Intrusion detection systems for community wireless mesh networks

Makaroff, Dwight; Smith, Paul J.; Race, Nicholas; Hutchison, David

doi:10.1109/mahss.2008.4660099

Cited by 6 publications

(3 citation statements)

References 27 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Some existing solutions address specific attacks (e.g., Man-in-the-Middle and Wormhole Attacks [16], Grayhole attack [17], message fabrication attack [13], and scheduling in WMN [18]). Other solutions are general IDS solutions for mesh networks, which consider memory, processing [11,14,19], and energy [10] constraints for performing off-the-shelf IDS tools on WMN devices. The later group of IDS solutions aim at addressing the challenges associated with monitoring mechanisms for intrusion detection in WMN, as opposed to the former group which addresses specific attacks in such networks.…”

Section: State Of the Artmentioning

confidence: 99%

RAPID: Traffic-agnostic intrusion detection for resource-constrained wireless mesh networks

Hassanzadeh

Stoleru

Polychronakis

et al. 2014

Computers & Security

View full text Add to dashboard Cite

Due to the recent increased interest in wireless mesh networks (WMN), their security challenges have become of paramount importance. An important security mechanism for WMN, intrusion detection, has received considerable attention from the research community. Recent results show that traditional monitoring mechanisms are not applicable to real-world WMN due to their constrained resources (memory and processing power), which result in high false negative rates since only few IDS functions can be activated on monitoring nodes. Cooperative solutions, on the other hand, have high communication overhead and detection delay when traffic is high. A practical traffic-aware IDS solution was recently proposed for resource-constrained WMN, however, traffic-awareness might not be feasible for some WMN applications. This paper proposes a traffic-agnostic IDS solution that uses a link-coverage approach to monitor both local and backbone WMN traffic. Using real-world experiments and extensive simulations we show our proposed IDS solutions outperform traffic-aware IDS solutions while requiring lower computation and communication overhead.

show abstract

Section: State Of the Artmentioning

confidence: 99%

RAPID: Traffic-agnostic intrusion detection for resource-constrained wireless mesh networks

Hassanzadeh

Stoleru

Polychronakis

et al. 2014

Computers & Security

View full text Add to dashboard Cite

show abstract

“…A redundant node can be placed on an important area to make sure reliability and to avoid destruction. Another community‐based IDS presents a set of socio‐technical challenges associated with developing an IDS for a community WMN. However, this architecture does not explicitly address the challenges with system administrator.…”

Section: Review Of the Ids Solutions For Wireless Networkmentioning

confidence: 99%

CORIDS: a cluster‐oriented reward‐based intrusion detection system for wireless mesh networks

Deb

Chakraborty

Chaki

2013

Security Comm Networks

View full text Add to dashboard Cite

Wireless mesh networks (WMNs) are proliferating as one of the key technologies of the next‐generation networks. Security is one of the prime concerns towards actual implementation of any network technology for commercial applications. Network security has intrinsically two approaches—prevention based and detection based. Implementing firewalls or intrusion prevention techniques is often not an attractive solution for energy‐constrained network nodes such as mobile ad hoc network (MANET) nodes or mesh clients in WMNs. However, in the era of pervasive and ubiquitous computing, commercial transactions are performed on the move and over portable devices such as cell phones and laptops. These devices have energy constraints, and hence, one cannot afford to adopt security measures with high computational overhead. This influences a shift in paradigm from active intrusion prevention to passive intrusion detection. In this paper, a new cluster‐oriented reward‐based intrusion detection system (CORIDS) has been proposed for WMNs. The performance of CORIDS has been evaluated using the Qualnet network simulator. Simulation results also establish superiority of CORIDS over Misbehavior Detection Algorithm, another recent trust‐based IDS for WMN, both in terms of higher detection efficiency and lower false positives. Copyright © 2013 John Wiley & Sons, Ltd.

show abstract

“…The idea of Makaroff et al 18 is to note down various basic information about intrusion detection in WMNs and to propose an IDS architecture. This work, however, is very elementary and the authors also note that they put forward an initial design of a modular architecture for intrusion detection, highlighting how it addresses their identified challenges.…”

Section: Related Work and Motivationmentioning

confidence: 99%

A Pay-and-Stay model for tackling intruders in hybrid wireless mesh networks

et al. 2012

View full text Add to dashboard Cite

Intrusion handling in wireless mesh networks (WMNs) is a relatively less addressed topic. The difficulty may lie in the fact that there are other wireless networks for which some intrusion detection or prevention schemes are proposed that could also be applied in some way in a WMN setting. As those schemes are contributing, researchers may not find it necessary to specifically focus on this field. Another critical reason may be the difficulty in developing an effective scheme for WMNs. In fact, the structural differences among various wireless ad hoc networking technologies make it imperative to devise the mechanisms in subtle but critically different ways. For WMNs, there is a proper network backbone that is called mesh backbone (which is not present in many other wireless network counterparts), which supports the fringe part or the mesh clients. Hence, it is often possible to install the intrusion handling mechanisms or agents in the stable part and allowing some flexibility in the client or fringe parts. Nonetheless, instead of thinking in this pattern, we take a different approach of tackling intrusion by allowing an intruder to stay in the network as long as it proves to be worthy of staying in the network by supporting the network’s regular activities. The idea is that by not always directly purging rogue entities, one could exploit the intruder’s resources, thereby benefiting the network. We call our approach an intrusion-tackling mechanism and term it a Pay-and-Stay model. Alongside presenting the details and analysis of our model, in this paper, we also present the basics of various forms of intrusion handling in such types of networks. Using our evaluation results, we found that the model could be very effective in handling intruders and defending the network against a broad range of security attacks.

show abstract

Intrusion detection systems for community wireless mesh networks

Cited by 6 publications

References 27 publications

RAPID: Traffic-agnostic intrusion detection for resource-constrained wireless mesh networks

RAPID: Traffic-agnostic intrusion detection for resource-constrained wireless mesh networks

CORIDS: a cluster‐oriented reward‐based intrusion detection system for wireless mesh networks

A Pay-and-Stay model for tackling intruders in hybrid wireless mesh networks

Contact Info

Product

Resources

About