Anomaly-based intrusion detection of jamming attacks, local versus collaborative detection

Wireless Communications and Mobile Computing

Volumn 15, Issue 2, 2015, Pages 276-294

  Fragkiadakis, Alexandros G ^a   Siris, Vasilios A ^a,b   Petroulakis, Nikolaos E ^a   Traganitis, Apostolos P ^a  

^a INSTITUTE OF COMPUTER SCIENCE   (Greece)

^b ATHENS UNIVERSITY OF ECONOMICS AND BUSINESS   (Greece)

Author keywords

Collaborative intrusion detection; Cumulative sum algorithms; Dempster Shafer theory of evidence; Jamming; Performance evaluation; Signal to interference plus noise ratio; Simple threshold algorithms

Indexed keywords

ALARM SYSTEMS; IEEE STANDARDS; JAMMING; PROBABILISTIC LOGICS; SIGNAL DETECTION; SIGNAL INTERFERENCE; SIGNAL TO NOISE RATIO;

CUMULATIVE SUM ALGORITHMS; DEMPSTER-SHAFER THEORY OF EVIDENCE; PERFORMANCE EVALUATION; SIGNAL TO INTERFERENCE PLUS NOISE RATIO; THRESHOLD ALGORITHMS;

INTRUSION DETECTION;

EID: 84921841977     PISSN: 15308669     EISSN: 15308677     Source Type: Journal    
DOI: 10.1002/wcm.2341     Document Type: Article

References (38)

1. Pelechrinis K, Iliofotou M, Krishnamurthy S. Denial of service attacks in wireless networks: the case of jammers. IEEE Communications Surveys & Tutorials 2011: 245-257.
2. Bicacki K, Tavli B. Denial-of-Service attacks and countermeasures in IEEE 802.11 wireless networks. Computer Standards and Interfaces (Elsevier) September 2008; 2009: 931-941.
3. Thuente D, Newlin B, Acharya M. Jamming vulnerabilities of IEEE 802.11e. In Proceedings of MILCOM 2007, IEEE, Orlando, USA, October 2007; 1-7.
4. Xu W, Ma K, Trappe W, Zhang Y. Jamming sensor networks: attack and defense strategies. IEEE Network May 2006; 20: 41-47.
5. Hall M, Silvennoinen A, Haggman S. Effect of pulse jamming on IEEE 802.11 wireless LAN performance. In Proceedings of MILCOM 2005, IEEE, Atlantic City, USA, October 2005; 2301-2306.
6. Cardenas A, Radosavac S, Baras J. Evaluation of detection algorithms for mac layer misbehavior: theory and experiments. IEEE/ACM Transactions on Networking 2009; 17: 605-617.
7. Fragkiadakis A, Tragos E, Askoxylakis I. Design and performance evaluation of a lightweight wireless early warning intrusion detection prototype. EURASIP Journal on Wireless Communications and Networking 2012; 12: 1-18.
8. Shafer G. A Mathematical Theory of Evidence. Princeton University Press: Princeton, New Jersey, USA, 1976.
9. Sheth A, Doerr C, Grunwald D, Han R, Sicker D. MOJO: a distributed physical layer anomaly detection system for 802.11 WLANs. In ACM MobiSys, Upsala, Sweden, 2006; 191-204.
10. Aime M, Callandriello G, Lioy A. A wireless distributed intrusion detection system and a new attack model. In IEEE Symposium on Computers and Communications, Cagliari, Italy, 2006; 35-40.
11. Tomko A, Rieser C, Buell L. Physical layer intrusion detection in wireless networks. In Military Communications Conference, 2006; 1-7.
12. Wood A, Stankovic J, Zhou G. Deejam: defeating energy-efficient jamming in ieee 802.15.4-based wireless networks. In Proceedings of the 4th Annual IEEE Communications Society Conference on Sensor, Mesh and Ad Hoc Communications and Networks (SECON), San Diego, USA, June 2007; 60-69.
13. Siris V, Papagalou F. Application of anomaly detection algorithms for detecting syn flooding attacks. Computer Communications 2006; 29(9): 1433-1442.
14. Cabrera J, Gutierez C, Mehra R. Ensemble methods for anomaly detection and distributed intrusion detection in mobile ad-hoc networks. Information Fusion (Elsevier) 2008; 9(1): 96-119.
15. Peng T, Leckie C, Ramamohanarao K. Information sharing for distributed intrusion detection systems. Journal Of Network And Computer Applications (Elsevier) 2007; 30(3): 877-899.
16. Chen Y, Hwang K, Ku W. Distributed change-point detection of DDoS attacks: experimental results on deter testbed. In Proceedings of USENIX Security Symposium, Boston, USA, August 2007; 1-7.
17. Chatzigiannakis V, Androulidakis G, Pelechrinis K, Papavassiliou S, Maglaris V. Data fusion algorithms for network anomaly detection: classification and evaluation. In ICNS '07: Proceedings of the Third International Conference on Networking and Services. IEEE Computer Society:Washington, DC, USA, 2007; 1-7.
18. Aparicio F, Kyriakopoulos K, Parish D. An on-line wireless attack detection system using multi-layer data fusion, In IEEE International Workshop on Measurements and Networking Proceedings, Anacapri, Italy, 2011; 1-5.
19. Siaterlis C, Maglaris B. Towards multisensor data fusion for DoS detection. In SAC '04: Proceedings of the 2004 ACM Symposium on Applied Computing. ACM: New York, NY, USA, 2004; 439-446.
20. Chen Q, Aickelin U. Anomaly detection using the Dempster-Shafer method, In Proceedings of the 2006 International Conference on Data Mining, DMIN 2006, Las Vegas, USA, 2006; 232-240.
21. Li W, Joshi A. Outlier detection in ad hoc networks using Dempster-Shafer theory. In MDM '09: Proceedings of the 2009 Tenth International Conference on Mobile Data Management: Systems, Services and Middleware. IEEE Computer Society: Washington, DC, USA, 2009; 112-121.
22. Yu D, Frincke D. Alert confidence fusion in intrusion detection systems with extended Dempster-Shafer theory. In ACM-SE 43: Proceedings of the 43rd Annual Southeast Regional Conference. ACM: New York, NY, USA, 2005; 142-147.
23. Cakiroglou M, Ozcerit T. Jamming detection mechanisms for wireless sensor networks. In Proceedings of 3rd International Conference on Scalable Information Systems, Napoli, Italy, June 2008; 1-8.
24. Bhuse V, Gupta A. Anomaly intrusion detection in wireless sensor networks. Journal of High Speed Networks 2006; 15: 33-51.
25. Xu W, Trappe W, Zhang Y, Wood T. The feasibility of launching and detecting jamming attacks in wireless networks. In Proceedings of ACM MobiHoc, Urbana, USA, May 2005; 46-57.
26. Thamilarasu M, Mishra S, Sridhar R. A cross-layer approach to detect jamming attacks in wireless ad hoc networks. In Proceedings of MILCOM 2006, Washington DC, USA, October 2006; 1-7.
27. Pelechrinis K, Broustis I, Krishnamurthy S, Gkantsidis C. Ares: an anti-jamming reinforcement system for 802.11 networks. In Proceedings of CoNext 2009, Rome, Italy, 2009; 181-192.
28. Linux wireless drivers, ath5k. [Online]. Available: http://linuxwireless.org/en/users/Drivers/ath5k.
29. NTP: the network time protocol. [Online]. Available: http://www.ntp.org.
30. Sampath A, Dai H, Zheng H, Zhao B. Multi-channel jamming attacks using cognitive radios. In Proceedings of ICCCN 2007, Honolulu, USA, 2007; 352-357.
31. Airmagnet wifi analyser. [Online]. Available: http://www.airmagnet.com/.
32. Nadgir M, Premkumar K, Kumar A, Kuri J. Cusum based distributed detection in wsns. In MCDES 2008, Bangalore, India, 2008; 1-8.
33. Yan G, Xiao Z, Eidenbenz S. Catching instant messaging worms with change-point detection techniques, In Proceedings of the 1st Usenix Workshop on Large-Scale Exploits and Emergent Threats, San Francisco, USA, April 2008; 1-10.
34. Verdier G, Hilgert N, Vila J. Adaptive threshold computation for cusum-type procedures in change detection and isolation problems. Elsevier, Computational Statistics and Data Analysis 2008; 52: 4161-4174.
35. Lu K, Wu D, Fan J, Todorovic S, Nucci A. Robust and efficient detection of DDoS attacks for largescale internet. Computer Networks 2007; 51(18): 5036-5056.
36. Chen Y, Hwang K, Ku W-S. Collaborative detection of DDoS attacks over multiple network domains. IEEE Transactions Parallel Distributed Systems 2007; 18(12): 1649-1662.
37. Sheng Y, Tan K, Chen G, Kotz D, Campbell A. Detecting 802.11 MAC layer spoofing using received signal strength. In Proceedings of INFOCOM'08. IEEE: Phoenix, USA, 2008; 1768-1776.
38. Yager R. On the Dempster-Shafer framework and new combination rules. Information Sciences 1987; 41: 93-137.