TC: Small: Real-Time Intrusion Detection for VoIP over IEEE 802.11 Based Wireless Networks: An Analytical Approach for Guaranteed Performance

TC：小型：基于 IEEE 802.11 的无线网络的 VoIP 实时入侵检测：保证性能的分析方法

• 批准号: 1117687
• 负责人: Yu Cheng
• 金额: $ 38.61万
• 依托单位: Illinois Institute of Technology
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2012
• 资助国家: 美国
• 起止时间: 2012-01-01 至 2015-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1117687&HistoricalAwards=false
• 关键词: TC; Small; Real; Time; Intrusion

Voice over IP (VoIP) over IEEE 802.11 based wireless networks leads to a promising all-IP platform provisioning economic high-quality voice services to mobile users anytime and anywhere. Due to the openness and distributed nature of the protocols involved in the VoIP over wireless, it becomes easy for malicious users to achieve their own gain or disrupt the service by deviating from the normal protocol behaviors. This project develops a real-time intrusion detection framework, requiring no modification to the relevant standard protocols. Analytical tools are also developed for guiding the detection system design for guaranteed performance.This research is expected to significantly advance the state of the art of real-time intrusion detection for VoIP over 802.11 based wireless networks, through three complementary tracks: selfish behavior detection over the 802.11 protocol, session initiation protocol (SIP)-layer attacks and detections, and development of a cross-layer intrusion detection framework. On the education front, the proposed interdisciplinary research seamlessly integrates theoretical studies in the areas of Markov decision process, wavelet analysis, 802.11 protocol analysis, and traffic modeling, as well as computer simulation and testbed experiments, with the advantages of providing various training projects to undergraduate and graduate students with different interests. On the industry front, the success of this project will generate an intrusion detection framework for the VoIP over wireless networks with the advantages of robust detection performance, provable detection quality of service, and excellent extendibility for future intrusion detection techniques.

基于IEEE 802.11的无线网络上的IP语音（VoIP）导致了一个有前途的全IP平台，该平台随时随地向移动的用户提供经济的高质量语音服务。由于VoIP协议的开放性和分布式特性，恶意用户很容易通过偏离正常的协议行为来获取自己的利益或破坏服务。本项目开发了一个实时入侵检测框架，不需要修改相关的标准协议。分析工具也被开发用于指导检测系统的设计，以保证性能。这项研究预计将显着推进基于802.11无线网络的VoIP实时入侵检测的最新技术，通过三个互补的轨道：802.11协议上的自私行为检测，会话发起协议（SIP）层攻击和检测，以及跨层入侵检测框架的开发。在教育方面，拟议的跨学科研究无缝整合了马尔可夫决策过程，小波分析，802.11协议分析和流量建模等领域的理论研究，以及计算机仿真和试验台实验，为不同兴趣的本科生和研究生提供各种培训项目。在行业方面，该项目的成功将为无线网络上的VoIP生成一个入侵检测框架，该框架具有鲁棒的检测性能，可证明的检测服务质量以及未来入侵检测技术的出色可扩展性。