Intrusion detection in wireless ad hoc networks

Mishra, Amitabh; Nadkarni, K.; Patcha, Animesh

doi:10.1109/mwc.2004.1269717

Cited by 352 publications

(162 citation statements)

References 12 publications

Supporting

Mentioning

162

Contrasting

Order By: Relevance

“…Intrusion detection systems (IDS) for MANETs is an active area of research [10]. In the Local Intrusion Detection Architecture [2] communities of nodes are formed, which exchange various security data and intrusion alerts.…”

Section: Related Workmentioning

confidence: 99%

Misuse Detection in Consent-Based Networks

Alicherry¹,

Keromytis

2011

Applied Cryptography and Network Security

View full text Add to dashboard Cite

Abstract. Consent-based networking, which requires senders to have permission to send traffic, can protect against multiple attacks on the network. Highly dynamic networks like Mobile Ad-hoc Networks (MANETs) require destination-based consent networking, where consent needs to be given to send to a destination in any path. These networks are susceptible to multipath misuses by misbehaving nodes. In this paper, we identify the misuses in destination-based consent networking, and provide solution for detecting and recovering from the misuses. Our solution is based on our previously introduced DIPLOMA architecture. DIPLOMA is a deny-by-default distributed policy enforcement architecture that can protect the end-host services and network bandwidth. DIPLOMA uses capabilities to provide consent for sending traffic. In this paper, we identify how senders and receivers can misuse capabilities by using them in multiple paths, and provide distributed solutions for detecting those misuses. To that end, we modify the capabilities to aid in misuse detection and provide protocols for exchanging information for distributed detection. We also provide efficient algorithms for misuse detection, and protocols for providing proof of misuse. Our solutions can handle privacy issues associated with the exchange of information for misuse detection. We have implemented the misuse detection and recovery in DIPLOMA systems running on Linux operating systems, and conducted extensive experimental evaluation of the system in Orbit MANET testbed. The results show our system is effective in detecting and containing multipath misuses.

show abstract

Section: Related Workmentioning

confidence: 99%

Misuse Detection in Consent-Based Networks

Alicherry¹,

Keromytis

2011

Applied Cryptography and Network Security

View full text Add to dashboard Cite

show abstract

“…The difference between wired infrastructure networks and mobile ad hoc networks [1] has motivated researchers to study IDSs that can handle new security challenges such as securing routing protocols. A cooperative intrusion detection model is proposed in [5] where every node participates in running its IDS in order to collect and identify possible intrusions.…”

Section: Intrusion Detection Systems In Manetmentioning

confidence: 99%

“…On receiving the Election messages from cluster A Àni , node n i verifies each received message with its corresponding hash value that has been sent in Begin-Election message. After the verification is accomplished, each node computes the SCF, which is the minimum valuation 1 of cost of analysis as in Eq. (2).…”

Section: Ids Leader Electionmentioning

confidence: 99%

“…The open nature of Mobile Ad hoc Networks (MANET) leads to new security problems that have recently attracted significant attentions [1,2]. The cooperation among nodes is critical to MANET in many perspectives, including intrusion detection, as evidenced by recent studies [1,3].…”

Section: Introductionmentioning

confidence: 99%

“…The cooperation among nodes is critical to MANET in many perspectives, including intrusion detection, as evidenced by recent studies [1,3]. Cooperative intrusion detection systems were proposed as a second line of defense [1,2,4,5] to detect and thwart security threats. Current cooperative IDS solutions are costly with respect to resource consumptions, which directly affect the effectiveness of an IDS over a long period of time.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

A game-theoretic intrusion detection model for mobile ad hoc networks

Otrok

Mohammed

Wang

et al. 2008

Computer Communications

View full text Add to dashboard Cite

In this paper, we address the problem of increasing the effectiveness of an intrusion detection system (IDS) for a cluster of nodes in ad hoc networks. To reduce the performance overhead of the IDS, a leader node is usually elected to handle the intrusion detection service on behalf of the whole cluster. However, most current solutions elect a leader randomly without considering the resource level of nodes. Such a solution will cause nodes with less remaining resources to die faster, reducing the overall lifetime of the cluster. It is also vulnerable to selfish nodes who do not provide services to others while at the same time benefiting from such services. Our experiments show that the presence of selfish nodes can significantly reduce the effectiveness of an IDS because less packets are inspected over time. To increase the effectiveness of an IDS in MANET, we propose a unified framework that is able to: (1) Balance the resource consumption among all the nodes and thus increase the overall lifetime of a cluster by electing truthfully and efficiently the most cost-efficient node known as leader-IDS. A mechanism is designed using Vickrey, Clarke, and Groves (VCG) to achieve the desired goal. (2) Catch and punish a misbehaving leader through checkers that monitor the behavior of the leader. A cooperative game-theoretic model is proposed to analyze the interaction among checkers to reduce the false-positive rate. A multi-stage catch mechanism is also introduced to reduce the performance overhead of checkers. (3) Maximize the probability of detection for an elected leader to effectively execute the detection service. This is achieved by formulating a zero-sum non-cooperative game between the leader and intruder. We solve the game by finding the Bayesian Nash Equilibrium where the leader's optimal detection strategy is determined. Finally, empirical results are provided to support our solutions.

show abstract