Quantifying resiliency and detection latency of intrusion detection structures

Striki, Maria; Manousakis, Kyriakos; Kindred, Darrell; Sterne, D.; Lawler, Geoff; Ivanic, Natalie; Tran, George T.

doi:10.1109/milcom.2009.5379997

Cited by 5 publications

(4 citation statements)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Detection latency is a rarely used but critical means to measure IDS performance [Striki et al 2009]. This measures the time interval between an adversary penetrating the protected system (for an insider) or beginning their attack (for an outsider) and the IDS identifying the adversary.…”

Section: Intrusion Detection Performance Metricsmentioning

confidence: 99%

A survey of intrusion detection techniques for cyber-physical systems

2014

View full text Add to dashboard Cite

Pervasive healthcare systems, smart grids, and unmanned aircraft systems are examples of Cyber-Physical Systems (CPSs) that have become highly integrated in the modern world. As this integration deepens, the importance of securing these systems increases. In order to identify gaps and propose research directions in CPS intrusion detection research, we survey the literature of this area. Our approach is to classify modern CPS Intrusion Detection System (IDS) techniques based on two design dimensions: detection technique and audit material. We summarize advantages and drawbacks of each dimension's options. We also summarize the most and least studied CPS IDS techniques in the literature and provide insight on the effectiveness of IDS techniques as they apply to CPSs. Finally, we identify gaps in CPS IDS research and suggest future research areas.

show abstract

Section: Intrusion Detection Performance Metricsmentioning

confidence: 99%

A survey of intrusion detection techniques for cyber-physical systems

2014

View full text Add to dashboard Cite

show abstract

“…However, there is no globally accepted standard/metric to assess the efficacy of detection system . The detection latency can be used as a critical metric for evaluating the IDS . Some researchers widely used receiver operating characteristic (ROC) curve for precise evaluation of IDSs, but the results can be misleading or incomplete .…”

Section: Open Issues and Challengesmentioning

confidence: 99%

“…McHugh provided a broad view of “how difficult it is to give good measurements of IDS.” Some researchers have attempted receiver operating characteristic graph (detection rate versus false positive rate) to evaluate the efficiency of IDS . However, detection latency is rarely used to measure the IDS performance . The detection latency is the difference between the time at which the adversary penetrates the protected system and the time at which it is first detected.…”

Section: Intrusion Detection Systemsmentioning

confidence: 99%

Intrusion detection in mobile ad hoc networks: techniques, systems, and future challenges

Kumar

Dutta

2016

Security Comm Networks

View full text Add to dashboard Cite

In recent years, Mobile Ad hoc NETworks (MANETs) have generated great interest among researchers in the development of theoretical and practical concepts, and their implementation under several computing environments. However, MANETs are highly susceptible to various security attacks due to their inherent characteristics. In order to provide adequate security against multi-level attacks, the researchers are of the opinion that detection-based schemes should be incorporated in addition to traditionally used prevention techniques because prevention-based techniques cannot prevent the attacks from compromised internal nodes. Intrusion detection system is an effective defense mechanism that detects and prevents the security attacks at various levels. This paper tries to provide a structured and comprehensive survey of most prominent intrusion detection techniques of recent past and present for MANETs in accordance with technology layout and detection algorithms. These detection techniques are broadly classified into nine categories based on their primary detection engine/(s). Further, an attempt has been made to compare different intrusion detection techniques with their operational strengths and limitations. Finally, the paper concludes with a number of future research directions in the design and implementation of intrusion detection systems for MANETs.

show abstract

“…In fact, detection latency may be potentially more important than the accuracy of the detection, as there is no point in detecting an event after it has caused permanent physical damage to a vehicle (e.g., by causing it to veer off the road and crash). A few researchers have included detection latency as a metric, but mostly in relation to mobile ad hoc networks and wireless sensor networks [23], [24]. We propose that this is a significant metric for assessing the performance of our system.…”

Section: Detection Latency (Dl)mentioning

confidence: 99%

Performance Evaluation of Cyber-Physical Intrusion Detection on a Robotic Vehicle

Vuong

Loukas

Gan

2015

2015 IEEE International Conference on Computer and Information Technology; Ubiquitous Computing and Communications; Dependable,

View full text Add to dashboard Cite

Abstract-Intrusion detection systems designed for conventional computer systems and networks are not necessarily suitable for mobile cyber-physical systems, such as robots, drones and automobiles. They tend to be geared towards attacks of different nature and do not take into account mobility, energy consumption and other physical aspects that are vital to a mobile cyber-physical system. We have developed a decision tree-based method for detecting cyber attacks on a small-scale robotic vehicle using both cyber and physical features that can be measured by its on-board systems and processes. We evaluate it experimentally against a variety of scenarios involving denial of service, command injection and two types of malware attacks. We observe that the addition of physical features noticeably improves the detection accuracy for two of the four attack types and reduces the detection latency for all four.

show abstract

Quantifying resiliency and detection latency of intrusion detection structures

Cited by 5 publications

References 17 publications

A survey of intrusion detection techniques for cyber-physical systems

A survey of intrusion detection techniques for cyber-physical systems

Intrusion detection in mobile ad hoc networks: techniques, systems, and future challenges

Performance Evaluation of Cyber-Physical Intrusion Detection on a Robotic Vehicle

Contact Info

Product

Resources

About