Evaluating the Impact of Intrusion Sensitivity on Securing Collaborative Intrusion Detection Networks Against SOOA

David Madsen; Wenjuan Li; Weizhi Meng; Yu Wang

doi:10.1007/978-3-030-05063-4_36

Evaluating the Impact of Intrusion Sensitivity on Securing Collaborative Intrusion Detection Networks Against SOOA

David Madsen, Wenjuan Li, Weizhi Meng, Yu Wang^*

^*Corresponding author for this work

Department of Computer Science

Research output: Chapters, Conference Papers, Creative and Literary Works › RGC 32 - Refereed conference paper (with host publication) › peer-review

5 Citations (Scopus)

Abstract

Cyber attacks are greatly expanding in both size and complexity. To handle this issue, research has been focused on collaborative intrusion detection networks (CIDNs), which can improve the detection accuracy of a single IDS by allowing various nodes to communicate with each other. While such collaborative system or network is vulnerable to insider attacks, which can significantly reduce the advantages of a detector. To protect CIDNs against insider attacks, one potential way is to enhance the trust evaluation among IDS nodes, i.e., by emphasizing the impact of expert nodes. In this work, we adopt the notion of intrusion sensitivity that assigns different values of detection capability relating to particular attacks, and evaluate its impact on defending against a special On-Off attack (SOOA). In the evaluation, we investigate the impact of intrusion sensitivity in a simulated CIDN environment, and experimental results demonstrate that the use of intrusion sensitivity can help enhance the security of CIDNs under adversarial scenarios, like SOOA.

Original language	English
Title of host publication	Algorithms and Architectures for Parallel Processing
Subtitle of host publication	Proceedings, Part IV
Editors	Jaideep Vaidya, Jin Li
Publisher	Springer Nature Switzerland AG
Pages	481-494
ISBN (Electronic)	9783030050634
ISBN (Print)	9783030050627
DOIs	https://doi.org/10.1007/978-3-030-05063-4_36
Publication status	Published - Nov 2018
Event	18th International Conference on Algorithms and Architectures for Parallel Processing (ICA3PP 2018) - University Town International Hotel (广州华工大学城中心酒店), Guangzhou, China Duration: 15 Nov 2018 → 17 Nov 2018 http://nsclab.org/ica3pp2018/

Publication series

Name	Lecture Notes in Computer Science
Volume	LNCS 11337
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	18th International Conference on Algorithms and Architectures for Parallel Processing (ICA3PP 2018)
Abbreviated title	ICA3PP 2018
Country/Territory	China
City	Guangzhou
Period	15/11/18 → 17/11/18
Internet address	http://nsclab.org/ica3pp2018/

Research Keywords

Challenge-based trust mechanism
Collaborative network
Insider attack
Intrusion detection
Intrusion sensitivity

Access Output

10.1007/978-3-030-05063-4_36

Other Access Options

Check CityUHK Library

Permanent Link

Right click to copy link

Cite this

Madsen, D., Li, W., Meng, W., & Wang, Y. (2018). Evaluating the Impact of Intrusion Sensitivity on Securing Collaborative Intrusion Detection Networks Against SOOA. In J. Vaidya, & J. Li (Eds.), Algorithms and Architectures for Parallel Processing: Proceedings, Part IV (pp. 481-494). (Lecture Notes in Computer Science; Vol. LNCS 11337 ). Springer Nature Switzerland AG. https://doi.org/10.1007/978-3-030-05063-4_36

@inproceedings{4a6f9a48f03e46049aacab5f2457edc2,

title = "Evaluating the Impact of Intrusion Sensitivity on Securing Collaborative Intrusion Detection Networks Against SOOA",

abstract = "Cyber attacks are greatly expanding in both size and complexity. To handle this issue, research has been focused on collaborative intrusion detection networks (CIDNs), which can improve the detection accuracy of a single IDS by allowing various nodes to communicate with each other. While such collaborative system or network is vulnerable to insider attacks, which can significantly reduce the advantages of a detector. To protect CIDNs against insider attacks, one potential way is to enhance the trust evaluation among IDS nodes, i.e., by emphasizing the impact of expert nodes. In this work, we adopt the notion of intrusion sensitivity that assigns different values of detection capability relating to particular attacks, and evaluate its impact on defending against a special On-Off attack (SOOA). In the evaluation, we investigate the impact of intrusion sensitivity in a simulated CIDN environment, and experimental results demonstrate that the use of intrusion sensitivity can help enhance the security of CIDNs under adversarial scenarios, like SOOA.",

keywords = "Challenge-based trust mechanism, Collaborative network, Insider attack, Intrusion detection, Intrusion sensitivity",

author = "David Madsen and Wenjuan Li and Weizhi Meng and Yu Wang",

year = "2018",

month = nov,

doi = "10.1007/978-3-030-05063-4_36",

language = "English",

isbn = "9783030050627",

series = "Lecture Notes in Computer Science",

publisher = "Springer Nature Switzerland AG",

pages = "481--494",

editor = "Jaideep Vaidya and Jin Li",

booktitle = "Algorithms and Architectures for Parallel Processing",

address = "Switzerland",

note = "18th International Conference on Algorithms and Architectures for Parallel Processing (ICA3PP 2018), ICA3PP 2018 ; Conference date: 15-11-2018 Through 17-11-2018",

url = "http://nsclab.org/ica3pp2018/",

}

Madsen, D, Li, W, Meng, W & Wang, Y 2018, Evaluating the Impact of Intrusion Sensitivity on Securing Collaborative Intrusion Detection Networks Against SOOA. in J Vaidya & J Li (eds), Algorithms and Architectures for Parallel Processing: Proceedings, Part IV. Lecture Notes in Computer Science, vol. LNCS 11337 , Springer Nature Switzerland AG, pp. 481-494, 18th International Conference on Algorithms and Architectures for Parallel Processing (ICA3PP 2018), Guangzhou, China, 15/11/18. https://doi.org/10.1007/978-3-030-05063-4_36

Evaluating the Impact of Intrusion Sensitivity on Securing Collaborative Intrusion Detection Networks Against SOOA. / Madsen, David; Li, Wenjuan; Meng, Weizhi et al.
Algorithms and Architectures for Parallel Processing: Proceedings, Part IV. ed. / Jaideep Vaidya; Jin Li. Springer Nature Switzerland AG, 2018. p. 481-494 (Lecture Notes in Computer Science; Vol. LNCS 11337 ).

Research output: Chapters, Conference Papers, Creative and Literary Works › RGC 32 - Refereed conference paper (with host publication) › peer-review

TY - GEN

T1 - Evaluating the Impact of Intrusion Sensitivity on Securing Collaborative Intrusion Detection Networks Against SOOA

AU - Madsen, David

AU - Li, Wenjuan

AU - Meng, Weizhi

AU - Wang, Yu

PY - 2018/11

Y1 - 2018/11

N2 - Cyber attacks are greatly expanding in both size and complexity. To handle this issue, research has been focused on collaborative intrusion detection networks (CIDNs), which can improve the detection accuracy of a single IDS by allowing various nodes to communicate with each other. While such collaborative system or network is vulnerable to insider attacks, which can significantly reduce the advantages of a detector. To protect CIDNs against insider attacks, one potential way is to enhance the trust evaluation among IDS nodes, i.e., by emphasizing the impact of expert nodes. In this work, we adopt the notion of intrusion sensitivity that assigns different values of detection capability relating to particular attacks, and evaluate its impact on defending against a special On-Off attack (SOOA). In the evaluation, we investigate the impact of intrusion sensitivity in a simulated CIDN environment, and experimental results demonstrate that the use of intrusion sensitivity can help enhance the security of CIDNs under adversarial scenarios, like SOOA.

AB - Cyber attacks are greatly expanding in both size and complexity. To handle this issue, research has been focused on collaborative intrusion detection networks (CIDNs), which can improve the detection accuracy of a single IDS by allowing various nodes to communicate with each other. While such collaborative system or network is vulnerable to insider attacks, which can significantly reduce the advantages of a detector. To protect CIDNs against insider attacks, one potential way is to enhance the trust evaluation among IDS nodes, i.e., by emphasizing the impact of expert nodes. In this work, we adopt the notion of intrusion sensitivity that assigns different values of detection capability relating to particular attacks, and evaluate its impact on defending against a special On-Off attack (SOOA). In the evaluation, we investigate the impact of intrusion sensitivity in a simulated CIDN environment, and experimental results demonstrate that the use of intrusion sensitivity can help enhance the security of CIDNs under adversarial scenarios, like SOOA.

KW - Challenge-based trust mechanism

KW - Collaborative network

KW - Insider attack

KW - Intrusion detection

KW - Intrusion sensitivity

UR - http://www.scopus.com/inward/record.url?scp=85058653349&partnerID=8YFLogxK

UR - https://www.scopus.com/record/pubmetrics.uri?eid=2-s2.0-85058653349&origin=recordpage

U2 - 10.1007/978-3-030-05063-4_36

DO - 10.1007/978-3-030-05063-4_36

M3 - RGC 32 - Refereed conference paper (with host publication)

SN - 9783030050627

T3 - Lecture Notes in Computer Science

SP - 481

EP - 494

BT - Algorithms and Architectures for Parallel Processing

A2 - Vaidya, Jaideep

A2 - Li, Jin

PB - Springer Nature Switzerland AG

T2 - 18th International Conference on Algorithms and Architectures for Parallel Processing (ICA3PP 2018)

Y2 - 15 November 2018 through 17 November 2018

ER -

Madsen D, Li W, Meng W, Wang Y. Evaluating the Impact of Intrusion Sensitivity on Securing Collaborative Intrusion Detection Networks Against SOOA. In Vaidya J, Li J, editors, Algorithms and Architectures for Parallel Processing: Proceedings, Part IV. Springer Nature Switzerland AG. 2018. p. 481-494. (Lecture Notes in Computer Science). doi: 10.1007/978-3-030-05063-4_36

Evaluating the Impact of Intrusion Sensitivity on Securing Collaborative Intrusion Detection Networks Against SOOA

Abstract

Publication series

Conference

Research Keywords

Access Output

Other Access Options

Permanent Link

Other Files and Links

Fingerprint

Cite this