基于簇的移动Ad hoc网多层分布式入侵检测

Cluster-based Multi-layer Distributed Intrusion Detection in Wireless Ad Hoc Networks

动Adhoc网络的独特网络特性导致其安全性特别脆弱,所以为其提供高安全的入侵检测系统势在必行。通过考虑在移动Adhoc网络中入侵检测系统的分布式和协同工作的需要,提出了一种基于簇的多层分布式入侵检测技术,并给出模型。此模型采用统计学方法的异常检测技术结合数据挖据技术和簇技术对入侵进行检测,有效提高了移动Adhoc网络的安全性和对分布式攻击的协同检测能力,并降低了网络的通信负荷。

There are inherent vulnerabilities that are not easily preventable in the mobile Ad hoe networks.To build a highly secure wireless Ad hoc network,intrusion detection techniques need to be deployed; in this paper, a clusterbased multilayer distributed intrusion detection technology has been introduced, an architecture for better intrusion detection based on cluster using Data Mining in wireless Ad hoc networks has been shown.A statistical anomaly detection approach has been used.The technique can enhance the security and collaborative detection capability of intrusion detection, and the communication load is reduced effectively.