A survey of intrusion detection in wireless network applications

Abstract

Information systems are becoming more integrated into our lives. As this integration deepens, the importance of securing these systems increases. Because of lower installation and maintenance costs, many of these systems are largely networked by wireless means. In order to identify gaps and propose research directions in wireless network intrusion detection research, we survey the literature of this area. Our approach is to classify existing contemporary wireless intrusion detection system (IDS) techniques based on target wireless network, detection technique, collection process, trust model and analysis technique. We summarize pros and cons of the same or different types of concerns and considerations for wireless intrusion detection with respect to specific attributes of target wireless networks including wireless local area networks (WLANs), wireless personal area networks (WPANs), wireless sensor networks (WSNs), ad hoc networks, mobile telephony, wireless mesh networks (WMNs) and cyber physical systems (CPSs). Next, we summarize the most and least studied wireless IDS techniques in the literature, identify research gaps, and analyze the rationale for the degree of their treatment. Finally, we identify worthy but little explored topics and provide suggestions for ways to conduct research.

Towards a CDS-based Intrusion Detection Deployment Scheme for Securing Industrial Wireless Sensor Networks

“…After studying many intrusion detection systems specially designed for wireless sensor networks [5], we can conclude that the detection logic deployment issue is rarely mentioned. Indeed, although these studies use selected sensors for implementing totally or partially an intrusion detection logic, there is no indication how these sensors are selected.…”

“…We must note that as in classical WSN, clustering techniques are widely used for providing routing features and data aggregation, IDS-agents are generally implemented in the cluster head [5]. Nevertheless, this placement method is not efficient especially in WISN.…”

“…Indeed, there are three features that distinguish WSN and more specifically WISN from other wireless networks [5]: 1) processor, memory, energy and channel are limited resources; 2) WISN are usually not mobile; 3) the behavior of a WISN is highly predictable since it is composed of devices with few human interventions. So, communication and exchanged data respond to specific profiles in terms of quantity and frequency.…”

Implementation of a Hierarchical Hybrid Intrusion Detection Mechanism in Wireless Sensors Network

“…The proposed model contains specification based technique, signatures based technique using some fixed rules representing most dangerous attacks in WSN, and anomaly detection based on SVM [5], to confirm the malicious behavior of a target identified by behavior detection technique, and analyze data for classification. …”

“…Hai et al [23], [4] proposed a hybrid, lightweight intrusion detection system for sensor networks (SN), using the scheme of Roman et al [5]. Intrusion detection scheme profit from advantage of cluster-based protocol to form a hierarchical network (HN) to give an intrusion framework based on anomaly and misuse techniques.…”