Distributed IDS for efficient resource management in wireless sensor network

Cho, Eung Jun; Hong, Choong Seon; Choi, Deokjai

doi:10.1109/apnoms.2011.6077027

Cited by 2 publications

(5 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The proposed system can also prevent DoS attacks. Its multi-layer mechanism can detect fragmented attack signatures, whereas a completely distributed IDS [ 9 ] cannot. Specific requirements might depend on a system's purpose: some WSNs require very low memory use, others require high detection rates.…”

Section: Discussionmentioning

confidence: 99%

“…Our previous work proposed a distributed IDS mechanism to address the above problems [ 9 ]. However, the proposal had a limitation: relay nodes participate in an IDS on the network layer, causing the distributed IDS mechanism to operate on the network layer, which leads to the module not being able to detect fragmented attack signatures.…”

Section: Problem Statement and Proposalmentioning

confidence: 99%

“…To solve the problem encountered by [ 9 ] and to enhance resource efficiency, we propose a partially distributed IDS using multiple Bloom filter arrays. The assumptions of our proposal are: The wireless sensor network works in an ad hoc manner; Multiple Bloom filter arrays are randomly deployed; Every node has two types of Bloom filter array.…”

Section: Problem Statement and Proposalmentioning

confidence: 99%

“…Memory use by the proposed system was also compared with that of a completely distributed IDS [ 9 ]. The completely distributed system can be simulated by setting k = 1 in Equation (5) , which represents that no attack signatures are to be fragmented.…”

Section: Performance Analysismentioning

confidence: 99%

“…Unfragmented attack signatures can be detected at an application layer, but this requires all unfragmented attack signatures to be inserted into a single Bloom filter array operated on the application layer. This increases the memory required by the proposed system compared with that used by the completely distributed IDS [ 9 ]. As such, there is a tradeoff between detection efficiency and memory use.…”

Section: Performance Analysismentioning

confidence: 99%

See 4 more Smart Citations

A Partially Distributed Intrusion Detection System for Wireless Sensor Networks

Cho

Hong

Lee

et al. 2013

Sensors

View full text Add to dashboard Cite

The increasing use of wireless sensor networks, which normally comprise several very small sensor nodes, makes their security an increasingly important issue. They can be practically and efficiently secured using intrusion detection systems. Conventional security mechanisms are not usually applicable due to the sensor nodes having limitations of computational power, memory capacity, and battery power. Therefore, specific security systems should be designed to function under constraints of energy or memory. A partially distributed intrusion detection system with low memory and power demands is proposed here. It employs a Bloom filter, which allows reduced signature code size. Multiple Bloom filters can be combined to reduce the signature code for each Bloom filter array. The mechanism could then cope with potential denial of service attacks, unlike many previous detection systems with Bloom filters. The mechanism was evaluated and validated through analysis and simulation.

show abstract

Section: Discussionmentioning

confidence: 99%

Section: Problem Statement and Proposalmentioning

confidence: 99%