Specification-Based Intrusion Detection for Mobile Ad Hoc Networks

Abstract : New challenges within the area of security have arisen due to a relatively new paradigm called mobile ad hoc networks. A mobile ad hoc network consists of wireless nodes that build a radio network without any pre-existing infrastructure or centralized servers. However, these networks have inherent vulnerabilities that make them susceptible to malicious attack such as denial of service, propagation of incorrect routing information and physical compromise of nodes. Current security solutions for tactical radio networks, which mainly are based on cryptography, are not sufficient. A new solution for intrusion detection is needed to obtain an acceptable level of security. In this paper, we make two contributions to the area of secure mobile ad hoc networks. First, we present an entirely new architecture for intrusion detection applicable to mobile ad hoc networks. Second, we also present a specification-based approach that detects attacks against mobile ad hoc networks.