Distributed Intrusion Detection Systems: A Survey

Ozalp, Murat; Karakuzu, Cihan; Zengi̇n, Ahmet

doi:10.33793/acperpro.02.03.18

Cited by 3 publications

(2 citation statements)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Any disruption of service on the single central node will hinder the performance of the entire system. Moreover, since data collection and alerts is performed at every single node, nodes must have sufficient capacity when huge volume of data enters [41].…”

Section: Centralized Idsmentioning

confidence: 99%

Intrusion Detection Systems in Internet of Things and Mobile Ad-Hoc Networks

Ponnusamy¹,

Humayun²,

Jhanjhi³

et al. 2022

Computer Systems Science and Engineering

View full text Add to dashboard Cite

Internet of Things (IoT) devices work mainly in wireless mediums; requiring different Intrusion Detection System (IDS) kind of solutions to leverage 802.11 header information for intrusion detection. Wireless-specific traffic features with high information gain are primarily found in data link layers rather than application layers in wired networks. This survey investigates some of the complexities and challenges in deploying wireless IDS in terms of data collection methods, IDS techniques, IDS placement strategies, and traffic data analysis techniques. This paper's main finding highlights the lack of available network traces for training modern machine-learning models against IoT specific intrusions. Specifically, the Knowledge Discovery in Databases (KDD) Cup dataset is reviewed to highlight the design challenges of wireless intrusion detection based on current data attributes and proposed several guidelines to future-proof following traffic capture methods in the wireless network (WN). The paper starts with a review of various intrusion detection techniques, data collection methods and placement methods. The main goal of this paper is to study the design challenges of deploying intrusion detection system in a wireless environment. Intrusion detection system deployment in a wireless environment is not as straightforward as in the wired network environment due to the architectural complexities. So this paper reviews the traditional wired intrusion detection deployment methods and discusses how these techniques could be adopted into the wireless environment and also highlights the design challenges in the wireless environment. The main wireless environments to look into would be Wireless Sensor Networks (WSN), Mobile Ad Hoc Networks (MANET) and IoT as this are the future trends and a lot of attacks have been targeted into these networks. So it is very crucial to design an IDS specifically to target on the wireless networks.

show abstract

Section: Centralized Idsmentioning

confidence: 99%

Intrusion Detection Systems in Internet of Things and Mobile Ad-Hoc Networks

Ponnusamy¹,

Humayun²,

Jhanjhi³

et al. 2022

Computer Systems Science and Engineering

View full text Add to dashboard Cite

show abstract

“…This project built an intrusion detection system (IDS) that compared audit data to predefined patterns to analyze it. The concept of network intrusion detection has been defined in [11], [12]. Wireshark is used in this research to examine the operation of a packet analyzer as well as packet sniffing and logging techniques, Figure 1 showed the Wireshark architecture.…”

Section: Introductionmentioning

confidence: 99%

The facilities of detection by using a tool of Wireshark

Hashim

Enad

Mahdi

et al. 2023

IJEECS

View full text Add to dashboard Cite

Wireshark is easy for using as a packet inspection tool, in additional the feature of packets colorizing is easy for a various type of traffic. This paper exemplifies how Wireshark is used in networks as a tool. To clarify the effectiveness of malicious packet identification in any network, an experiment was conducted. Using the Wireshark program, testing was carried out in real time through experimentation and analysis. Inferences were drawn that clearly show Wireshark's capabilities as a tool in a powerful system for discovering the breach. The functionality of Wireshark is to analyze the network protocol and its open-source features for enabling the addition of likely tasks in the detecting devices were emphasized. Wireshark's skills for handling and interpreting packet data have been highlighted and the access control list (ACL) filtering has been the main application of Wireshark.

show abstract