RAPID: Traffic-agnostic intrusion detection for resource-constrained wireless mesh networks

Abstract

Due to the recent increased interest in wireless mesh networks (WMN), their security challenges have become of paramount importance. An important security mechanism for WMN, intrusion detection, has received considerable attention from the research community. Recent results show that traditional monitoring mechanisms are not applicable to real-world WMN due to their constrained resources (memory and processing power), which result in high false negative rates since only few IDS functions can be activated on monitoring nodes. Cooperative solutions, on the other hand, have high communication overhead and detection delay when traffic is high. A practical traffic-aware IDS solution was recently proposed for resource-constrained WMN, however, traffic-awareness might not be feasible for some WMN applications. This paper proposes a traffic-agnostic IDS solution that uses a link-coverage approach to monitor both local and backbone WMN traffic. Using real-world experiments and extensive simulations we show our proposed IDS solutions outperform traffic-aware IDS solutions while requiring lower computation and communication overhead.

Efficient Technique for Boosting Attack Detection Rate over a Host or Network System

“…The idea of attack detection system was introduce with the paper [28]. Since then several of researchers use different unique approaches for improving the excellence of this system [29][30][31][32].However, the accessible approaches augmented the attack detection mechanism but still have some following major challenges [33][34][35][36].…”