침입탐지시스템 성능향상을 위한 룰 적용에 관한 연구
The Study on Rules for Performance Improvement of Intrusion Detection System
2
조회
0
다운로드
5
인용
0
참고문헌
키워드
초록
MANET은 누구나 쉽게 접속할 수 있는 개방성 때문에 보안에 취약한 부분이 많다. 그리고 노드들의 이동성 때문에 유선 네트워크 환경에서 사용하던 보안 시스템을 그대로 적용하기에는 어려움이 많다. 따라서 이러한 환경에서 공격자의 악의적인 공격으로부터 시스템을 보호하고 즉각적으로 대처해야만 한다. 본 논문에서는 악의적인 공격을 탐지할 수 있도록 규칙들의 집합을 정의하고 이와 일치 여부를 판단하여 침입을 탐지하는 침입탐지시스템을 제안한다. 또한 패킷의 감시 효율성을 높이기 위해 클러스터 헤드가 감시 노드의 역할을 수행하게 된다.
Abstract
MANET has a lot of weakness to security because of opening that everybody can connect easily. It is difficult that existing security system itself is applied as mobility of nodes. Therefore, system is protected from malicious attack of intruder in this environment and it has to correspond to attack immediately. In this paper, to detect malicious attack of intruder, we propose intrusion detection system which detects intrusion after it is defined gathering of rules and judges whether it corresponds or not. Cluster head performs role of monitor node to raise monitor efficiency of packet.
참고문헌 (7)
- C. Coit, "To wards Faster String Matching for Intrusion Detection", Proceedings of DARPA Information Survivability Conference and Exposition (2001)
- R. Sekar, "Intrusion Detection : Specification-based anomaly detection : a new approch for detecting network intrusions", Proceedings of the 9th ACM conference on Computer and communications security (2002)
- Salvatore J. Stolfo, "Anomaly Detection in Computer Security and an Application to File System Accesses", Proceedings of 15th International Symposium of Foundations of Intelligent Systems (2005)
- Shi Zhong, "Evaluating Clustering Techniques for Network Intrusion Detection", In Proceeding of the 10th ISSAT International Conference on Reliability and Quality and Design, pp.149~155 (2004)
- Y. C. Hu, "Packet leashes: A defense aginst wormhole attacks in wireless networks", In Proceeding of IEEE Infocomm, pp.349~364 (2003)
- J. Deng, "A performance evaluation of intrusion-tolerant routing in wireless sensor networks", In Proceeding of IEEE 2nd Int'l Workshop on info Processing in Sensor Networks (2003)
- B. Sun, "Alert Aggregation in Mobile Ad Hoc Networks", The 2003 ACM Workshop on Wireless Security in conjuction with the 9th Annual International Conference on Mobile Computing and Networking(MobiCom'03), pp.69~78 (2003)