Lightweight Anomaly-based Intrusion Detection System for Multi-feature Traffic in Wireless Sensor Networks
Derhab, Abdelouahid, Abdelghani Bouras . 2014
In this paper, we adopt the divide-and-conquer strategy to propose a lightweight design for an intrusion detection system in wireless sensor networks, lIghtweiGht aNomaly-based Intrusion deTection system for multi-feature traffIc in wireless sensOr Networks (IGNITION). The design is based on three approaches: (1) defining a node normal behavior composed of reduced number of high-level features, which in turn reduces the processing overhead. The method to obtain these features is low computational cost as it only considers strongly correlated low-level features and applies the divide-and-conquer strategy on the maximal cliques algorithm and the maximum weighted spanning tree algorithm, (2) similarity measure that incurs low computational complexity compared to other measures, and (3) simple binary classifier to distinguish between normal and anomalous behaviors, and which takes advantages of some WSNs characteristics. The performance of IGNITION is studied in terms of detection rate, false positive rate, and ROC distance and under three levels of noise factor. The study shows that a good tradeoff between detection rate and false positive rate is achieved
when the noise factor is 10.
In this paper, we inspire from two analogies: the warfare kill zone and the airport check-in system, to design and deploy a new line in the defense-in-depth strategy, called the third line.
In this paper, we adopt the divide-and-conquer strategy to propose a lightweight design for an intrusion detection system in wireless sensor networks, lIghtweiGht aNomaly-based Intrusion deTection…
In this paper, we propose an intrusion detection system (IDS) based on four approaches: (i) statistical-based IDS to reduce detection time; (ii) intertwining data acquisition phase and data…