Towards an Effective Intrusion Response Engine Combined with Intrusion Detection in Ad Hoc Networks

TL;DR

This paper proposes an integrated intrusion response and detection system for ad hoc networks, utilizing a neural network-based detection engine and a novel tree-based key agreement protocol to enhance security and response effectiveness.

Contribution

It introduces a combined intrusion response engine with a secure communication protocol and a neural network-based detection method tailored for ad hoc networks.

Findings

High detection rate for packet dropping attacks

Effective key secrecy in the proposed protocol

Robust performance under various traffic and mobility conditions

Abstract

In this paper, we present an effective intrusion response engine combined with intrusion detection in ad hoc networks. The intrusion response engine is composed of a secure communication module, a local and a global response module. Its function is based on an innovative tree-based key agreement protocol while the intrusion detection engine is based on a class of neural networks called eSOM. The proposed intrusion response model and the tree-based protocol, it is based on, are analyzed concerning key secrecy while the intrusion detection engine is evaluated for MANET under different traffic conditions and mobility patterns. The results show a high detection rate for packet dropping attacks.