Skip navigation


  • DSpace logo
  • Home
  • Collections
  • Researcher Profile
  • Explore by
    • Researcher Profile
  • VGU library
  • Help
  • User Guide
  • Sign on to:
    • My DSpace
    • Receive email
      updates
    • Edit Account details

VGU RESEARCH REPOSITORY


Please use this identifier to cite or link to this item: https://epub.vgu.edu.vn/handle/dlibvgu/163
Title: Defense strategies against byzantine attacks in a consensus-based network intrusion detection system
Authors: Michel Toulouse 
Hai Le
Cao Vien Phung
Denis Hock 
Keywords: Network Security;Intrusion detection;Consensus algorithms;Byzantine attacks
Issue Date: 2017
Publisher: Informatica
Series/Report no.: An International journal of Computing and Informatics;Vol. 41(2)
Abstract: 
The purpose of a Network Intrusion Detection System (NIDS) is to monitor network traffic such to detect malicious usages of network facilities. NIDSs can also be part of the affected network facilities and be the subject of attacks aiming at degrading their detection capabilities. The present paper investigates such vulnerabilities in a recent consensus-based NIDS proposal [1]. This system uses an average consensus
algorithm to share information among the NIDS modules and to develop coordinated responses to network intrusions. It is known however that consensus algorithms are not resilient to compromised nodes sharing falsified information, i.e. they can be the target of Byzantine attacks. Our work proposes two different strategies aiming at identifying compromised NIDS modules sharing falsified information. Also, a simple approach is proposed to isolate compromised modules, returning the NIDS into a non-compromised
state. Validations of the defense strategies are provided through several simulations of Distributed Denial of Service attacks using the NSL-KDD data set. The efficiency of the proposed methods at identifying compromised NIDS nodes and maintaining the accuracy of the NIDS is compared. The computational cost for protecting the consensus-based NIDS against Byzantine attacks is evaluated. Finally we analyze the behavior of the consensus-based NIDS once a compromised module has been isolated.
Index & Ranking: ISI(SCIE) Q4
URI(1): http://epub.vgu.edu.vn/handle/dlibvgu/163
Appears in Collections:ARTICLE/BOOK PUBLICATION

Files in This Item:
File SizeFormat
Defense Strategies against Byzantine Attacks in a Consensus-Based Network.pdf1.73 MBAdobe PDFView/Open
Show full item record

Page view(s)

42
checked on Nov 30, 2023

Download(s)

109
checked on Nov 30, 2023

Google ScholarTM

Check


Items are protected by © Copyright of Vietnamese - German University Library

© Copyright 2020 by Vietnamese - German University Library.
Add: Ring road 4, Quarter 4, Thoi Hoa Ward, Ben Cat Town, Binh Duong Province
Tel.:(0274) 222 0990. Ext.: 70206