Applying mobile agent to intrusion response for ad hoc networks

Authors:
Ping Yi;Yiping Zhong;Shiyong Zhang
Affiliations:
Department of Computing and Information Technology, Fudan University, China;Department of Computing and Information Technology, Fudan University, China;Department of Computing and Information Technology, Fudan University, China
Venue:
ICCS'05 Proceedings of the 5th international conference on Computational Science - Volume Part II
Year:
2005

Citing 8
Cited 0

Ariadne: a secure on-demand routing protocol for ad hoc networks

Proceedings of the 8th annual international conference on Mobile computing and networking
A Secure Routing Protocol for Ad Hoc Networks

ICNP '02 Proceedings of the 10th IEEE International Conference on Network Protocols
Autonomic Response to Distributed Denial of Service Attacks

RAID '00 Proceedings of the 4th International Symposium on Recent Advances in Intrusion Detection
Verification of a Revised WAP Wireless Transaction Protocol

ICATPN '02 Proceedings of the 23rd International Conference on Applications and Theory of Petri Nets
Self-Organized Public-Key Management for Mobile Ad Hoc Networks

IEEE Transactions on Mobile Computing
SEAD: Secure Efficient Distance Vector Routing for Mobile Wireless Ad Hoc Networks

WMCSA '02 Proceedings of the Fourth IEEE Workshop on Mobile Computing Systems and Applications
Distributed Intrusion Detection for Mobile Ad Hoc Networks

SAINT-W '05 Proceedings of the 2005 Symposium on Applications and the Internet Workshops
Securing ad hoc networks

IEEE Network: The Magazine of Global Internetworking

Quantified Score

Hi-index	0.00

Visualization

Abstract

Mobile ad hoc networking offers convenient infrastructureless communication over the shared wireless channel. However, the nature of ad hoc networks makes them vulnerable to security attacks. Existing security technologies such as intrusion prevention and intrusion detection are passive in response to intrusions in that their countermeasures are only to protect the networks and there is no automated, network-wide counteraction against detected intrusions. While they all play an important role in counteracting intrusion, they do not, however, effectively address the root cause of the problem – intruders. In this paper, we propose the architecture of automated intrusion response. When an intruder is found in our architecture, the block agents will get to the neighbor nodes of the intruder and formed the mobile firewall to isolate the intruder.