INSURE: Intrusion detectioN System for pUblic hotspot cybeR sEcurity

INSURE：公共热点网络安全入侵检测系统

• 批准号: 105350
• 金额: $ 2.11万
• 依托单位: DE MONTFORT UNIVERSITY
• 依托单位国家: 英国
• 项目类别: Feasibility Studies
• 财政年份: 2019
• 资助国家: 英国
• 起止时间: 2019 至 无数据
• 项目状态: 已结题
• 来源: https://gtr.ukri.org/projects?ref=105350
• 关键词: INSURE; Intrusion; detectioN; System; pUblic

Wi-Fi attracts great interest among Internet Service Providers and end users despite the growth in popularity of the 4G/5G technologies. Mobile operators want to see a closer integration between mobile broadband networks and Wi-Fi access points, also known as Hotspots, as these represent a key solution to improve the overall performance of the mobile communication. Unfortunately, public Wi-Fi hotspots pose many security risks to millions of laptop, tablet and smartphone owners, exposing banking credentials, account passwords and personal information to an increasing number of sophisticated, easy to launch and untraceable cyber-attacks. Hence, providing strong and reliable security mechanisms has become critically important. This proposal presents INSURE, an unsupervised anomaly-based Intrusion Detection System that will provide an extra level of assurance to end user devices in public Wi-Fi hotspot networks, by identifying different types of threats in real-time. INSURE advances the state-of-the-art as it exploits a novel detection methodology, which automatically adapts to the current characteristics of the network traffic without manual intervention from an administrator. It automatically constructs a reference from normal behaviour and flags as malicious information that deviates from this reference. The proposal aims to develop INSURE into a fully operational commercial Intrusion Detection System.

尽管4G/5G技术越来越受欢迎，Wi-Fi还是吸引了互联网服务提供商和最终用户的极大兴趣。移动运营商希望看到移动宽带网络和Wi-Fi接入点(也称为热点)之间更紧密的整合，因为这些接入点代表着提高移动通信整体性能的关键解决方案。不幸的是，公共Wi-Fi热点给数百万笔记本电脑、平板电脑和智能手机用户带来了许多安全风险，使银行凭证、账户密码和个人信息暴露在越来越多复杂、易于发动和无法追踪的网络攻击之下。因此，提供强大可靠的安全机制就变得至关重要。该提案提出了InSure，这是一种基于异常的无监督入侵检测系统，通过实时识别不同类型的威胁，将为公共Wi-Fi热点网络中的最终用户设备提供额外级别的保证。Insuure采用了一种新的检测方法，无需管理员手动干预即可自动适应网络流量的当前特征，从而推进了最先进的检测方法。它根据正常行为自动构造一个引用，并将其标记为偏离该引用的恶意信息。该提案旨在将Insuure发展成为一个完全可运行的商业入侵检测系统。