Toward a blockchain-based framework for challenge-based collaborative intrusion detection

Wenjuan LI, Yu WANG, Jin LI, Man Ho AU

Research output: Contribution to journalArticlespeer-review

34 Citations (Scopus)

Abstract

Network intrusions are a big threat to network and system assets, which have become more complex to date. To enhance the detection performance, collaborative intrusion detection networks (CIDNs) are adopted by many organizations to protect their resources. However, such detection systems or networks are typically vulnerable to insider attacks, so that there is a need to implement suitable trust mechanisms. In the literature, challenge-based trust mechanisms are able to measure the trustworthiness of a node by evaluating the relationship between the sent challenges and the received responses. In practice, challenge-based CIDNs have shown to be robust against common insider attacks, whereas it may still be susceptible to advanced insider attacks. How to enhance the robustness of such challenge-based CIDNs remains an issue. Motivated by the recent development of blockchains, in this work, our purpose is to design a blockchained challenge-based CIDN framework that aims to combine blockchains with challenge-based trust mechanism. Our evaluation demonstrates that blockchain technology has the potential to enhance the robustness of challenge-based CIDNs in the aspects of trust management (i.e., enhancing the detection of insider nodes) and alarm aggregation (i.e., identifying untruthful inputs) under adversary scenarios. Copyright © 2020 Springer-Verlag GmbH Germany, part of Springer Nature.

Original languageEnglish
Pages (from-to)127-139
JournalInternational Journal of Information Security
Volume20
Early online dateFeb 2020
DOIs
Publication statusPublished - Apr 2021

Citation

Li, W., Wang, Y., Li, J., & Au, M. H. (2021). Toward a blockchain-based framework for challenge-based collaborative intrusion detection. International Journal of Information Security, 20, 127-139. https://doi.org/10.1007/s10207-020-00488-6

Keywords

  • Intrusion detection
  • Collaborative network
  • Insider attack
  • Blockchain technology
  • Challenge-based trust mechanism

Fingerprint

Dive into the research topics of 'Toward a blockchain-based framework for challenge-based collaborative intrusion detection'. Together they form a unique fingerprint.