Take a look at the new version of this page: [ beta version ]. Tell us what you think.

ABSTRACT

In recent years mobile ad hoc networks (MANETs) have become a very popular research topic. By providing communication in the absence of a fixed infrastructure they are very attractive for many applications such as tactical and disaster recovery operations and virtual conferences. On the other hand, this flexibility introduces new security risks. Moreover, different characteristics of MANETs make conventional security systems ineffective and inefficient for this new environment. Intrusion detection, which is an indispensable part of a security system, presents also a particular challenge due to the dynamic nature of MANETs, the lack of central points, and their highly constrained nodes. In this paper, we propose to investigate the use of an artificial intelligence based learning technique to explore this difficult design space. The grammatical evolution technique inspired by natural evolution is explored to detect known attacks on MANETs such as DoS attacks and route disruption attacks. Intrusion detection programs are evolved for each attack and distributed to each node on the network. The performance of these programs is evaluated on different types of networks with different mobility and traffic patterns to show their effects on intrusion detection ability.

REFERENCES

• 1: Bonnmotion: A mobility scenario generation and analysis tool.
• 2: libge: A c++ library for grammatical evolution.
• 3: Ns-2: The network simulator.
• 4: A. Abraham and C. Grosan. Evolving intrusion detection systems. In Genetic Systems Programming: Theory and Experiences, volume 13, pages 57--79. Springer, 2006.
• 5: A. Abraham, C. Grosan, and C. Martiv-Vide. Evolutionary design of intrusion detection programs. Int. Journal of Network Security, 4:328--339, 2007.
• 6: F. Anjum and R. Talpade. Lipad: lightweight packet drop detection for ad hoc networks. In 60th IEEE Vehicular Technology Conference Proceedings, pages 1233--1237. IEEE, 2004.
• 7: S. Buchegger and J.-Y. L. Boudec. Nodes bearing grudges: Towards routing security, fairness, and robustness in mobile ad hoc networks. In 10th Euromicro Workshop on Parallel, Distributed and Network-based Processing Proceedings, pages 403--410. IEEE Computer Society, January 2002.
• 8: T. Camp, J. Boleng, and V. Davies. A survey of mobility models for ad hoc network research. Wireless Communications and Mobile Computing (WCMC): Special issue on Mobile Ad Hoc Networking: Research, Trends and Applications, 2:483--502, 2002.
• 9: Charles E. Perkins , Elizabeth M. Royer, Ad-hoc On-Demand Distance Vector Routing, Proceedings of the Second IEEE Workshop on Mobile Computer Systems and Applications, p.90, February 25-26, 1999
• 10: M. Crosbie and G. Stafford. Applying genetic programming to intrusion detection. In AAAI Symposium on Genetic Programming Proceedings, 1995.
• 11: R. Guha, O. Kachirski, D. Schwartz, S. Stoecklin, and E. Yilmaz. Case-based agents for packet-level intrusion detection in ad hoc networks. In Proceedings of the 17th International Symposium on Computer and Information Sciences, 2002.
• 12: Yi-an Huang , Wenke Lee, A cooperative intrusion detection system for ad hoc networks, Proceedings of the 1st ACM workshop on Security of ad hoc and sensor networks, October 31, 2003, Fairfax, Virginia [doi>10.1145/986858.986877]
• 13: J. P. A. J. J. Parker, J. Undercoffer. On intrusion detection and response for mobile ad hoc networks. In 23th IEEE Int. Performance Computing and Communications Conference Proceedings, 2004.
• 14: Oleg Kachirski , Ratan Guha, Effective Intrusion Detection Using Multiple Sensors in Wireless Ad Hoc Networks, Proceedings of the 36th Annual Hawaii International Conference on System Sciences (HICSS'03) - Track 2, p.57.1, January 06-09, 2003
• 15: Y. Lu, Y. Zhong, and B. Bhargava. Packet loss in mobile ad hoc networks. TR 03-009, Dept. of Computer Science, Purdue University, April.
• 16: Sergio Marti , T. J. Giuli , Kevin Lai , Mary Baker, Mitigating routing misbehavior in mobile ad hoc networks, Proceedings of the 6th annual international conference on Mobile computing and networking, p.255-265, August 06-11, 2000, Boston, Massachusetts, United States [doi>10.1145/345910.345955]
• 17: Michael O'Neill , Conor Ryan, Grammatical Evolution: Evolutionary Automatic Programming in an Arbitrary Language, Kluwer Academic Publishers, Norwell, MA, 2003
• 18: M. M. Pillai , Jan H. P. Eloff , H. S. Venter, An approach to implement a network intrusion detection system using genetic algorithms, Proceedings of the 2004 annual research conference of the South African institute of computer scientists and information technologists on IT research in developing countries, p.221-221, October 04-06, 2004, Stellenbosch, Western Cape, South Africa
• 19: Conor Ryan , J. J. Collins , Michael O'Neill, Grammatical Evolution: Evolving Programs for an Arbitrary Language, Proceedings of the First European Workshop on Genetic Programming, p.83-96, April 14-15, 1998
• 20: Sevil Şen , John A. Clark, Evolving Intrusion Detection Rules on Mobile Ad Hoc Networks, Proceedings of the 10th Pacific Rim International Conference on Artificial Intelligence: Trends in Artificial Intelligence, December 15-19, 2008, Hanoi, Vietnam [doi>10.1007/978-3-540-89197-0_106]
• 21: A. Smith. An examination of an intrusion detection architecture for wireless ad hoc networks. In Proceedings of the 5th National Colloquium for Information System Security Education, 2001.
• 22: B. Sun, K. Wu, and U. Pooch. Zone-based intrusion detection for mobile ad hoc networks. Int. Journal of Ad Hoc and Sensor Wireless Networks, 2(3), 2003.
• 23: C. Tseng, S.-H. Wang, W. Lee, C. Ko, and K. Lewitt. Demem: Distributed evidence driven message exchange intrusion detection model for manet. In In Proceedings of the 9th International Symposium on Recent Advances in Intrusion Detection (RAID'06), pages 249--271. Springer, 2006.
• 24: Chin-Yang Tseng , Poornima Balasubramanyam , Calvin Ko , Rattapon Limprasittiporn , Jeff Rowe , Karl Levitt, A specification-based intrusion detection system for AODV, Proceedings of the 1st ACM workshop on Security of ad hoc and sensor networks, October 31, 2003, Fairfax, Virginia [doi>10.1145/986858.986876]
• 25: Giovanni Vigna , Sumit Gwalani , Kavitha Srinivasan , Elizabeth M. Belding-Royer , Richard A. Kemmerer, An Intrusion Detection Tool for AODV-Based Ad hoc Wireless Networks, Proceedings of the 20th Annual Computer Security Applications Conference, p.16-27, December 06-10, 2004 [doi>10.1109/CSAC.2004.6]
• 26: D. Wilson and D. Kaur. Knowledge extraction from kdd'99 intrusion data using grammatical evolution. WSEAS Transactions on Information Science and Applications, 4:237--244, February 2007.
• 27: C. Yin, S. Tian, H. Huang, and J. He. Applying genetic programming to evolve learned rules for network anomaly detection. In ICNC Proceedings, LNCS 3612, pages 323--331. Springer, 2005.
• 28: Yongguang Zhang , Wenke Lee , Yi-An Huang, Intrusion detection techniques for mobile wireless networks, Wireless Networks, v.9 n.5, p.545-556, September 2003 [doi>10.1023/A:1024600519144]

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.1 Network Architecture and Design
          Subjects: Wireless communication

Additional Classification:
  I. Computing Methodologies
  I.2 ARTIFICIAL INTELLIGENCE
      I.2.0 General

General Terms:
Design, Experimentation, Performance, Security

Keywords:
artificial intelligence, grammatical evolution, intrusion detection, mobile ad hoc networks, security