D2Gen: A Decentralized Device Genome Based Integrity Verification Mechanism for Collaborative Intrusion Detection Systems

Abstract

Collaborative Intrusion Detection Systems are considered an effective defense mechanism for large, intricate, and multilayered Industrial Internet of Things against many cyberattacks. However, while a Collaborative Intrusion Detection System successfully detects and prevents various attacks, it is possible that an inside attacker performs a malicious act and compromises an Intrusion Detection System node. A compromised node can inflict considerable damage on the whole collaborative network. For instance, when a malicious node gives a false alert of an attack, the other nodes will unnecessarily increase their security and close all of their services, thus, degrading the system's performance. On the contrary, if the spurious node approves malicious traffic into the system, the other nodes would also be compromised. Therefore, to detect a compromised node in the network, this article introduces a device integrity check mechanism based on "Digital Genome." In medical science, a genome refers to a set that contains all of the information needed to build and maintain an organism. Based on the same concept, the digital genome is computed over a device's vital hardware, software, and other components. Hence, if an attacker makes any change in a node's hardware and software components, the digital genome will change, and the compromised node will be easily detected. It is envisaged that the proposed integrity attestation protocol can be used in diverse Internet of Things and other information technology applications to ensure the legitimate operation of end devices. This study also proffers a comprehensive security and performance analysis of the proposed framework.INDEX TERMS Insider attacks, integrity check, collaborative intrusion detection system, device genome, device security, blockchain, Internet of Things.

WITHDRAWN: A Novel Approach for Intrusion Detection System based on Adaptable Variable Homomorphic Mac for Network Coding Enabled Small Cells

“…There are pollution attacks in the NC-enabled environment that corrupt packets while they The Chained Secure Mode (CSM) [12] and D2Gen: A Decentralized Device Genome Based Integrity Verification Mechanism for Collaborative Intrusion Detection Systems (D2Gen) [13]. The proposed model is contrasted with the existing models and the results represent that the proposed model performs better in detection of pollution attacks.…”

WITHDRAWN: Av-h-mac: Adaptable Variable Homomorphic Mac Based Intrusion Detection System for Network Coding Enabled Small Cells

“…Instead, if the fake node allows malicious communication into the system, all of the nodes are vulnerable. Hence, Makhdoom et al [13] presented a Digital Genome-based device integrity check mechanism to identify a corrupted network node. The term genome is used in the field of medicine to describe a collection of genetic instructions for constructing and maintaining an organism.…”

WITHDRAWN: A Novel Approach for Intrusion Detection System based on Adaptable Variable Homomorphic Mac for Network Coding Enabled Small Cells

“…Erroneous decoding will occur as a result of these tampered packets. Bypassing real nodes, polluting even more traffic, the infected packets spread throughout the network [13]. As a result, pinpointing both the infected packets and the malicious users is a top priority.…”