A Modular Architecture for Distributed IDS in MANET

Puttini, Ricardo Staciarini; Percher, Jean-Marc; Mé, Ludovic; Camp, Olivier; Sousa, Rafael de; Abbas, Cláudia J. Barenco; Villalba, Luis Javier García

doi:10.1007/3-540-44842-x_11

Cited by 24 publications

(16 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Puttini et al have proposed an IDS architecture where information in the management information base (MIB) is used as input data [53]. It also uses mobile agent and a collaborative decision making mechanism.…”

Section: Review Of Manet Intrusion Detection Security Approachesmentioning

confidence: 99%

“…Puttini et al have proposed a secure routing protocol that combines a certificate based authentication service with intrusion detection model to provide preventive and corrective protections for Mobile Ad Hoc Networks [53]. Bhargava et al have proposed a security model for AODV routing protocol to prevent attacks in mobile networks [66].…”

Section: Review Of Manet Intrusion Response Securitymentioning

confidence: 99%

See 1 more Smart Citation

Classification and Review of Security Schemes in Mobile Computing

Kumar¹

2010

WSN

View full text Add to dashboard Cite

In this paper, we present the classification and review of security schemes in mobile computing system. We classify these schemes based on types the infrastructure used in the mobile computing system-Mobile Ad Hoc Networks (MANET) and Mobile Agent model. Mobile Ad Hoc Networks are pervasive, ubiquitous and without any centralized authority. These unique characteristics, combined with ever-increasing security threats, demand solutions in securing ad hoc networks prior to their deployment in commercial and military applications. This paper reviews the prevailing mobile ad hoc network security threats, the existing solution schemes, their limitations and open research issues. We also explain the Intrusion detection and response technique as an alternate method to protect the MANET based mobile computing systems and their approaches. A literature review of important existing Intrusion Detection approaches and Intrusion Response Approaches for MANET is also presented. This paper also presents the limitations of existing Intrusion Detection and Response Approaches for MANET and open research issues in providing MANET security. With respect to Mobile Agent based mobile computing system, we have presented the classification of various types of security attacks in Mobile Agent based model and presented the security solutions for those type of attacks proposed by the various schemes and the open research issues in providing security for Mobile Agent based mobile computing system. Such classification enhances the understanding of the proposed security schemes in the mobile computing system, assists in the development and enhancement of schemes in the future and helps in choosing an appropriate scheme while implementing a mobile computing system.

show abstract

Section: Review Of Manet Intrusion Detection Security Approachesmentioning

confidence: 99%

Section: Review Of Manet Intrusion Response Securitymentioning

confidence: 99%

Classification and Review of Security Schemes in Mobile Computing

Kumar¹

2010

WSN

View full text Add to dashboard Cite

show abstract

“…Also, published intrusion detection approaches do not address intrusion response yet. This is the case for [7,8], where basic MANET IDS architectures have been proposed and preliminary results were presented. An intrusion detection strategy to deal with non-cooperative nodes in ad hoc networks is presented in [9].…”

Section: Related Workmentioning

confidence: 99%

“…Certification services and intrusion detection and response should be provided in a self-organized and distributed manner by a Local Certification Service (L-Cert) and a Local IDS (LIDS) instances [8]. Fig.…”

Section: Security (Protection) Modelmentioning

confidence: 99%

“…Given the lack of centralization, the mobility of the nodes and the wireless nature of link connections in the MANET environment, some (if not all) of the tasks required for the intrusion detection process described above should be executed in a distributed and cooperative manner [7,8]. To active these objectives, the MANETadapted IDS is designed with the following features: (1) each MANET node runs an autonomous instance of a local IDS (LIDS); (2) each LIDS is functionally complete, in the sense that it may execute the whole detection process (e.g.…”

Section: Collaborative Intrusion Detection and Responsementioning

confidence: 99%

See 1 more Smart Citation

Preventive and Corrective Protection for Mobile Ad Hoc Network Routing Protocols

Puttini

Mé

Sousa

2004

Wireless on-Demand Network Systems

Self Cite

View full text Add to dashboard Cite

Abstract. In this paper we describe vulnerabilities and possible protections for mobile ad hoc networks (MANET) routing protocols. Vulnerability and adversary models are built to describe impersonation, fabrication and modification attacks. A security model is proposed, considering both preventive and corrective protection. The basic preventive protection consists of a certificate-based authentication mechanism, which is designed as a MANET authentication extension (MAE) that provides authentication for all routing protocol messages. Corrective protection consists of an intrusion detection and response service (IDS). Certification service and IDS are both provided in a distributed and selforganized manner. Intrusion response is mainly defined in terms of interaction between certification service and IDS. The proposed vulnerability analysis and security design are detailed and validated using the Optimized Link State Routing (OLSR) Protocol.

show abstract

Intrusion detection in mobile ad hoc networks: techniques, systems, and future challenges

Kumar

Dutta

2016

Security Comm Networks

View full text Add to dashboard Cite

In recent years, Mobile Ad hoc NETworks (MANETs) have generated great interest among researchers in the development of theoretical and practical concepts, and their implementation under several computing environments. However, MANETs are highly susceptible to various security attacks due to their inherent characteristics. In order to provide adequate security against multi-level attacks, the researchers are of the opinion that detection-based schemes should be incorporated in addition to traditionally used prevention techniques because prevention-based techniques cannot prevent the attacks from compromised internal nodes. Intrusion detection system is an effective defense mechanism that detects and prevents the security attacks at various levels. This paper tries to provide a structured and comprehensive survey of most prominent intrusion detection techniques of recent past and present for MANETs in accordance with technology layout and detection algorithms. These detection techniques are broadly classified into nine categories based on their primary detection engine/(s). Further, an attempt has been made to compare different intrusion detection techniques with their operational strengths and limitations. Finally, the paper concludes with a number of future research directions in the design and implementation of intrusion detection systems for MANETs.

show abstract

A Modular Architecture for Distributed IDS in MANET

Cited by 24 publications

References 9 publications

Classification and Review of Security Schemes in Mobile Computing

Classification and Review of Security Schemes in Mobile Computing

Preventive and Corrective Protection for Mobile Ad Hoc Network Routing Protocols

Intrusion detection in mobile ad hoc networks: techniques, systems, and future challenges

Contact Info

Product

Resources

About