Intrusion Detection and Ejection Framework Against Lethal Attacks in UAV-Aided Networks: A Bayesian Game-Theoretic Methodology

Abstract

International audienceAdvances in wireless communications and microelectronics have spearheaded the development of unmanned aerial vehicles (UAVs), which can be used to augment a ground network composed of sensors and/or vehicles in order to increase coverage, enhance the end-to-end delay, and improve data processing. While UAV-aided networks can potentially find applications in many areas, a number of issues, particularly security, have not been readily addressed. The intrusion detection system is the most commonly used technique to detect attackers. In this paper, we focus on addressing two main issues within the context of intrusion detection and attacker ejection in UAV-aided networks, namely, activation of the intrusion monitoring process and attacker ejection. In fact, when a large number of nodes activate their monitoring processes, the incurred overhead can be substantial and, as a consequence, degrades the network performance. Therefore, a tradeoff between the intrusion detection rate and overhead is considered in this work. It is not always the best strategy to eject a node immediately when it exhibits a bad sign of malicious activities since this sign could be provisional (the node may switch to a normal behavior in the future) or be simply due to noise or unreliable communications. Thus, a dilemma between detection and false positive rates is taken into account in this paper. We propose to address these two security issues by a Bayesian game model in order to accurately detect attacks (i.e., high detection and low false positive rates) with a low overhead. Simulation results have demonstrated that our proposed security game framework does achieve reliable detection

Intrusion Detection Systems for Networked Unmanned Aerial Vehicles: A Survey

“…Sedjelmaci et al [17] Hierarchical IDS Threat classification & behavior monitoring Mitchell and Chen [11] Behavior rule-based evaluations Minimizing false positives & false negatives Kwon et al [8] Safety analysis under stealthy cyber attacks Real-time safety assessment Lauf and Robinson [9] Distributed resource system Intrusion-tolerance strategy Shen et al [24] Game theoretic approach Based on the three levels: object, situation and threat. Sedjelmaci et al [15] Security game framework Optimal setting identification based on intrusion detection rate with minimum overhead using Bayesian game Trafton and Pizzi [25] Network service suite Framework for information assurance of UAVs • Instant acknowledgement: In this acknowledgment, an IDS monitoring is performed at real-time and decisions or alarms are generated in the form of instant acknowledgments. • Periodic acknowledgement: In this acknowledgement, an IDS continuously gathers the data but the decisions are based on the periodical analysis of received data.…”

“…In addition, this work incorporated specific detection policies to maintain data integrity and network availability. Sedjelmaci et al [15] took one step further to propose a robust UAV assisted network against lethal attackers, namely a Security Game Framework (SGF), which is formulated based on Bayesian game among the suspected nodes. This approach formulates two attack-defense problems between IDS and the attacker, and between intrusion ejection system and the suspected nodes.…”

Predictive model for multistage cyber-attack simulation

“…He (2017) has developed an application-oriented cyber threat assessment framework in order to address the risk posed by multistage cyber-attacks in smart grids. Intelligent transportation systems (ITS) have also developed game-theory models to secure against the fatal cyber-attacks (Alpcan and Buchegger 2010;Bahamou et al 2016;Mejri et al 2016;Sanjab et al 2017;Sedjelmaci et al 2016). In addition to this, a combined simulation of interconnected railway network, ICT network and energy grid using OpenTrack, SINCAL, and NS3 respectively has been achieved in European Union Project (Ciprnet 2013).…”

Toward a lightweight and efficient UAV‐aided VANET

“…Consequently, their usage has significantly increased and they have expanded in different fields of applications where they have proved to be quite useful not only in military applications but also in civilian applications such as research and rescue missions (earthquake), target detection, remote sensing and performing surveillance, and agricultural tasks. In these applications, drones sometimes carry out exploration missions in remote places to replace human presence and/or deliver data to and from areas with no infrastructure …”