Embedded Intelligent Intrusion Detection: A Behavior-Based Approach

  • Authors:
  • Adrian P. Lauf;Richard A. Peters;William H. Robinson

  • Affiliations:
  • Vanderbilt University School of Engineering, USA;Vanderbilt University School of Engineering, USA;Vanderbilt University School of Engineering, USA

  • Venue:
  • AINAW '07 Proceedings of the 21st International Conference on Advanced Information Networking and Applications Workshops - Volume 01
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

This paper describes the development of an intelligent intrusion detection system for use within an embedded device network consisting of interconnected agents. Integral behavior types are categorized by focusing primarily on inter-device requests and actions rather than at a packet or link level. Machine learning techniques use these observed behavioral actions to track devices which deviate from normal protocol. Deviant behavior can be analyzed and flagged, enabling interconnected agents to identify an intruder based upon the historical distribution of behavioral data that is accumulated about the possible deviant agent. Simulation results from the prototype system correlate detection accuracy with a tunable input tolerance factor.