Alert Aggregation in Mobile Ad Hoc Networks

Proceedings of the Workshop on Wireless Security

Volumn , Issue , 2003, Pages 69-78

  Sun, Bo ^a   Wu, Kui ^b   Pooch, Udo W ^a  

^a TEXAS A AND M UNIVERSITY   (United States)

^b UNIVERSITY OF VICTORIA   (Canada)

Author keywords

Alert Aggregation; Intrusion Detection; Mobile Ad Hoc Networks; Routing Security

Indexed keywords

ALGORITHMS; BUFFER STORAGE; COMPUTER SIMULATION; CORRELATION METHODS; GATEWAYS (COMPUTER NETWORKS); INFORMATION ANALYSIS; NETWORK PROTOCOLS; PROBABILITY DISTRIBUTIONS; ROUTERS; TOPOLOGY;

ALERT AGGREGATION; INTRUSION DETECTION; MOBILE AD HOC NETWORKS; ROUTING SECURITY;

MOBILE TELECOMMUNICATION SYSTEMS;

EID: 1542377708     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/941311.941323     Document Type: Conference Paper

References (20)

1. Y. Zhang and W. Lee, "Intrusion Detection in Wireless Ad Hoc Networks," the 6th Annual Int'l Conf. on Mobile Computing and Networking (MobiCom'00), Boston, MA, Aug., 2000, pp. 275-283.
2. Y. Huang, W. Fan, W. Lee, and P. S. Yu, "Cross-Feature Analysis for Detecting Ad-hoc Routing Anomalies," Proc. of the 23rd International Conference on Distributed Computing Systems, Providence, RI, May 2003, pp. 478-487.
3. S. Capkun, J. P. Hubaux and L. Buttyn, "Mobility Helps Security in Ad Hoc Networks," in Proc. of the 4th ACM Symp. on Mobile Ad Hoc Networking and Computing (MobiHOC'03), Annapolis, MD, June, 2003.
4. B. Sun. K. Wu, and U. Pooch, "Routing Anomaly Detection in Mobile Ad Hoc Networks," 12th International Conference on Computer Communications and Networks (ICCCN'03), Dallas, TX, Oct. 20-22, 2003.
5. H. Goto, M. Mambo, H. Shizuya, and Y. Watanabe. "Evaluation of Tamper-Resistant Software Deviating from Structured Programming Rules," in Information Security and Privacy (ACISP2001), LNCS 2119, Springer-Verlag. 2001, pp.145-158.
6. J. Broch, D. Johnson, and D. Maltz, The Dynamic Source Routing Protocol for Mobile Ad hoc Networks, http://www, ietf. org-/internet-drafts /draft-ietf-manet-dsr-07.txt, Feb. 2002, IETF Internet Draft.
7. M. Joa-Ng and I. Lu, "A Peer-to-Peer zone-based two-level link state routing for mobile Ad Hoc Networks," in IEEE Journal on Selected Areas in Communications, vol. 17, no. 8, Aug., 1999, pp. 1415-1425.
8. R. Sivakumar, P. Sinha, and V. Bharghavan, "CEDAR: A Core-Extraction Distributed Ad Hoc Routing Algorithm." IEEE Journal on Selected Areas in Communications, Special Issue on Wireless Ad Hoc Networks, vol. 17, no. 8, Aug. 1999, pp.1454-1465.
9. X. Zeng, R. Bagrodia, and M. Gerla. "GloMoSim: a Library for Parallel Simulation of Large-Scale Wireless Networks," Proc. of the 12th Workshop on Parallel and Distributed Simulations (PADS '98), Banff, Canada, May 26-29, 1998, pp. 154-161.
10. Y. Linde, A. Buzo, and R. M. Gray, "An Algorithm for Vector Quantizer Design," IEEE Trans. on Communications, Jan. 1980, pp. 702-710.
11. M. Roesch, "Snort C Lightweight Intrusion Detection for Networks," in Proc. of LISA '99: 13th Systems Administration Conf., Seattle, WA, Nov. 7-12, 1999.
12. Computer Associates, E-Trust Intrusion Detection, Available at http://www3.ca.com/Solutions/Product.asp?ID=163, 2003.
13. S. Marti, T. Giuli, K. Lai, and M. Baker, "Mitigating Routing Misbehavior in Mobile Ad Hoc Networks," the 6th Annual Int'l Conf. on Mobile Computing and Networking (MobiCom'00), Boston, MA, Aug. 2000, pp. 255 - 265.
14. D. Curry and H. Debar, "Intrusion Detection Message Exchange Format Data Model and Extensible Markup Language (XML) Document Type Definition," Internet Draft, June, 2002.
15. H. Debar and A. Wespi, "Aggregation and correlation of intrusion-detection alerts," in Proc. of the 4th Int'l Symp. on Recent Advances in Intrusion Detection (RAID'01), Davis, CA, 2001. pp. 85-103.
16. F. Cuppens, "Managing alerts in a multi-intrusion detection environment," in 17th Annual Computer Security Applications Conf., New Orleans, LA, Dec. 10-14, 2001.
17. F. Cuppens, and A. Mige, "Alert Correlation in a Cooperative Intrusion Detection Framework," in IEEE Symp. on Security and Privacy, Berkeley, CA, 2002, pp. 202-215.
18. A. Valdes and K. Skinner, "Probabilistic Alert Correlation," in Proc. of the 4th Int. Workshop on the Recent Advances in Intrusion Detection (RAID01), Davis, CA, October 2001.
19. P. Ning, Y. Cui, and D. S. Reeves, "Analyzing Intensive Intrusion Alerts Via Correlation," in Proc. of the 5th Int. Symp. on Recent Advances in Intrusion Detection (RAID'02), LNCS 2516, Zurich, Switzerland, Oct., 2002, pp.74-94.
20. B. Morin. L. M, H. Debar, and M. Ducass, "M2D2: A Formal Data Model for IDS Alert Correlation," in Proc. of the 5th Int. Symp. on Recent Advances in Intrusion Detection (RAID'02), LNCS 2516, Zurich, Switzerland, Oct. 16-18, 2002, pp. 115-137.