Wi-Fi devices have limited battery life because of which conserving battery life is imperative. The 802.11 Wi-Fi standard provides power management feature that allows stations(STAs) to enter into sleep state to prese...Wi-Fi devices have limited battery life because of which conserving battery life is imperative. The 802.11 Wi-Fi standard provides power management feature that allows stations(STAs) to enter into sleep state to preserve energy without any frame losses. After the STA wakes up, it sends a null data or PS-Poll frame to retrieve frame(s) buffered by the access point(AP), if any during its sleep period. An attacker can launch a power save denial of service(PS-DoS) attack on the sleeping STA(s) by transmitting a spoofed null data or PS-Poll frame(s) to retrieve the buffered frame(s) of the sleeping STA(s) from the AP causing frame losses for the targeted STA(s). Current approaches to prevent or detect the PS-DoS attack require encryption,change in protocol or installation of proprietary hardware. These solutions suffer from expensive setup, maintenance, scalability and deployment issues. The PS-DoS attack does not differ in semantics or statistics under normal and attack circumstances.So signature and anomaly based intrusion detection system(IDS) are unfit to detect the PS-DoS attack. In this paper we propose a timed IDS based on real time discrete event system(RTDES) for detecting PS-DoS attack. The proposed DES based IDS overcomes the drawbacks of existing systems and detects the PS-DoS attack with high accuracy and detection rate. The correctness of the RTDES based IDS is proved by experimenting all possible attack scenarios.展开更多
SNMP-based data collecting is fundamental for IP network management. This paper presents a SNMP-based Data Collect Algorithm for common use. According to requirement of data collecting, the algorithm disassem-bles col...SNMP-based data collecting is fundamental for IP network management. This paper presents a SNMP-based Data Collect Algorithm for common use. According to requirement of data collecting, the algorithm disassem-bles collect tasks into metadata, and then reconstructs the protocol packet. Also takes full advantage of GetBulk op-eration, and brings out a combination algorithm for discrete variables of a MIB table so that the operation is opti-mized. A collect engine is implemented using the algorithm, which supports dynamic collection of multiple MIB vari-ables, supports arithmetic computing and logical computing, supports threshold judgment and sends out abnormalevents notifications. Tests are given to prove that the algorithm reduces the traffic for network management and im-proves the efficiency.展开更多
基金supported by TATA Consultancy Servies(TCS)Research Fellowship Program,India
文摘Wi-Fi devices have limited battery life because of which conserving battery life is imperative. The 802.11 Wi-Fi standard provides power management feature that allows stations(STAs) to enter into sleep state to preserve energy without any frame losses. After the STA wakes up, it sends a null data or PS-Poll frame to retrieve frame(s) buffered by the access point(AP), if any during its sleep period. An attacker can launch a power save denial of service(PS-DoS) attack on the sleeping STA(s) by transmitting a spoofed null data or PS-Poll frame(s) to retrieve the buffered frame(s) of the sleeping STA(s) from the AP causing frame losses for the targeted STA(s). Current approaches to prevent or detect the PS-DoS attack require encryption,change in protocol or installation of proprietary hardware. These solutions suffer from expensive setup, maintenance, scalability and deployment issues. The PS-DoS attack does not differ in semantics or statistics under normal and attack circumstances.So signature and anomaly based intrusion detection system(IDS) are unfit to detect the PS-DoS attack. In this paper we propose a timed IDS based on real time discrete event system(RTDES) for detecting PS-DoS attack. The proposed DES based IDS overcomes the drawbacks of existing systems and detects the PS-DoS attack with high accuracy and detection rate. The correctness of the RTDES based IDS is proved by experimenting all possible attack scenarios.
文摘SNMP-based data collecting is fundamental for IP network management. This paper presents a SNMP-based Data Collect Algorithm for common use. According to requirement of data collecting, the algorithm disassem-bles collect tasks into metadata, and then reconstructs the protocol packet. Also takes full advantage of GetBulk op-eration, and brings out a combination algorithm for discrete variables of a MIB table so that the operation is opti-mized. A collect engine is implemented using the algorithm, which supports dynamic collection of multiple MIB vari-ables, supports arithmetic computing and logical computing, supports threshold judgment and sends out abnormalevents notifications. Tests are given to prove that the algorithm reduces the traffic for network management and im-proves the efficiency.
