Towards a Cooperative Intrusion Detection System for Cognitive Radio Networks

Abstract

Abstract. Cognitive Radio Networks (CRNs) arise as a promising solution to the scarcity of spectrum. By means of cooperation and smart decisions influenced by previous knowledge, CRNs are able to detect and profit from the best spectrum opportunities without interfering primary licensed users. However, besides the well-known attacks to wireless networks, new attacks threat this type of networks. In this paper we analyze these threats and propose a set of intrusion detection modules targeted to detect them. Provided method will allow a CRN to identify attack sources and types of attacks, and to properly react against them.

Intrusion detection system (IDS) for combating attacks against cognitive radio networks

“…A pioneering piece of work indicating the need of IDS in a CRN is presented by Olga et al in [2]. This work explains that most of the existing cryptographic primitives (e.g., authentication and encryption techniques) used in other wireless communication systems may be applicable to CRNs as a first line of defense.…”

“…When a malicious user jams a secondary user's connection, the following observations can be made. While the SS measured at that secondary user remains high, his PDR usually drops [2], [8], [9]. This happens because the secondary user never receives some/all of the packets sent to him.…”

“…Although some solutions have been presented to detect these attacks, to the best of our knowledge to date, a full-fledged intrusion detection system (IDS) has not yet been designed for combating the attacks against CRNs. The research work presented in [2] pioneered in addressing the need of IDS for CRNs as a second line of intrusion/attack detection in addition to the conventional cryptographic primitives for facilitating authentication and confidentiality. Even though the work in [2] defined some of the essential modules for designing an IDS for CRNs, it did not focus on specifying any lightweight detection algorithm.…”

“…The research work presented in [2] pioneered in addressing the need of IDS for CRNs as a second line of intrusion/attack detection in addition to the conventional cryptographic primitives for facilitating authentication and confidentiality. Even though the work in [2] defined some of the essential modules for designing an IDS for CRNs, it did not focus on specifying any lightweight detection algorithm. Having understood the lack of research work on the IDS based defense for CRNs, we are motivated to design an effective IDS for deployment in the cognitive unlicensed users.…”

Cognitive radio network security: A survey

“…RMs are necessary to validate the confidence of the data supplied for the radios. The architecture of an IDS entity for distributed systems is based on its basic elements: a local packet monitoring module that receives the packets from the neighborhood, a statistics module that stores the information derived from the packets and information regarding the neighborhood, a local detection module that detects the existence of the different attacks, an alert database that stores information about possible attacks, a cooperative detection module that collaborates with other detection entities located within the neighborhood, and a local response module that makes decisions according to the output of the detection modules (Leó n et al, 2011). Focusing on the detection modules used in these IDS for CRNs, they must make use of first-hand information, second-hand information, statistical data, and the data acquired by the CRs during its normal operation.…”