is more resilient to topology changes.

# 6 Conclusion and Future Work

In this paper, we have proposed HAPS, which is a novel acknowledgment Punishment Scheme aiming to detect and punish malicious nodes dropping data packets. In HAPS scheme, the reputation values of all links in which node is involved, are perceived as recommendations. Using Dempster Shafer Theory, these recommendations are combined to compute the reputation value of the node. HAPS incorporates a novel manner to exchange recommendations between nodes following the nature of on-demand routing protocol. The recommendations exchange is performed only when it is necessary and the aggregation is done based on Dempster Shafer Theory. HAPS punishes malicious nodes, whose the reputation values are smaller than the threshold by refusing to forward their packets, and isolating them from all network activities. The simulation results demonstrate that HAPS improves the throughput and reduces the malicious dropping ratio. As future work, We plan to evaluate mathematically the complexity of HAPS approach, and by simulation the effect of other network parameters in the effectiveness of HAPS approach (such Node density). We also plan to extend the HAPS scheme with an incentive mechanism aiming to cope against the selective packet dropping attack, while to motivate the cooperation of selfish nodes.

# References

1. Peng, S. C., Wang, G. J., Hu, Z. W., Chen, J. P.: Survivability modeling and analysis on 3D mobile ad-hoc networks. Journal of Central South University of Technology, 18(4), 1144-1152 (2011)

2. Marti, S., Giuli, T. J., Lai, K., Baker, M.: Mitigating routing misbehavior in mobile ad hoc networks. In Proceedings of the 6th annual international conference on Mobile computing and networking, 255-265 (2000).

3. Buttyan, L., Hubaux, J. P.: Stimulating cooperation in self-organizing mobile ad hoc networks. Mobile Networks and Applications, 8(5), 579-592 (2003)

4. Zong, C., Yang, S.: Sprite: A simple, cheat-proof, credit-based system for mobile ad-hoc networks. Twenty-Second Annual Joint Conf. IEEE Computer and Communications (INFOCOM), 1987-1997 (2003)

5. Bansal, S., Baker, M.: Observation-based cooperation enforcement in ad hoc networks. arXiv preprint cs/0307012 (2003).

6. Zhu, H., Lin, X., Lu, R., Fan, Y., Shen, X.: Smart: A secure multilayer credit-based incentive scheme for delay-tolerant networks. Journal of IEEE Transactions on Vehicular Technology, 58 (8), 4628-4639 (2009)

7. Mahmoud, M. M. E. A., Shen, X: FESCIM: fair, efficient, and secure cooperation incentive mechanism for multihop cellular networks. Journal of IEEE Transactions on Mobile Computing, 11 (5), 753-766 (2012)
8. Buchegger, S., Le Boudec, J. Y.: Performance analysis of the CONFIDANT protocol. Proc. The 3rd ACM Int. symposium on Mobile ad hoc networking and computing, 226-236 (2002)

9. Michiardi, P., Molva, R.: Core: a collaborative reputation mechanism to enforce node cooperation in mobile ad hoc networks. Advanced Communications and Multimedia Security, 107-121 (2002)

10. He, Q., Wu, D., Khosla, P.: SORI: a secure and objective reputation-based incentive scheme for ad-hoc networks. Wireless Communications and Networking (WCNC), 825-830 (2004)

11. Yau, P. W., Mitchell, C. J.: Reputation methods for routing security for mobile ad hoc networks. Proc. Mobile Future and Symposium on Trends in Communications, 130-137 (2003)

12. Balakrishnan, K., Deng, J., Varshney, P. K.: TWOACK: preventing selfishness in mobile ad hoc networks. Wireless Communications and Networking, 2137-2142 (2005)

13. Shakshuki, E. M., Kang, N., Sheltami, T. R.: EAACK-A Secure Intrusion-Detection System for MANETs. IEEE Transactions on Industrial Electronics, 60(3), 1089-1098 (2013)

14. Shafer, G. A.: Mathematical Theory of Evidence. Princeton Univ. Press (1976)

15. Sudkamp, T.: The consistency of Dempster-Shafer updating. International Journal of Approximate Reasoning, 7(1), 19-44 (1992)

16. Chen, T. M., Venkataramanan, V.: Dempster-Shafer theory for intrusion detection in ad hoc networks. IEEE Internet Computer, 9(6), 35-41 (2005)

17. Johnson D. B., Maltz, D. A.: Dynamic source routing in ad hoc wireless networks. Mobile computing, 153-181 (1996)

18. Liu, K., Deng, J., Varshney, P. K., Balakrishnan, K.: An acknowledgment-based approach for the detection of routing misbehavior in MANETs. IEEE Transactions on Mobile Computing, 6(5), 536-550. (2007)

19. Sheltami, T., Al-Roubaiey, A., Shakshuki, E., Mahmoud, A.: Video transmission enhancement in presence of misbehaving nodes in MANETs. Multimedia systems, 15(5), 273-282 (2009)

20. Sun, H. M., Chen, C. H., Ku, Y. F.: A novel acknowledgment-based approach against collude attacks in MANET. Expert Systems with Applications, 39 (9), 7968-7975 (2012)

21. Djahel, S., NatAbdesselam, F., Zhang, Z., Khokhar, A.: Defending against packet dropping attack in vehicular ad hoc networks. Security and Communication Networks, 1(3), 245-258 (2008)

22. Campos, F., Cavalcante, S.: An extended approach for Dempster-Shafer theory. Information Reuse and Integration, 338-344 (2003)

23. Bloch, I.: Some aspects of Dempster-Shafer evidence theory for classification of multi-modality medical images considering partial volume effect. Pattern Recognition Letters, 17(8), 905-919 (1996)

24. Bounouni, M., Bouallouche-Medjkoune, L.: A Hybrid Stimulation Approach for Coping Against the Malevolence and Selfishness in Mobile Ad hoc Network. Wireless Personal Communications, 88(2), 255-281 (2016)