Enhancing collaborative intrusion detection networks against insider attacks using supervised intrusion sensitivity-based trust management model

Research output: Journal Publications and Reviews (RGC: 21, 22, 62)21_Publication in refereed journalNot applicablepeer-review

24 Scopus Citations
View graph of relations

Author(s)

Related Research Unit(s)

Detail(s)

Original languageEnglish
Pages (from-to)135-145
Journal / PublicationJournal of Network and Computer Applications
Volume77
Early online date13 Oct 2016
Publication statusPublished - 1 Jan 2017

Abstract

To defend against complex attacks, collaborative intrusion detection networks (CIDNs) have been developed to enhance the detection accuracy, which enable an IDS to collect information and learn experience from others. However, this kind of networks is vulnerable to malicious nodes which are utilized by insider attacks (e.g., betrayal attacks). In our previous research, we developed a notion of intrusion sensitivity and identified that it can help improve the detection of insider attacks, whereas it is still a challenge for these nodes to automatically assign the values. In this article, we therefore aim to design an intrusion sensitivity-based trust management model that allows each IDS to evaluate the trustworthiness of others by considering their detection sensitivities, and further develop a supervised approach, which employs machine learning techniques to automatically assign the values of intrusion sensitivity based on expert knowledge. In the evaluation, we compare the performance of three different supervised classifiers in assigning sensitivity values and investigate our trust model under different attack scenarios and in a real wireless sensor network. Experimental results indicate that our trust model can enhance the detection accuracy of malicious nodes and achieve better performance as compared with similar models.

Research Area(s)

  • Collaborative network, Insider attacks, Intrusion detection, Intrusion sensitivity, Machine learning, Trust management model

Citation Format(s)

Enhancing collaborative intrusion detection networks against insider attacks using supervised intrusion sensitivity-based trust management model. / Li, Wenjuan; Meng, Weizhi; Kwok, Lam-For; IP, Horace H.S.

In: Journal of Network and Computer Applications, Vol. 77, 01.01.2017, p. 135-145.

Research output: Journal Publications and Reviews (RGC: 21, 22, 62)21_Publication in refereed journalNot applicablepeer-review