On the anomaly intrusion-detection in mobile ad hoc network environments

Authors:
Ricardo Puttini;Maíra Hanashiro;Fábio Miziara;Rafael de Sousa;L. Javier García-Villalba;C. J. Barenco
Affiliations:
Faculdade de Tecnologia, Depto. de Engenharia Eléctrica, Laboratório de Redes, Universidade de Brasília (UnB), Brasília, DF, Brazil;Faculdade de Tecnologia, Depto. de Engenharia Eléctrica, Laboratório de Redes, Universidade de Brasília (UnB), Brasília, DF, Brazil;Faculdade de Tecnologia, Depto. de Engenharia Eléctrica, Laboratório de Redes, Universidade de Brasília (UnB), Brasília, DF, Brazil;Faculdade de Tecnologia, Depto. de Engenharia Eléctrica, Laboratório de Redes, Universidade de Brasília (UnB), Brasília, DF, Brazil;Grupo de Análisis, Seguridad y Sistemas (GASS), Departamento de Sistemas Informáticos y Programación (DSIP), Facultad de Informática, Despacho 431, Universidad Complutense de M ...;Departamento de Computación y Tecnología de la Información, Universidad Simón Bolívar (USB), Caracas, Venezuela
Venue:
PWC'06 Proceedings of the 11th IFIP TC6 international conference on Personal Wireless Communications
Year:
2006

Citing 8
Cited 2

Mitigating routing misbehavior in mobile ad hoc networks

MobiCom '00 Proceedings of the 6th annual international conference on Mobile computing and networking
Self-organized network-layer security in mobile ad hoc networks

WiSE '02 Proceedings of the 1st ACM workshop on Wireless security
Sensor-based intrusion detection for intra-domain distance-vector routing

Proceedings of the 9th ACM conference on Computer and communications security
Cross-Feature Analysis for Detecting Ad-Hoc Routing Anomalies

ICDCS '03 Proceedings of the 23rd International Conference on Distributed Computing Systems
A specification-based intrusion detection system for AODV

Proceedings of the 1st ACM workshop on Security of ad hoc and sensor networks
An Intrusion Detection Tool for AODV-Based Ad hoc Wireless Networks

ACSAC '04 Proceedings of the 20th Annual Computer Security Applications Conference
A fully distributed IDS for MANET

ISCC '04 Proceedings of the Ninth International Symposium on Computers and Communications 2004 Volume 2 (ISCC"04) - Volume 02
Security in mobile ad hoc networks: challenges and solutions

IEEE Wireless Communications

Traffic flooding attack detection with SNMP MIB using SVM

Computer Communications
An in-depth analysis on traffic flooding attacks detection and system using data mining techniques

Journal of Systems Architecture: the EUROMICRO Journal

Quantified Score

Hi-index	0.00

Visualization

Abstract

Manet security has a lot of open issues. Due to its characteristics, this kind of network needs preventive and corrective protection. In this paper, we focus on corrective protection proposing an anomaly IDS model for Manet. The design and development of the IDS are considered in our 3 main stages: normal behavior construction, anomaly detection and model update. A parametrical mixture model is used for behavior modeling from reference data. The associated Bayesian classification leads to the detection algorithm. MIB variables are used to provide IDS needed information. Experiments of DoS and scanner attacks validating the model are presented as well.