Evaluating the impact of intrusion sensitivity on securing collaborative intrusion detection networks against SOOA

David Madsen, Wenjuan Li, Weizhi Meng, Yu Wang*

*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceedingArticle in proceedingsResearchpeer-review

24 Downloads (Pure)

Abstract

Cyber attacks are greatly expanding in both size and complexity. To handle this issue, research has been focused on collaborative intrusion detection networks (CIDNs), which can improve the detection accuracy of a single IDS by allowing various nodes to communicate with each other. While such collaborative system or network is vulnerable to insider attacks, which can significantly reduce the advantages of a detector. To protect CIDNs against insider attacks, one potential way is to enhance the trust evaluation among IDS nodes, i.e., by emphasizing the impact of expert nodes. In this work, we adopt the notion of intrusion sensitivity that assigns different values of detection capability relating to particular attacks, and evaluate its impact on defending against a special On-Off attack (SOOA). In the evaluation, we investigate the impact of intrusion sensitivity in a simulated CIDN environment, and experimental results demonstrate that the use of intrusion sensitivity can help enhance the security of CIDNs under adversarial scenarios, like SOOA.

Original languageEnglish
Title of host publicationProceedings of 18th International Conference on Algorithms and Architectures for Parallel Processing
PublisherSpringer
Publication date1 Jan 2018
Pages481-494
ISBN (Print)9783030050627
DOIs
Publication statusPublished - 1 Jan 2018
Event18th International Conference on Algorithms and Architectures for Parallel Processing - Guangzhou, China
Duration: 15 Nov 201817 Nov 2018
Conference number: 18

Conference

Conference18th International Conference on Algorithms and Architectures for Parallel Processing
Number18
CountryChina
CityGuangzhou
Period15/11/201817/11/2018
SeriesLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume11337
ISSN0302-9743

Keywords

  • Challenge-based trust mechanism
  • Collaborative network
  • Insider attack
  • Intrusion detection
  • Intrusion sensitivity

Fingerprint Dive into the research topics of 'Evaluating the impact of intrusion sensitivity on securing collaborative intrusion detection networks against SOOA'. Together they form a unique fingerprint.

Cite this