To read this content please select one of the options below:

Enhancing collaborative intrusion detection networks using intrusion sensitivity in detecting pollution attacks

Wenjuan Li (Department of Computer Science, City University of Hong Kong, Hong Kong, Hong Kong)
Weizhi Meng (Department of Computer Science, City University of Hong Kong, Hong Kong, Hong Kong, and Infocomm Security Department, Institute for Infocomm Research, Singapore)

Information and Computer Security

ISSN: 2056-4961

Article publication date: 11 July 2016

261

Abstract

Purpose

This paper aims to propose and evaluate an intrusion sensitivity (IS)-based approach regarding the detection of pollution attacks in collaborative intrusion detection networks (CIDNs) based on the observation that each intrusion detection system may have different levels of sensitivity in detecting specific types of intrusions.

Design/methodology/approach

In this work, the authors first introduce their adopted CIDN framework and a newly designed aggregation component, which aims to collect feedback, aggregate alarms and identify important alarms. The authors then describe the details of trust computation and alarm aggregation.

Findings

The evaluation on the simulated pollution attacks indicates that the proposed approach is more effective in detecting malicious nodes and reducing the negative impact on alarm aggregation as compared to similar approaches.

Research limitations/implications

More efforts can be made in improving the mapping of the satisfaction level, enhancing the allocation, evaluation and update of IS and evaluating the trust models in a large-scale network.

Practical implications

This work investigates the effect of the proposed IS-based approach in defending against pollution attacks. The results would be of interest for security specialists in deciding whether to implement such a mechanism for enhancing CIDNs.

Originality/value

The experimental results demonstrate that the proposed approach is more effective in decreasing the trust values of malicious nodes and reducing the impact of pollution attacks on the accuracy of alarm aggregation as compare to similar approaches.

Keywords

Citation

Li, W. and Meng, W. (2016), "Enhancing collaborative intrusion detection networks using intrusion sensitivity in detecting pollution attacks", Information and Computer Security, Vol. 24 No. 3, pp. 265-276. https://doi.org/10.1108/ICS-12-2014-0077

Publisher

:

Emerald Group Publishing Limited

Copyright © 2016, Emerald Group Publishing Limited

Related articles