We consider ad hoc networks with multiple, mobile colluding intruders. We investigate the placement of the intrusion detection modules for misuse intrusion detection. Our goal is to maximize the detection performance subject to limitation in the computational resources. We mathematically formulate different detection objectives, and show that computing the optimal solution is NP-hard in each case. Thereafter, we propose a family of algorithms that approximate the optimal solution, and prove that some of these algorithms have guaranteeable approximation ratios. The algorithms that have analytically guaranteeable performance require re-computation every time the topology changes due to mobility. We next modify the computation strategy so as to seamlessly adapt to topological changes due to mobility. Using simulation we evaluate these algorithms, and identify the appropriate algorithms for different detection performance and resource consumption tradeoffs.
Efficacy of misuse detection in ad hoc networks
2004-01-01
614360 byte
Aufsatz (Konferenz)
Elektronische Ressource
Englisch
MISUSE DETECTION METHOD, MISUSE DETECTION ELECTRONIC CONTROL UNIT, AND MISUSE DETECTION SYSTEM
Europäisches Patentamt | 2021
|MISUSE DETECTION METHOD, MISUSE DETECTION ELECTRONIC CONTROL UNIT, AND MISUSE DETECTION SYSTEM
Europäisches Patentamt | 2018
|Misuse detection method, misuse detection electronic control unit, and misuse detection system
Europäisches Patentamt | 2023
|Misuse detection method, misuse detection electronic control unit, and misuse detection system
Europäisches Patentamt | 2021
|Engineering Index Backfile | 1896
|