Show simple item record

HMM Sequential Hypothesis Tests for Intrusion Detection in MANETs

dc.contributor.advisorBaras, John S.en_US
dc.contributor.authorCardenas, Alvaro A.en_US
dc.contributor.authorRamezani, Vahiden_US
dc.contributor.authorBaras, John S.en_US
dc.description.abstractMost of the work for securing the routing protocols of mobile ad hoc wireless networks has been done in prevention. Intrusion detection systems play a complimentary role to that of prevention for dealing with malicious insiders, incorrect implementation and attack models. We present a statistical framework that allows the incorporation of prior information about the normal behavior of the network and of network attacks in a principled way for the detection of known and unkown attacks. For detecting an attack as soon as possible we use quickest change detection stalgorithms. We use hidden Markov models (HMMs) as a generative view of the dynamic evolution of the hop count distribution. Our results show that simple attacks can be detected by an anomaly detection framework. However, detection of more complex attacks requires incorporation of prior knowledge in the HMMs.en_US
dc.format.extent260430 bytes
dc.relation.ispartofseriesISR; TR 2003-47en_US
dc.relation.ispartofseriesSEIL; TR 2003-1en_US
dc.subjectGlobal Communication Systemsen_US
dc.titleHMM Sequential Hypothesis Tests for Intrusion Detection in MANETsen_US
dc.typeTechnical Reporten_US

Files in this item


This item appears in the following Collection(s)

Show simple item record