• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>International Conference on Computational Science and Its Applications - ICCSA 2003 Pt.3 May 18-21, 2003 Montreal, Canada >A Modular Architecture for Distributed IDS in MANET
【24h】

A Modular Architecture for Distributed IDS in MANET

机译：MANET中分布式IDS的模块化体系结构

获取原文
获取原文并翻译 | 示例
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

In this paper we propose a distributed and modular architecture for an intrusion detection system (IDS) dedicated to a mobile ad hoc network (MANET) environment. The main feature of our proposition relies on the use, on each node of the MANET, of a local IDS (LIDS) cooperating with other LIDSes through the use of mobile agents. The modular design is needed as a response to the extensibility requirements related to the complex contexts of MANET. The proposed solution has been validated by a proof-of-concept prototype, which is described in the paper. Two different types of attacks are presented and have been implemented, at the network level and at the application level. The detection of such attacks are formally described by specification of data collection, attack signatures associated with such data and alerts generation, emphasizing the relation of each of these detection steps with the modules in the designed architecture. The use of the management information base (MIB) as a primary data source for the detection process is discussed and modules for MIB data extraction and processing are specified and implemented in the prototype. Experiments exhibit fairly good results, the attacks being col-laboratively detected in real-time.
机译：在本文中，我们提出了一种专用于移动自组织网络（MANET）环境的入侵检测系统（IDS）的分布式模块化体系结构。我们主张的主要特征在于，通过使用移动代理，在MANET的每个节点上使用与其他LIDS协作的本地IDS（LIDS）。需要模块化设计来响应与MANET复杂上下文有关的可扩展性要求。本文所描述的概念验证原型已经验证了所提出的解决方案。在网络级别和应用程序级别，提出并实现了两种不同类型的攻击。通过数据收集的规范，与此类数据关联的攻击签名和警报生成来正式描述此类攻击的检测，并强调这些检测步骤中的每个步骤与设计架构中模块的关系。讨论了使用管理信息库（MIB）作为检测过程的主要数据源，并在原型中指定和实现了用于MIB数据提取和处理的模块。实验显示出相当不错的结果，可以实时协作检测出这些攻击。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号