Masquerade Detection by Using Activity Patterns

Reshmi, Bharati M.; Manvi, Sunilkumar S.

doi:10.1007/1-84628-352-3_24

Cited by 1 publication

(1 citation statement)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The proposed intrusion detection model differs from other mentioned works in the following aspects: 1) combination of distributed IDS and clustering, 2) statistical method for detecting masquerading attacks based on user activity patterns [21], 3) distribute the selected and aggregated masquerading information to all the clusters in an optimal way, 4) uses a set of static (manager agent and host intrusion detection agent (HIDA), cluster head manager agent) and mobile agents (distributing mobile agents) to detect masquerading in the cluster based ad-hoc networks. A mobile agent is a program that can migrate from one host to another in a network of heterogeneous computer systems and fulfill a task specified by its owner.…”

Section: Proposed Workmentioning

confidence: 99%

An Agent Based Intrusion Detection Model for Mobile Ad Hoc Networks

Reshmi¹,

Manvi²,

Bhagyavati

2006

Mobile Information Systems

Self Cite

View full text Add to dashboard Cite

Intrusion detection has over the last few years, assumed paramount importance within the broad realm of network security, more so in case of wireless mobile ad hoc networks. The inherently vulnerable characteristics of wireless mobile ad hoc networks make them susceptible to attacks in-spite of some security measures, and it may be too late before any counter action can take effect. As such, there is a need to complement traditional security mechanisms with efficient intrusion detection and response systems. This paper proposes an agent-based model to address the aspect of intrusion detection in cluster based mobile wireless ad hoc network environment.The model comprises of a set of static and mobile agents, which are used to detect intrusions, respond to intrusions, and distribute selected and aggregated intrusion information to all other nodes in the network in an intelligent manner. The model is simulated to test its operation effectiveness by considering the performance parameters such as, detection rate, false positives, agent overheads, and intrusion information distribution time. Agent based approach facilitates flexible and adaptable security services. Also, it supports component based software engineering components such as maintainability, reachability, reusability, adaptability, flexibility, and customization.

show abstract

Section: Proposed Workmentioning

confidence: 99%