Centralized and Distributed Intrusion Detection for Resource-Constrained Wireless SDN Networks

Segura, Gustavo A. Nunez; Chorti, Arsenia; Margi, Cintia Borges

doi:10.1109/jiot.2021.3114270

“…Challenges also arise to securing the sensing layer itself and rendering it resilient to denial of service and man-in-the-middle attacks. Aspects related to distributed anomaly detection in software defined wireless sensor networks [20] have demonstrated that it is possible in large scale IoT networks to monitor hardware behaviour (memory usage, power consumption, Tx/Rx times, etc.) to identify compromised or faulty sensors.…”

Section: Trustworthy and Resilient 6g And The Role Of The Physical Layermentioning

confidence: 99%

Physical Layer Security - from Theory to Practice

Mitev¹,

Pham²,

Chorti³

et al. 2022

Preprint

View full text Add to dashboard Cite

<p>A large spectrum of technologies are collectively dubbed as physical layer security (PLS), ranging from wiretap coding, secret key generation (SKG), authentication using physical unclonable functions (PUFs), localization / RF fingerprinting, anomaly detection monitoring the physical layer (PHY) and hardware. Despite the fact that the fundamental limits of PLS have long been characterized, incorporating PLS in future wireless security standards requires further steps in terms of channel engineering and pre-processing. Reflecting upon the growing discussion in our community, in this critical review paper, we ask some important questions with respect to the key hurdles in the practical deployment of PLS in 6G, but also present some research directions and possible solutions, in particular our vision for context-aware 6G security that incorporates PLS. </p>

show abstract

“…Challenges also arise to securing the sensing layer itself and rendering it resilient to denial of service and man-in-the-middle attacks. Aspects related to distributed anomaly detection in software defined wireless sensor networks [11] have demonstrated that it is possible in large scale IoT networks to monitor hardware behaviour (memory usage, power consumption, Tx/Rx times, etc.) to identify compromised or faulty sensors.…”

Section: Trustworthy and Resilient 6g And The Role Of The Physical Layermentioning

confidence: 99%

Physical Layer Security - from Theory to Practice

Mitev¹,

Pham²,

Chorti³

et al. 2022

Preprint

3

0

View full text Add to dashboard Cite

<p>A large spectrum of technologies are collectively dubbed as physical layer security (PLS), ranging from wiretap coding, secret key generation (SKG), authentication using physical unclonable functions (PUFs), localization / RF fingerprinting, anomaly detection monitoring the physical layer (PHY) and hardware. Despite the fact that the fundamental limits of PLS have long been characterized, incorporating PLS in future wireless security standards requires further steps in terms of channel engineering and pre-processing. Reflecting upon the growing discussion in our community, in this critical review paper, we ask some important questions with respect to the key hurdles in the practical deployment of PLS in 6G, but also present some research directions and possible solutions, in particular our vision for context-aware 6G security that incorporates PLS. </p>

show abstract

“…The problem formulation exploits recent results [16], [17] on non-parametric real-time CP detection. We adapted the hybrid offline-online proposal to an entirely online detector [18].…”

Section: A Change Point Detectionmentioning

confidence: 99%

Distributed DoS Attack Detection in SDN: Trade offs in Resource Constrained Wireless Networks

Segura¹,

Chorti²,

Margi³

2021

Preprint

Self Cite

0

View full text Add to dashboard Cite

The Software-defined networking (SDN) paradigm centralizes control decisions to improve programmability and simplify network management. However, this centralization turns the network vulnerable to denial of service (DoS) attacks, and in the case of resource constrained networks, the vulnerabilities escalate. The main shortcoming in current security solutions is the tradeoff between detection rate and complexity. In this work, we propose a DoS attack detection algorithm for SDN resource constrained networks, based on recent results on non-parametric real-time change point detection, and lightweight enough to run on individual resource constrained devices. Our experiment results show detection rates and attacker identification probabilities equal or over 0.93.

show abstract

Centralized and Distributed Intrusion Detection for Resource-Constrained Wireless SDN Networks

Cited by 29 publications

References 31 publications

Physical Layer Security - from Theory to Practice

Physical Layer Security - from Theory to Practice

Physical Layer Security - from Theory to Practice

Distributed DoS Attack Detection in SDN: Trade offs in Resource Constrained Wireless Networks

Contact Info

Product

Resources

About