Integration of mobility and intrusion detection for wirelessad hocnetworks
Bo Sun, Kui Wu, Yang Xiao, Ruhai Wang · International Journal of Communication Systems · 2006
Abstract One of the main challenges in building intrusion detection systems (IDSs) for mobilead hocnetworks (MANETs) is to integrate mobility impacts and to adjust the behaviour of IDSs correspondingly. In this paper, we first introduce two different approaches, a Markov chain‐based approach and a Hotelling'sT2test based approach, to construct local IDSs for MANETs. We then demonstrate that nodes' moving speed, a commonly used parameter in tuning IDS performances, is not an effective metric to tune IDS performances under different mobility models. To solve this problem, we further propose anadaptivescheme, in which suitable normal profiles and corresponding proper thresholds can be selectedadaptivelyby each local IDS through periodically measuring its locallink change rate, a proposed unified performance metric. We study the proposed adaptive mechanism at different mobility levels, using different mobility models such as random waypoint model, random drunken model, and obstacle mobility model. Simulation results show that our proposed adaptive scheme is less dependent on the underlying mobility models and can further reduce false positive ratio. Copyright © 2006 John Wiley & Sons, Ltd.