This paper has presented a new paradigm for security in conventional networks that has dramatic implications for improving the security of wireless sensor networks. We have introduced the Detecting Intrusions at Layer One (DILON) system. The DILON approach is analogous to current methodologies utilized in NDT. DILONs enabling hypothesis is that the inherent variability in the construction of digital devices leads to significant variability in their analog signaling behavior. This is true not only for different device models but even for nearly identical devices of the same manufacturing lot. The system can be implemented with practical and deployable specially designed devices that would be transparent to normal network operations. Different applications, such as intrusion detection, authentication, forensic data collection, assurance monitoring and security implications and constraints, have been explained and possible environments for deployment have been considered. Preliminary results have been presented. Our future work will develop techniques suited to wired and wireless environments. For wired environments, we are working towards intrusion detection techniques for 10 Mb, 100 Mb and 1 Gb Ethernet systems that are suitable for integration into mixed analog/digital chipsets (AbsoluteValue Systems, 2004) common to modern network switches. We are currently testing the possibility of utilizing adaptive filter correlators, as well as statistical spectral comparison approaches. We are taking our techniques from the wired environment to the wireless environment. Prediction of device failure is an interesting byproduct of the DILON approach, one that helps to assure all aspects of system integrity. We believe that by understanding the signal characteristics of devices, we can determine the probability of device failure as they age. A hardware element characterization based on a well designed and tested metric will be created. Using this metric, we can identify both the legitimate users and monitor the integrity of their hardware. Consequently, the signal level analysis and the ongoing system level diagnostic process can detect hardware problems that are not detectable by the user. The very high reliability of network devices makes it difficult to collect data pertaining to assurance, and we will need to enlist the aid of other universities and industrial partners in gathering information about device and component failures.
Intrusion detection, performance assurance and system maintenance. A new paradigm in computer security
Eindringnachweis, Leistungsbewertung und Systemaufrechterhaltung. Ein neues Paradigma in der Computersicherheit
Materials Evaluation ; 63 , 12 ; 1203-1211
2005
9 Seiten, 3 Bilder, 4 Tabellen, 21 Quellen
Article (Journal)
English
Battery-Based Intrusion Detection: A Focus on Power for Security Assurance
SAE Technical Papers | 2004
|Battery-Based Intrusion Detection: A Focus on Power for Security Assurance
British Library Conference Proceedings | 2004
|A new paradigm for intrusion detection systems
Tema Archive | 2002
|Intrusion Detection System for Connected Automobiles Security
Springer Verlag | 2022
|