Isolating Misbehaving Nodes in MANETs with an Adaptive Trust Threshold Strategy

Khan, Muhammad Saleem; Midi, Daniele; Malik, Saif Ur Rehman; Khan, Majid Iqbal; Javaid, Nadeem; Bertino, Elisa

doi:10.1007/s11036-017-0867-0

Cited by 10 publications

(7 citation statements)

References 32 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Several trust-based approaches have been proposed to ensure security in distributed systems. Khan et al [11] attempt to isolate malicious nodes in MANET systems. When the trust of a node in the network drops below a specific threshold, the node is considered malicious, and is isolated.…”

Section: Discussionmentioning

confidence: 99%

“…(ii) We combine the identified operations into candidate plans. Each candidate is (iii) evaluated by one of the two utility functions (local or global) defined in Equation (10) and Equation (11). Finally, in (iv), the planner forwards the best fit the plan for enactment to j 9 .…”

Section: Decentralized Feedback Loop Demonstratorsmentioning

confidence: 99%

“…Current trust-based security solutions focus on allowing or disallowing communication in the system at the granularity of nodes. These approaches are often domain specific and focus on either defending against specific attacks or identifying and/or isolating malicious nodes [1,11] based on trust metrics [31] or reputation-based trust [1,21], lacking the capabilities to deal with fine-grained security policies that control the access to, modification and propagation of information between entities. Furthermore, they operate under static enforcement rules [2,31], even in the presence of dynamic trust and do not feature a dynamic trust architecture.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

AT-DIFC ⁺ : Toward Adaptive and Trust-Aware Decentralized Information Flow Control

Skandylas

Khakpour

Andersson

2020

ACM Trans. Auton. Adapt. Syst.

View full text Add to dashboard Cite

Modern software systems and their corresponding architectures are increasingly decentralized, distributed, and dynamic. As a consequence, decentralized mechanisms are required to ensure security in such architectures. Decentralized Information Flow Control (DIFC) is a mechanism to control information flow in distributed systems. This article presents and discusses several improvements to an adaptive decentralized information flow approach that incorporates trust for decentralized systems to provide security. Adaptive Trust-Aware Decentralized Information Flow (AT-DIFC + ) combines decentralized information flow control mechanisms, trust-based methods, and decentralized control architectures to control and enforce information flow in an open, decentralized system. We strengthen our approach against newly discovered attacks and provide additional information about its reconfiguration, decentralized control architectures, and reference implementation. We evaluate the effectiveness and performance of AT-DIFC + on two case studies and perform additional experiments and to gauge the mitigations’ effectiveness against the identified attacks.

show abstract

Section: Discussionmentioning

confidence: 99%

Section: Decentralized Feedback Loop Demonstratorsmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

AT-DIFC ⁺ : Toward Adaptive and Trust-Aware Decentralized Information Flow Control

Skandylas

Khakpour

Andersson

2020

ACM Trans. Auton. Adapt. Syst.

View full text Add to dashboard Cite

show abstract

“…Decentralized&Adaptive Trust Several trust-based approaches have been proposed to ensure security in distributed systems. Khan et al [146] attempt to isolate malicious nodes in MANET systems. When the trust of a node in the network drops below a specific threshold, the node is considered malicious, and is isolated.…”

Section: Related Workmentioning

confidence: 99%

“…Current trust-based security solutions focus on allowing or disallowing communications in the system at the granularity of nodes. These approaches are often domain-specific and focus on either defending against specific attacks or identifying and/or isolating malicious nodes (e.g., [2,146]) based on trust metrics [287] or reputation-based trust [2,234]. They are, however, unable to enforce fine-grained entity-level security policies to control access, modification or propagation of information.…”

Section: Introductionmentioning

confidence: 99%

Design and Analysis of Self-protection: Adaptive Security for Software-Intensive Systems

Skandylas¹

View full text Add to dashboard Cite

Today's software landscape features a high degree of complexity, frequent changes in requirements and stakeholder goals, and uncertainty.Uncertainty and high complexity imply a threat landscape where cybersecurity attacks are a common occurrence while their consequences are often severe. Self-adaptive systems have been proposed to mitigate the complexity and frequent changes by adapting at run-time to deal with situations not known at design time.Self-adaptive systems that aim to identify, analyse and mitigate threats autonomously are called self-protecting systems.This thesis contributes approaches towards developing systems with self-protection capabilities under two perspectives. Under the first perspective, we enhance the security of component-based systems and equip them with self-protection capabilities that reduce the exposedattack surface or provide efficient defenses against identified attacks. We target systems where information about the system components and the adaptationdecisions is available, and control over the adaptation is possible. We employ runtime threat modeling and analysis using quantitative risk analysis and probabilistic verification to rank adaptations to be applied in the system in terms of their security levels. We then introduce modular and incremental verification approaches to tackle the scalability issues of probabilistic verification to be able to analyze larger-scale software systems.To protect against cyberattacks that cannot be mitigated by reducing the exposed attack surface, we propose an approach to analyze the security of different software architectures incorporating countermeasures to decide on the most suitable ones to evolve to. Under the second perspective, we study open decentralized systems where we have limited information about and limited control over the system entities. We employ decentralized information flow control mechanisms to enforce security by controlling the interactions among the system elements.We extend decentralized information flow control by incorporating trust and adding adaptationcapabilities that allow the system to identify security threats and self-organize to maximize trust between the system entities.

show abstract

Vaguely Node Classification Scheme for Wireless Networks to Design an Intrusion Detection System

Latha¹,

Prakash²

2020

Proceedings of International Conference on Artificial Intelligence, Smart Grid and Smart City Applications

View full text Add to dashboard Cite

Isolating Misbehaving Nodes in MANETs with an Adaptive Trust Threshold Strategy

Cited by 10 publications

References 32 publications

AT-DIFC ⁺ : Toward Adaptive and Trust-Aware Decentralized Information Flow Control

AT-DIFC ⁺ : Toward Adaptive and Trust-Aware Decentralized Information Flow Control

Design and Analysis of Self-protection: Adaptive Security for Software-Intensive Systems

Vaguely Node Classification Scheme for Wireless Networks to Design an Intrusion Detection System

Contact Info

Product

Resources

About

Isolating Misbehaving Nodes in MANETs with an Adaptive Trust Threshold Strategy

Cited by 10 publications

References 32 publications

AT-DIFC + : Toward Adaptive and Trust-Aware Decentralized Information Flow Control

AT-DIFC + : Toward Adaptive and Trust-Aware Decentralized Information Flow Control

Design and Analysis of Self-protection: Adaptive Security for Software-Intensive Systems

Vaguely Node Classification Scheme for Wireless Networks to Design an Intrusion Detection System

Contact Info

Product

Resources

About

AT-DIFC ⁺ : Toward Adaptive and Trust-Aware Decentralized Information Flow Control

AT-DIFC ⁺ : Toward Adaptive and Trust-Aware Decentralized Information Flow Control