A fully distributed IDS for MANET

Puttini, Ricardo Staciarini; Percher, Jean-Marc; Mé, Ludovic; Sousa, Rafael de

doi:10.1109/iscc.2004.1358426

Cited by 25 publications

(11 citation statements)

References 21 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We assume that each Manet node executes one local instance of the IDS, called L-IDS. The L-IDS data collector executes periodic pooling to a local SNMP agent [6]. This is equivalent to processing the IDS algorithms with the values assumed by the MIB variables that are stored inside the *.mib files.…”

Section: Implementation and Experimental Resultsmentioning

confidence: 99%

See 1 more Smart Citation

On the Anomaly Intrusion-Detection in Mobile Ad Hoc Network Environments

Puttini

Hanashiro

Miziara

et al. 2006

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Abstract. Manet security has a lot of open issues. Due to its characteristics, this kind of network needs preventive and corrective protection. In this paper, we focus on corrective protection proposing an anomaly IDS model for Manet. The design and development of the IDS are considered in our 3 main stages: normal behavior construction, anomaly detection and model update. A parametrical mixture model is used for behavior modeling from reference data. The associated Bayesian classification leads to the detection algorithm. MIB variables are used to provide IDS needed information. Experiments of DoS and scanner attacks validating the model are presented as well.

show abstract

Section: Implementation and Experimental Resultsmentioning

confidence: 99%

“…This architectural design was explored in V. Mittal and G. Vigna [5] who present an IDS formed by various sensors to detect attacks against the routing protocol that monitors promiscuously the network links. In a previous work, R. Puttini et al [6] present the design of a fully-distributed IDS architecture.…”

Section: Related Workmentioning

confidence: 99%

On the Anomaly Intrusion-Detection in Mobile Ad Hoc Network Environments

Puttini

Hanashiro

Miziara

et al. 2006

Lecture Notes in Computer Science

View full text Add to dashboard Cite

show abstract

“…Thus, even though the idea of integrated detection and response model seems feasible, it appears that the implementation and simulation have not been conducted. Similarly, few related IDA models propose response actions/frameworks for responding to the attacks once it is detected [57][58][59][60][61][62][63][64][65]. However the response system incorporating all those actions is not implemented.…”

Section: Review Of Manet Intrusion Response Securitymentioning

confidence: 99%

Classification and Review of Security Schemes in Mobile Computing

Kumar¹

2010

WSN

View full text Add to dashboard Cite

In this paper, we present the classification and review of security schemes in mobile computing system. We classify these schemes based on types the infrastructure used in the mobile computing system-Mobile Ad Hoc Networks (MANET) and Mobile Agent model. Mobile Ad Hoc Networks are pervasive, ubiquitous and without any centralized authority. These unique characteristics, combined with ever-increasing security threats, demand solutions in securing ad hoc networks prior to their deployment in commercial and military applications. This paper reviews the prevailing mobile ad hoc network security threats, the existing solution schemes, their limitations and open research issues. We also explain the Intrusion detection and response technique as an alternate method to protect the MANET based mobile computing systems and their approaches. A literature review of important existing Intrusion Detection approaches and Intrusion Response Approaches for MANET is also presented. This paper also presents the limitations of existing Intrusion Detection and Response Approaches for MANET and open research issues in providing MANET security. With respect to Mobile Agent based mobile computing system, we have presented the classification of various types of security attacks in Mobile Agent based model and presented the security solutions for those type of attacks proposed by the various schemes and the open research issues in providing security for Mobile Agent based mobile computing system. Such classification enhances the understanding of the proposed security schemes in the mobile computing system, assists in the development and enhancement of schemes in the future and helps in choosing an appropriate scheme while implementing a mobile computing system.

show abstract

“…As a result, we propose a distributed network monitor architecture which traces data flow on each node by means of finite state machine. [18]. In fully distributed IDS distribution is not restricted to data collection but also applied to execution of the detection algorithm and alert correlation.…”

Section: ) Global Integrationmentioning

confidence: 99%

Comparative study of Distributed Intrusion Detection in Ad-hoc Networks

Menaria¹,

Valiveti²,

Kotecha³

2010

IJCA

View full text Add to dashboard Cite

In recent years ad hoc networks are widely used because of mobility and open architecture nature. But new technology always comes with its own set of problems. Security of ad hoc network is an area of widespread research in recent years. Some unique characteristics of ad hoc network itself are an immense dilemma in the way of security. In this paper we have presented study about characteristics of ad hoc network, how they are problematic in ad hoc network security, attacks in ad hoc network and brief description of some existing intrusion detection system. We have also justified why distributed intrusion detection is better for ad hoc network with comparative study of existing intrusion detections in ad hoc network. General TermsAd hoc networks, Security, IDS, DIDS.

show abstract

A fully distributed IDS for MANET

Cited by 25 publications

References 21 publications

On the Anomaly Intrusion-Detection in Mobile Ad Hoc Network Environments

On the Anomaly Intrusion-Detection in Mobile Ad Hoc Network Environments

Classification and Review of Security Schemes in Mobile Computing

Comparative study of Distributed Intrusion Detection in Ad-hoc Networks

Contact Info

Product

Resources

About