TU Darmstadt / ULB / TUbiblio

DogoIDS: a mobile and active intrusion detection system for IEEE 802.11s wireless mesh networks

Carmo, Rodrigo do ; Hollick, Matthias (2013)
DogoIDS: a mobile and active intrusion detection system for IEEE 802.11s wireless mesh networks.
In: Proceedings of the 2nd ACM workshop on Hot topics on wireless network security and privacy
doi: 10.1145/2463183.2463187
Artikel, Bibliographie

Kurzbeschreibung (Abstract)

Wireless Mesh Networks (WMN) are particularly vulnerable to attacks, since they feature constraint nodes, multi-hop communication, and an open wireless communication channel. These features limit the feasibility of the deployment of contemporary Intrusion Detection Systems (IDS): centralized systems fail because there is no strict network boundary, and distributed and/or cooperative systems challenge the limited resources of the nodes. As a result, practical IDSs for WMNs are scarce, and existing systems are limited with respect to detection capabilities. In this paper we present the design, implementation, and evaluation of "DogoIDS": an open source, mobile, active-probing-based intrusion detection system. Exploiting mobility allows to mitigate the limitations of distributed, node-dependent systems. The active nature of the system achieves detection capabilities beyond that of a purely passive system. We show the accuracy and speed of our prototype in a testbed WMN---based on the IEEE 802.11s standard---under realistic attacks.

Typ des Eintrags: Artikel
Erschienen: 2013
Autor(en): Carmo, Rodrigo do ; Hollick, Matthias
Art des Eintrags: Bibliographie
Titel: DogoIDS: a mobile and active intrusion detection system for IEEE 802.11s wireless mesh networks
Sprache: Englisch
Publikationsjahr: April 2013
Titel der Zeitschrift, Zeitung oder Schriftenreihe: Proceedings of the 2nd ACM workshop on Hot topics on wireless network security and privacy
DOI: 10.1145/2463183.2463187
Kurzbeschreibung (Abstract):

Wireless Mesh Networks (WMN) are particularly vulnerable to attacks, since they feature constraint nodes, multi-hop communication, and an open wireless communication channel. These features limit the feasibility of the deployment of contemporary Intrusion Detection Systems (IDS): centralized systems fail because there is no strict network boundary, and distributed and/or cooperative systems challenge the limited resources of the nodes. As a result, practical IDSs for WMNs are scarce, and existing systems are limited with respect to detection capabilities. In this paper we present the design, implementation, and evaluation of "DogoIDS": an open source, mobile, active-probing-based intrusion detection system. Exploiting mobility allows to mitigate the limitations of distributed, node-dependent systems. The active nature of the system achieves detection capabilities beyond that of a purely passive system. We show the accuracy and speed of our prototype in a testbed WMN---based on the IEEE 802.11s standard---under realistic attacks.

Freie Schlagworte: Security;intrusion detection, security, wireless mesh networks
ID-Nummer: TUD-CS-2013-0103
Fachbereich(e)/-gebiet(e): 20 Fachbereich Informatik
20 Fachbereich Informatik > Sichere Mobile Netze
20 Fachbereich Informatik > Systemsicherheit
LOEWE
LOEWE > LOEWE-Zentren
LOEWE > LOEWE-Zentren > CASED – Center for Advanced Security Research Darmstadt
Hinterlegungsdatum: 31 Dez 2016 11:08
Letzte Änderung: 05 Aug 2021 09:22
PPN:
Export:
Suche nach Titel in: TUfind oder in Google
Frage zum Eintrag Frage zum Eintrag

Optionen (nur für Redakteure)
Redaktionelle Details anzeigen Redaktionelle Details anzeigen