A framework for intrusion detection systems by social network analysis methods in ad hoc networks

Security and Communication Networks

Volumn 2, Issue 6, 2009, Pages 669-685

  Wang, Wei ^a   Man, Hong ^a   Liu, Yu ^a  

^a Stevens Institute of Technology   (United States)

Author keywords

Ad hoc networks; Intrusion detection system; Network security; Social network analysis

Indexed keywords

AD HOC NETWORKS; COMPUTER CRIME; DATA MINING; INFORMATION DISSEMINATION; INTRUSION DETECTION; MATRIX ALGEBRA; NETWORK LAYERS; NETWORK SECURITY; SOCIAL NETWORKING (ONLINE);

ANOMALY DETECTION; HIGH DETECTION RATE; HUMAN INTERACTIONS; INFORMATION PROPAGATION; INTRUSION DETECTION SYSTEMS; MATHEMATICAL FRAMEWORKS; MOBILITY CONDITIONS; NETWORK STATISTICS;

MOBILE AD HOC NETWORKS;

EID: 74849136546     PISSN: 19390114     EISSN: 19390122     Source Type: Journal    
DOI: 10.1002/sec.108     Document Type: Article

References (38)

1. Watts DJ, Strogatz SH. Collective dynamics of small-world networks. Nature 1998; 393: 440-442.
2. Upadrashta Y, Vassileva J, Grassmann W. Social networks in peer-to-peer systems. In HICSS'05: Proceedings of the Proceedings of the 38th Annual Hawaii International Conference on System Sciences (HICSS'05), 2005; 200c-200c.
3. Tempich C, Staab S, Wranik A. Remindin': semantic query routing in peer-to-peer networks based on social metaphors. In WWW'04: Proceedings of the 13th International Conference on World Wide Web. ACM Press: New York, 2004; 640-649.
4. Pouwelse J, Garbacki P, Wang J, et al. Tribler: a social-based peer-to-peer system. In Proceedings of the 5th International P2P conference (IPTPS 2006), no. 2006-002, February 2006.
5. Marti S, Ganesan P, Garcia-Molina H. Dht routing using social links. InProceedingsoftheInternationalP2PConference,2004; 100-111.
6. Banks L, Ye S, Huang Y, Wu SF. Davis social links: Integrating social networks with internet routing. In Proceedings of ACM SIGCOMM Workshop on Large-Scale Attack Defense, Kyoto, Japan, August 2007.
7. Coffman T, Marcus S. Dynamic classification of groups through social network analysis and hmms. In Proceedings of the 2004 IEEE Aerospace Conference, Vol. 5, Austin, TX, USA, March 2004; 3197-3205.
8. Coffman T, Marcus S. Pattern classification in social network analysis: a case study. In Proceedings of the 2004 IEEE Aerospace Conference, Vol. 5, Austin, TX, USA, March 2004; 3162-3175.
9. Priebe CE, Conroy JM, Marchette DJ, Park Y. Scan statistics on enron graphs. Computational and Mathematical Organization Theory 2005; 11(3): 229-247.
10. Brutch P, Ko C. Challenges in intrusion detection for wireless ad-hoc networks. In Proceedings of the Workshop on Security and Assurance in Ad-hoc Networks, Orlando, USA, January 2003; 368-373.
11. Zhang Y, Lee W. Intrusion detection in wireless ad-hoc networks. In Proceedings of the 6th Annual International Conference on Mobile Computing and Networking (MobiCom'00), August 2000; 275-283.
12. Huang Y, Lee W. A cooperative intrusion detection system for ad hoc networks. In Proceedings of the 1st ACM Workshop on Security of Ad Hoc and Sensor Networks, October 2003; 135-147.
13. Fu Y, He J, Li G. A distributed intrusion detection scheme for mobile ad hoc networks. In Proceedings of the 31st Annual In-ternational Computer Software and Applications Conference. IEEE Computer Society, 2007; 75-80.
14. Mell P, McLarnon M. Mobile agent attack resistant distributed hierarchical intrusion detection systems. In Proceedings of the Second International Workshop on Recent Advances in Intrusion Detection (RAID99), Purdue, USA, September 1999.
15. Hsu W, Helmy A. On nodal encounter patterns in wireless lan traces. In The 2nd IEEE International Workshop on Wireless Network Measurement (WiNMee), April 2006; 1-10.
16. Huang Y, Fan W, Lee W, Yu PS. Cross-feature analysis for detecting ad-hoc routing anomalies. In 23rd International Conference on Distributed Computing System (ICDCS 2003), 2003; 478-787.
17. Kurosawal S, Nakayama H, Katol N, Jamalipour A, Nemoto Y. Detecting blackhole attack on aodv-based mobile ad hoc net-works by dynamic learning. International Journal of Network Security 2007; 5: 338-346.
18. Liu H, Gupta R. Temporal analysis of routing activity for anomaly detection in ad hoc networks. In 2006 IEEE International Conference on Mobile Adhoc and Sensor Systems(MASS), 2006; 505-508.
19. Sun B, Guan Y, Chen J, Pooch U. Detecting black-hole attack in mobile ad hoc networks. In 5th European Personal Mobile Communications Conference, 2003; 490-495.
20. Patcha A, Mishra A. Collaborativesecurityarchitectureforblack hole attack prevention in mobile ad hoc networks. In Radio and Wireless Conference, 2003. RAWCON'03. Proceedings, 2003; 75-78.
21. Jamali M, Abolhassani H. Different aspects of social network analysis. In IEEE/WIC/ACM International Conference on Web Intelligence, 2006 (WI 2006), 2006; 66-72.
22. Freeman LC. A set of measures of centrality based on betweeness. Sociometry 1977; 40: 35-40.
23. Freeman LC, Borgattis SP, White DR. Centrality in valued graphs: a measure of betweenness based on network flow. Social Networks 1991; 3: 141-154.
24. Marsden PV. Egocentric and sociocentric measures of network centrality. Social Networks 2002; 24(4): 407-422.
25. Bonacich P. Factoring and weighting approaches to status scores and clique identification. Journal of Mathematical Sociology 1972; 2: 113-120.
26. Liu Y, Man H. Network vulnerability assessment using Bayesian networks. In Proceedings of SPIE DataMining, IntrusionDetection, Information Assurance, and Data Networks Security, Vol. 5812, March 2005; 61-71.
27. Rojas A, Branch P, Armitage G. Validation of the random way-point mobility model through a real world mobility trace. In IEEE Region 10 (TENCON 2005), 2005; 1-6.
28. Chakeres ID, Belding-Royer EM. The utility of hello messages for determining link connectivity. In Proceedings of the 5th International Symposium on Wireless Personal Multimedia Communications, 2002; 504-508.
29. Shin J, Lee H, Na J, Park A, Kim S. Gateway discovery and routing in ad hoc networks with nat-based internet connectivity. In Proceedings of the Vehicular Technology Conference, 2004 (VTC 2004-Fall), 2004 IEEE 60th, Vol. 4, 2004; 26-29.
30. Wang H, Zhang D, Shin KG. Detecting syn flooding attacks. In INFOCOM 2002. Twenty-First Annual Joint Conference of the IEEE Computer and Communications Societies, 3, June 2002; 1530-1539.
31. Lee W, Stolfo S. Data mining approaches for intrusion detection. In Proceedings of the 7th USENIX Security Symposium, San Antonio, TX, 1998; 79-93.
32. Porras PA, Ilgun K, Kemmerer RA. State transition analysis: a rule-based intrusion detection approach. IEEE Transactions on Software Engineering 1995; SE-21: 181-199.
33. Mannila H, Toivonen H, Verkamo AI. Discovery of frequent episodes in event sequences. Data Mining and Knowledge Discovery; 1997; 1(3): 259-289.
34. Agrawal R, Srikant R. Fast algorithms for mining association rules. In Proceedings of the 20th International Conference on Very Large Databases, September 1994; 135-147.
35. Aggarwal CC, Yu PS. Online generation of association rules. In Proceedings of the International Conference on Data Engineering. IEEE Computer Society, 1998; 402-411.
36. Burdick D, Calimlim M, Gehrke J. Mafia: a maximal frequent itemset algorithm for transactional databases. In Proceedings of the 17th International Conference on Data Engineering (ICDE). IEEE Computer Society, April 2001; 443-452.
37. Dinger J, Hartenstein H. Defending the sybil attack in p2p networks: taxonomy, challenges, and a proposal for self-registration. In International Conference on Availability, Re-liability and Security. IEEE Computer Society, 2006; 756-763.
38. Singh A, Castro M, Druschel P, Rowstron AIT. Defending against eclipse attacks on overlay networks. In proceedings of the 11th Workshop on ACM SIGOPS European Workshop. ACM Press: New York, USA, 2004; 115-120.