A two-tier intrusion detection system for mobile ad hoc networks – a friend approach

  • Authors:
  • Shukor Abd Razak;Steven Furnell;Nathan Clarke;Phillip Brooke

  • Affiliations:
  • Network Research Group, School of Computing, Communications & Electronics, University of Plymouth, Email:info@network-research-group.org, Plymouth, United Kingdom;Network Research Group, School of Computing, Communications & Electronics, University of Plymouth, Email:info@network-research-group.org, Plymouth, United Kingdom;Network Research Group, School of Computing, Communications & Electronics, University of Plymouth, Email:info@network-research-group.org, Plymouth, United Kingdom;School of Computing, University of Teesside, Middlesbrough, United Kingdom

  • Venue:
  • ISI'06 Proceedings of the 4th IEEE international conference on Intelligence and Security Informatics
  • Year:
  • 2006

Quantified Score

Hi-index 0.00

Visualization

Abstract

Existing Intrusion Detection Systems (IDS) in Mobile Ad Hoc Network (MANET) environments suffer from many problems because of the inherent characteristics of the network. Limited audit data, along with the problems faced in achieving global detection and response mechanisms, creates challenges for establishing reliable IDS for MANETs. In this paper, several scenarios are investigated where a ‘friend’ concept has been applied to solve MANET problems. This same concept is applied to a new IDS framework, and discussion is presented into how it can help in minimizing the problems that are faced in existing IDS. The key advantages of this two-tier IDS framework are its ability to detect intrusion at an early stage of such behaviour in the network, and its capability to minimize the impact of colluding blackmail attackers in the systems.