An Analytic Framework for Modeling and Detecting Access Layer Misbehavior in Wireless Networks

ABSTRACT

The widespread deployment of wireless networks and hot spots that employ the IEEE 802.11 technology has forced network designers to put emphasis on the importance of ensuring efficient and fair use of network resources. In this work we propose a novel framework for detection of intelligent adaptive adversaries in the IEEE 802.11 MAC by addressing the problem of detection of the worst-case scenario attacks. Utilizing the nature of this protocol we employ sequential detection methods for detecting greedy behavior and illustrate their performance for detection of least favorable attacks. By using robust statistics in our problem formulation, we attempt to utilize the precision given by parametric tests, while avoiding the specification of the adversarial distribution. This approach establishes the lowest performance bound of a given Intrusion Detection System (IDS) in terms of detection delay and is applicable in online detection systems where users who pay for their services want to obtain the information about the best and the worst case scenarios and performance bounds of the system. This framework is meaningful for studying misbehavior due to the fact that it does not focus on specific adversarial strategies and therefore is applicable to a wide class of adversarial strategies.

REFERENCES

• 1: Stefan Axelsson, The base-rate fallacy and its implications for the difficulty of intrusion detection, Proceedings of the 6th ACM conference on Computer and communications security, p.1-7, November 01-04, 1999, Kent Ridge Digital Labs, Singapore [doi>10.1145/319709.319710]
• 2: John Bellardo , Stefan Savage, 802.11 denial-of-service attacks: real vulnerabilities and practical solutions, Proceedings of the 12th conference on USENIX Security Symposium, p.2-2, August 04-08, 2003, Washington, DC
• 3: Bertsekas, D. 2003. Convex Analysis and Optimization. Athena Scientific.
• 4: Sonja Buchegger , Jean-Yves Le Boudec, Performance analysis of the CONFIDANT protocol, Proceedings of the 3rd ACM international symposium on Mobile ad hoc networking & computing, June 09-11, 2002, Lausanne, Switzerland [doi>10.1145/513800.513828]
• 5: Alvaro A. Cárdenas , John S. Baras , Karl Seamon, A Framework for the Evaluation of Intrusion Detection Systems, Proceedings of the 2006 IEEE Symposium on Security and Privacy, p.63-77, May 21-24, 2006 [doi>10.1109/SP.2006.2]
• 6: Alvaro A. Cárdenas , Svetlana Radosavac , John S. Baras, Detection and prevention of MAC layer misbehavior in ad hoc networks, Proceedings of the 2nd ACM workshop on Security of ad hoc and sensor networks, October 25-25, 2004, Washington DC, USA [doi>10.1145/1029102.1029107]
• 7: Dragalin, V., Tartakovsky, A., and Veeravalli, V. 1999. Multihypothesis sequential probability ratio tests - Part I: Asymptotic optimality. IEEE Trans. Inform. Theory 45, 7 (Nov.), 2448--2461.
• 8: Gupta, V., Krishnamurthy, S., and Faloutsos, M. 2002. Denial of service attacks at the MAC layer in wireless ad hoc networks. In Proceedings of the IEEE Military Communications Conference (MILCOM'02).
• 9: IEEE. 1999. IEEE wireless LAN medium access control (MAC) and physical layer (PHY) specifications.
• 10: Kassam, S. and Poor, H. 1985. Robust techniques for signal processing: A survey. Proceedings IEEE 73, 3 (March), 433--481.
• 11: Kyasanur, P. and Vaidya, N. 2003. Detection and handling of MAC layer misbehavior in wireless networks. In Proceedings of International Conference on Dependable Systems and Networks (DSN'03).
• 12: Sergio Marti , T. J. Giuli , Kevin Lai , Mary Baker, Mitigating routing misbehavior in mobile ad hoc networks, Proceedings of the 6th annual international conference on Mobile computing and networking, p.255-265, August 06-11, 2000, Boston, Massachusetts, United States [doi>10.1145/345910.345955]
• 13: Svetlana Radosavac , John S. Baras , Iordanis Koutsopoulos, A framework for MAC protocol misbehavior detection in wireless networks, Proceedings of the 4th ACM workshop on Wireless security, September 02-02, 2005, Cologne, Germany [doi>10.1145/1080793.1080801]
• 14: Maxim Raya , Jean-Pierre Hubaux , Imad Aad, DOMINO: a system to detect greedy behavior in IEEE 802.11 hotspots, Proceedings of the 2nd international conference on Mobile systems, applications, and services, June 06-09, 2004, Boston, MA, USA [doi>10.1145/990064.990077]
• 15: Čagalj, M., Ganeriwal, S., Aad, I., and Hubaux, J.-P. 2005. On selfish behavior in CSMA/CA networks. In Proceedings of the Annual Joint Conference of the IEEE Computer and Communications Societies (INFOCOM'05).
• 16: Verdu, S. and H.V.Poor. 1984. On minimax robustness: a general approach and applications. IEEE Trans. Inform. Theory 30, 2 (March), 328--340.
• 17: Wald, A. 1947. Sequential Analysis. New York: John Wiley and Sons.
• 18: Wald, A. and Wolfowitz, J. 1948. Optimum character of the sequential probability ratio test. Ann. Math. Statist. 19, 326--339.

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General

General Terms:
Design, Security

Keywords:
MAC layer, Wireless networks, min-max robust detection, protocol misbehavior