A specification-based intrusion detection engine for infrastructure-less networks

Panos, Christoforos; Xenakis, Christos; Kotzias, Platon; Stavrakakis, Ioannis

doi:10.1016/j.comcom.2014.08.002

Cited by 24 publications

(28 citation statements)

References 35 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Based on this, each node decides whether it should forward other nodes' data. Panos et al [18] proposed 'SIDE', which monitors a node's behavior using a host-based detection engine and a remote attestation procedure for ensuring the integrity of the SIDE. Li and Cao [19] addressed routing misbehaviors and mitigated them in DTNs.…”

Section: Related Workmentioning

confidence: 99%

DISIDE: Distributed strategy identification in opportunistic mobile networks

Pal

Misra

2015

Computer Communications

View full text Add to dashboard Cite

Section: Related Workmentioning

confidence: 99%

DISIDE: Distributed strategy identification in opportunistic mobile networks

Pal

Misra

2015

Computer Communications

View full text Add to dashboard Cite

“…In , they presented a specification‐based IDS called SIDE that safeguards the operation of the AODV routing protocol against a set of routing attacks. SIDE consists of two main functionalities: (i) a specification‐based detection engine and (ii) a remote attestation procedure.…”

Section: Intrusion Detection Techniquesmentioning

confidence: 99%

“…SIDE consists of two main functionalities: (i) a specification‐based detection engine and (ii) a remote attestation procedure. The specification‐based detection engine is installed on every node that detects a number of routing attacks . The remote attestation procedure ensures the integrity of a running SIDE instance and accelerates the detection mechanism.…”

Section: Intrusion Detection Techniquesmentioning

confidence: 99%

Intrusion detection in mobile ad hoc networks: techniques, systems, and future challenges

Kumar

Dutta

2016

Security Comm Networks

View full text Add to dashboard Cite

In recent years, Mobile Ad hoc NETworks (MANETs) have generated great interest among researchers in the development of theoretical and practical concepts, and their implementation under several computing environments. However, MANETs are highly susceptible to various security attacks due to their inherent characteristics. In order to provide adequate security against multi-level attacks, the researchers are of the opinion that detection-based schemes should be incorporated in addition to traditionally used prevention techniques because prevention-based techniques cannot prevent the attacks from compromised internal nodes. Intrusion detection system is an effective defense mechanism that detects and prevents the security attacks at various levels. This paper tries to provide a structured and comprehensive survey of most prominent intrusion detection techniques of recent past and present for MANETs in accordance with technology layout and detection algorithms. These detection techniques are broadly classified into nine categories based on their primary detection engine/(s). Further, an attempt has been made to compare different intrusion detection techniques with their operational strengths and limitations. Finally, the paper concludes with a number of future research directions in the design and implementation of intrusion detection systems for MANETs.

show abstract

“…These networks comprise a wide range of networking paradigms such as mesh networks, mobile ad hoc networks (MANETs), vehicular ad hoc networks (VANETs), delay tolerant networks (DTN), opportunistic and sensor networks [1]. A common characteristic of these networks is the absence of any fixed architectural components such as routers, access points, etc., supporting and serving dynamic topologies and behaviors.…”

Section: Introductionmentioning

confidence: 99%

Analyzing, quantifying, and detecting the blackhole attack in infrastructure-less networks

et al. 2017

Self Cite

View full text Add to dashboard Cite

The blackhole attack is one of the simplest yet effective attacks that target the AODV protocol. Blackhole attackers exploit AODV parameters in order to win route requests, and thus, attract traffic, which they subsequently capture and drop. However, the first part of the attack is often neglected in present literature, while the majority of attempts in detection focus only on the second part of the attack (i.e., packet drop). This paper provides a comprehensive analysis of the blackhole attack, focusing not only on the effects of the attack, but also on the exploitation of the route discovery process. As a result, a new critical attack parameter is identified (i.e., blackhole intensity), which quantifies the relation between AODV's sequence number parameter and the performance of blackhole attacks. In addition, a novel blackhole detection mechanism is also proposed. This mechanism utilizes a dynamic threshold cumulative sum (CUSUM) test in order to detect abrupt changes in the normal behavior of AODV's sequence number parameter. A key advantage of the proposed mechanism is its ability to accurately detect blackhole attacks with a minimal rate of false positives, even if the malicious node selectively drops packets.

show abstract

A specification-based intrusion detection engine for infrastructure-less networks

Cited by 24 publications

References 35 publications

DISIDE: Distributed strategy identification in opportunistic mobile networks

DISIDE: Distributed strategy identification in opportunistic mobile networks

Intrusion detection in mobile ad hoc networks: techniques, systems, and future challenges

Analyzing, quantifying, and detecting the blackhole attack in infrastructure-less networks

Contact Info

Product

Resources

About