DogoIDS: a mobile and active intrusion detection system for IEEE 802.11s wireless mesh networks

  • Authors:
  • Rodrigo do Carmo;Matthias Hollick

  • Affiliations:
  • Technische Universität Darmstadt, Darmstadt, Germany;Technische Universität Darmstadt, Darmstadt, Germany

  • Venue:
  • Proceedings of the 2nd ACM workshop on Hot topics on wireless network security and privacy
  • Year:
  • 2013

Quantified Score

Hi-index 0.00

Visualization

Abstract

Wireless Mesh Networks (WMN) are particularly vulnerable to attacks, since they feature constraint nodes, multi-hop communication, and an open wireless communication channel. These features limit the feasibility of the deployment of contemporary Intrusion Detection Systems (IDS): centralized systems fail because there is no strict network boundary, and distributed and/or cooperative systems challenge the limited resources of the nodes. As a result, practical IDSs for WMNs are scarce, and existing systems are limited with respect to detection capabilities. In this paper we present the design, implementation, and evaluation of "DogoIDS": an open source, mobile, active-probing-based intrusion detection system. Exploiting mobility allows to mitigate the limitations of distributed, node-dependent systems. The active nature of the system achieves detection capabilities beyond that of a purely passive system. We show the accuracy and speed of our prototype in a testbed WMN---based on the IEEE 802.11s standard---under realistic attacks.