VGU RESEARCH REPOSITORY
Please use this identifier to cite or link to this item:
https://epub.vgu.edu.vn/handle/dlibvgu/163
Title: | Defense strategies against byzantine attacks in a consensus-based network intrusion detection system | Authors: | Michel Toulouse Hai Le Cao Vien Phung Denis Hock |
Keywords: | Network Security;Intrusion detection;Consensus algorithms;Byzantine attacks | Issue Date: | 2017 | Publisher: | Informatica | Series/Report no.: | An International journal of Computing and Informatics;Vol. 41(2) | Abstract: | The purpose of a Network Intrusion Detection System (NIDS) is to monitor network traffic such to detect malicious usages of network facilities. NIDSs can also be part of the affected network facilities and be the subject of attacks aiming at degrading their detection capabilities. The present paper investigates such vulnerabilities in a recent consensus-based NIDS proposal [1]. This system uses an average consensus algorithm to share information among the NIDS modules and to develop coordinated responses to network intrusions. It is known however that consensus algorithms are not resilient to compromised nodes sharing falsified information, i.e. they can be the target of Byzantine attacks. Our work proposes two different strategies aiming at identifying compromised NIDS modules sharing falsified information. Also, a simple approach is proposed to isolate compromised modules, returning the NIDS into a non-compromised state. Validations of the defense strategies are provided through several simulations of Distributed Denial of Service attacks using the NSL-KDD data set. The efficiency of the proposed methods at identifying compromised NIDS nodes and maintaining the accuracy of the NIDS is compared. The computational cost for protecting the consensus-based NIDS against Byzantine attacks is evaluated. Finally we analyze the behavior of the consensus-based NIDS once a compromised module has been isolated. |
Index & Ranking: | ISI(SCIE) Q4 | URI(1): | http://epub.vgu.edu.vn/handle/dlibvgu/163 |
Appears in Collections: | ARTICLE/BOOK PUBLICATION |
Files in This Item:
File | Size | Format | |
---|---|---|---|
Defense Strategies against Byzantine Attacks in a Consensus-Based Network.pdf | 1.73 MB | Adobe PDF | View/Open |
Page view(s)
42
checked on Nov 30, 2023
Download(s)
109
checked on Nov 30, 2023
Google ScholarTM
Check
Items are protected by © Copyright of Vietnamese - German University Library