Anomaly detection is a type of intrusion detection in which historical normal behavior of the network is used. Any deviation of a behavior from the normal will raise an alarm.
Published in Chapter:
Cutting the Gordian Knot: Intrusion Detection Systems in Ad Hoc Networks
John Felix Charles Joseph (Nanyang Technological University, Singapore), Amitabha Das (Nanyang Technological University, Singapore), Boon-Chong Seet (Auckland Univerisity of Technology, New Zealand), and Bu-Sung Lee (Nanyang Technological University, Singapore)
Copyright: © 2008
|Pages: 16
DOI: 10.4018/978-1-59904-899-4.ch033
Abstract
Intrusion detection in ad hoc networks is a challenge because of the inherent characteristics of these networks, such as, the absence of centralized nodes, the lack of infrastructure, and so forth. Furthermore, in addition to application-based attacks, ad hoc networks are prone to attacks targeting routing protocols. Issues in intrusion detection in ad hoc networks are addressed by numerous research proposals in literature. In this chapter, we first enumerate the properties of ad hoc networks which hinder intrusion detection systems. After that, significant intrusion detection system (IDS) architectures and methodologies proposed in the literature are elucidated. Strengths and weaknesses of these works are studied and are explained. Finally, the future directions which will lead to the successful deployment of intrusion detection in ad hoc networks are discussed.