# A Novel Anomaly Behavior Detection Scheme for Mobile Ad Hoc Networks
## 6 Conclusions  
MANETs are a challenging research field because of their characteristics, such as dynamic topology, flexibility, open medium, and constrained capability. This makes MANETs pertinent to various applications. However, these features are a threat to the security of the system. Specifically, it is routing that is significant in the security of the entire  
\begin{table}
\begin{tabular}{c c c c} \hline \hline  & & **N = 1000** & \\ \hline
**Parameter** & **[PERSON] et al. [26]** & **[PERSON] et al. [33]** & **Proposed Approach** \\ \hline
**Minimum ADR** & 42.5\% & 51.7\% & 59.6\% \\ \hline
**Minimum WCAR** & 10\% & 9\% & 7\% \\ \hline
**Minimum ALADR** & 0.3\% & 0.5\% & 0.7\% \\ \hline
**Minimum ALWCAR** & \(\leq\)0.2\% & \(\leq\)0.3\% & \(\leq\)0.6\% \\ \hline \hline \end{tabular}
\end{table}
Table 5: Comparative detection ratio analysis at subgroup level.  
network; this appears to be a non-trivial problem that cannot be solved effortlessly, i.e., MANETs are much more vulnerable to security attacks. In this paper, we have reviewed the state-of-the-art security protocols in MANETs. Although various researchers have proposed solutions to address the security and performance issues in MANETs, these proposed solutions are not comprehensive for effective and efficient performance and routing security; there are limitations on all solutions.  
In this research, we have compared all of the protocols in the ns-3 simulation environment using jitter, throughput, average end-to-end delay, and anomaly detection. For the proposed DD-ZRP approach, a minimum 66.5% anomaly detection ratio is observed in a network of 1000 nodes. A minimum WCAR of 8% for 200 nodes and a maximum WCAR of 16% for 1000 nodes are observed. For ALADR, a minimum of 1.1% outlier for 200 nodes, and a maximum of 1.4% outlier for 1000 nodes, are present in a network that is not part of any subgroup. The ratios shown have significant improvement compared to the prevailing mechanisms. The ZRP protocol--being a hybrid protocol--exploits the advantages of both proactive and reactive approaches, and thus performs better for QoS and outlier detection mechanisms when compared to the other protocols considered in the study. The proposed ZRP-based approach is better for outlier detection with respect to end-to-end delay, jitter, sender/receiver energy consumption, and throughput for 200-1000-node networks. The findings reveal that QoS parameters rise with an increase in the number of nodes in the network. In effect, DSR outperforms at a lower level; however, the pre-eminent routing protocol is the ZRP.  
Future studies could consider facilitating a protection mechanism to learn from experience and use the knowledge gained to detect novel intrusive activities. The development and deployment of network security policies is vital in MANETs; this is a further potential area of research. In addition, it would be interesting to investigate this method for other relevant types of applications and evaluate it in a realistic scenario, as this work has only included simulation results. As a final point, the attacks on existing protection schemes make it necessary to enhance existing solutions and make them more robust in order to combat new vulnerabilities introduced into the system.  
Conceptualization, N.C.; methodology, N.C. and G.S.T.; validation, N.C., R.S.B.; formal analysis, N.C.; investigation, N.C. and G.S.T.; data curation, N.C.; writing--original draft preparation, N.C.; writing--review and editing, all; supervision, G.S.T., N.S; All authors have read and agreed to the published version of the manuscript. This research received no external funding. The authors declare no conflict of interest.