Cross-Feature Analysis for Detecting Ad-Hoc Routing Anomalies

  • Authors:
  • Yi-an Huang;Wei Fan;Wenke Lee;Philip S. Yu

  • Affiliations:
  • -;-;-;-

  • Venue:
  • ICDCS '03 Proceedings of the 23rd International Conference on Distributed Computing Systems
  • Year:
  • 2003

Quantified Score

Hi-index 0.01

Visualization

Abstract

With the proliferation of wireless devices, mobile ad-hocnetworking (MANET) has become a very exciting and importanttechnology. However, MANET is more vulnerablethan wired networking. Existing security mechanisms designedfor wired networks have to be redesigned in this newenvironment. In this paper, we discuss the problem of intrusiondetection in MANET. The focus of our research is ontechniques for automatically constructing anomaly detectionmodels that are capable of detecting new (or unseen)attacks. We introduce a new data mining method that performs"cross-feature analysis" to capture the inter-featurecorrelation patterns in normal traffic. These patterns can beused as normal profiles to detect deviation (or anomalies)caused by attacks. We have implemented our method on afew well known ad-hoc routing protocols, namely, DynamicSource Routing (DSR) and Ad-hoc On-Demand DistanceVector (AODV), and have conducted extensive experimentson the ns-2 simulator. The results show that the anomalydetection models automatically computed using our datamining method can effectively detect anomalies caused bytypical routing intrusions.