TC: Small: Real-Time Intrusion Detection for VoIP over IEEE 802.11 Based Wireless Networks: An Analytical Approach for Guaranteed Performance

基于IEEE 802.11的无线网络上的IP语音(VoIP)导致了一个很有前途的全IP平台，可以随时随地为移动用户提供经济、高质量的语音服务。由于无线VoIP所涉及的协议的开放性和分布性，恶意用户很容易通过偏离正常的协议行为来实现自己的利益或扰乱服务。该项目开发了一个实时入侵检测框架，不需要修改相关的标准协议。这项研究将通过三条互补的途径：802.11协议上的自私行为检测、会话发起协议层的攻击和检测以及跨层入侵检测框架的开发，来显著提高基于802.11的无线网络的实时入侵检测的技术水平。在教育方面，拟议的跨学科研究无缝整合了马尔可夫决策过程、小波分析、802.11协议分析和流量建模等领域的理论研究，以及计算机模拟和试验台实验，其优势是为不同兴趣的本科生和研究生提供各种培训项目。在行业方面，该项目的成功将为无线网络上的VoIP生成一个入侵检测框架，该框架具有健壮的检测性能、可证明的检测服务质量和对未来入侵检测技术的良好可扩展性。

Voice over IP (VoIP) over IEEE 802.11 based wireless networks leads to a promising all-IP platform provisioning economic high-quality voice services to mobile users anytime and anywhere. Due to the openness and distributed nature of the protocols involved in the VoIP over wireless, it becomes easy for malicious users to achieve their own gain or disrupt the service by deviating from the normal protocol behaviors. This project develops a real-time intrusion detection framework, requiring no modification to the relevant standard protocols. Analytical tools are also developed for guiding the detection system design for guaranteed performance.This research is expected to significantly advance the state of the art of real-time intrusion detection for VoIP over 802.11 based wireless networks, through three complementary tracks: selfish behavior detection over the 802.11 protocol, session initiation protocol (SIP)-layer attacks and detections, and development of a cross-layer intrusion detection framework. On the education front, the proposed interdisciplinary research seamlessly integrates theoretical studies in the areas of Markov decision process, wavelet analysis, 802.11 protocol analysis, and traffic modeling, as well as computer simulation and testbed experiments, with the advantages of providing various training projects to undergraduate and graduate students with different interests. On the industry front, the success of this project will generate an intrusion detection framework for the VoIP over wireless networks with the advantages of robust detection performance, provable detection quality of service, and excellent extendibility for future intrusion detection techniques.