Distributed and Cooperative Hierarchical Intrusion Detection on MANETs
Distributed and Cooperative Hierarchical Intrusion Detection on MANETs
复制标题
MANET 上的分布式协作分层入侵检测
DOI：
10.5120/1673-2257
复制
发表时间：
2010
期刊：
影响因子：
--
通讯作者：
S. Jusoh
中科院分区：
文献类型：
--
作者：
Farhan Abdel Fattah;Z. Dahalin;S. Jusoh
节点间的无线链路以及自组织网络的动态网络特性，增加了设计和实现入侵检测以检测攻击的难度。传统的入侵检测技术在处理动态环境方面存在困难。特别是收集实时攻击相关审计数据、协同全局检测等问题。因此，我们有动力设计一种新的入侵检测体系结构，该体系结构采用了新的检测技术来有效地检测自组织网络中的异常。本文提出了一种移动自组网（MANET）入侵检测技术的体系结构和操作方法。该模型具有分布式和协作的结构。提出的入侵检测技术结合了异常检测的灵活性和基于签名的检测方法的准确性。特别是，我们利用机器学习技术来实现高效和有效的入侵检测。一系列仿真和实验结果表明，本文提出的入侵检测方法能够有效检测异常，具有低误报率、高检测率和较高的检测精度。
The wireless links between the nodes together with the dynamicnetwork nature of ad hoc network, increases the challenges of design and implement intrusion detection to detect the attacks. Traditional intrusion detection techniques have had trouble dealing with dynamic environments. In particular, issues such as collects real time attack related audit data and cooperative global detection. Therefore, we are motivated to design a new intrusion detection architecture which involves new detection technique to efficiently detect the abnormalities in the ad hoc networks. In this paper we present the architecture and operation of an intrusion detection technique in Mobile Ad hoc NETwork (MANET). The proposed model has distributed and cooperative architecture. The proposed intrusion detection technique combines the flexibility of anomaly detection with the accuracy of a signature-based detection method. In particular, we exploit machine learning techniques in order to achieve efficient and effective intrusion detection. A series of simulation and experimental results demonstrate that the proposed intrusion detection can effectively detect anomalies with low false positive rate, high detection rate and achieve higher detection accuracy.