Design and evaluation of advanced collusion attacks on collaborative intrusion detection networks in practice

Weizhi MENG, Xiapu LUO, Wenjuan LI, Yan LI

Research output: Chapter in Book/Report/Conference proceedingChapters

30 Citations (Scopus)

Abstract

To encourage collaboration among single intrusion detection systems (IDSs), collaborative intrusion detection networks (CIDNs) have been developed that enable different IDS nodes to communicate information with each other. This distributed network infrastructure aims to improve the detection performance of a single IDS, but may suffer from various insider attacks like collusion attacks, where several malicious nodes can collaborate to perform adversary actions. To defend against insider threats, challenge-based trust mechanisms have been proposed in the literature and proven to be robust against collusion attacks. However, we identify that such mechanisms depend heavily on an assumption of malicious nodes, which is not likely to be realistic and may lead to a weak threat model in practical scenarios. In this paper, we analyze the robustness of challenge-based CIDNs in real-world applications and present an advanced collusion attack, called random poisoning attack, which derives from the existing attacks. In the evaluation, we investigate the attack performance in both simulated and real CIDN environments. Experimental results demonstrate that our attack can enables a malicious node to send untruthful information without decreasing its trust value at large. Our research attempts to stimulate more research in designing more robust CIDN framework in practice. Copyright © 2016 IEEE.

Original languageEnglish
Title of host publicationProceedings of 15th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, 10th IEEE International Conference on Big Data Science and Engineering and 14th IEEE International Symposium on Parallel and Distributed Processing with Applications, IEEE TrustCom/BigDataSE/ISPA 2016
Place of PublicationUSA
PublisherIEEE
Pages1061-1068
ISBN (Electronic)9781509032051
DOIs
Publication statusPublished - 2016

Citation

Meng, W., Luo, X., Li, W., & Li, Y. (2016). Design and evaluation of advanced collusion attacks on collaborative intrusion detection networks in practice. In Proceedings of 15th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, 10th IEEE International Conference on Big Data Science and Engineering and 14th IEEE International Symposium on Parallel and Distributed Processing with Applications, IEEE TrustCom/BigDataSE/ISPA 2016 (pp. 1061-1068). IEEE. https://doi.org/10.1109/TrustCom.2016.0176

Fingerprint

Dive into the research topics of 'Design and evaluation of advanced collusion attacks on collaborative intrusion detection networks in practice'. Together they form a unique fingerprint.