WIDS Using Flow Based Approach
Rahul B. Adhao · 2014
Wireless Technologies in the most straightforward sense empower one or more systems to communicate with each other, without using any physical medium like cables. That is the reason wireless network technology is the quickest developing portion of communication business sector. But unprotected wireless network essentially “Open the front door” of your network to intruder. Possibly he can access your shared devices and data, read your email, access websites and capture data for further analysis and takes as long as they need to crack rest of your system. Thus intrusion refers to an action done intentionally or unintentionally, which threaten the security, Integrity, Availability and Confidentiality of the network system. In wireless network, specific protocol used, that challenge regular IDS to work properly in that network. So that’s why separate IDS are designed for wireless network, i.e. Wireless Intrusion Detection System (WIDS). But nowadays wireless network are very ubiquitous and protection of data in such network is very much important. Since last ten years, number of people using internet are increasing very rapidly. The research in network technology causes network speed to be increased and parallel the numbers of attacks also. So as internet is developing rapidly in size and complexity, complete understanding of network traffic also becoming difficult. In such cases, traditional packet based IDS could no longer useful. This is the reason that flow based approach is becoming popular. But at the same time it somewhere suffers by accuracy, when compare to traditional packet based approach. The proposed Wireless Intrusion Detection System (WIDS) is designed by focusing mostly on flow along with packet based for certain circumstances. So our intrusion detection for wireless LANs can react to ever growing amount of data on network, also help to minimize resource consumption, seen in case of fully packet based system. It can detect attacks like DoS, Worm and Vulnerability Scan.