Visible to the public A hybrid approach for dynamic intrusion detection in ad hoc networks using genetic algorithm and artificial immune system

TitleA hybrid approach for dynamic intrusion detection in ad hoc networks using genetic algorithm and artificial immune system
Publication TypeConference Paper
Year of Publication2014
AuthorsBarani, F.
Conference NameIntelligent Systems (ICIS), 2014 Iranian Conference on
Date PublishedFeb
Keywordsad hoc network, AIS, AODV-based MANET, artificial immune system, artificial immune systems, Biological cells, blackhole simulator, Detectors, dynamic intrusion detection technique, feature extraction, flooding simulator, GA, genetic algorithm, genetic algorithms, Heuristic algorithms, Intrusion detection, mobile ad hoc network, mobile ad hoc networks, neighbor simulator, Network topology, network traffic, NicheMGA algorithm, normal feature vector extraction, NS2 simulator, Routing attack, routing attack simulation, Routing protocols, rushing simulator, security, security of data, spherical detector, telecommunication network routing, telecommunication network topology, telecommunication security, telecommunication traffic, Vectors, wireless mobile node, wormhole simulator
Abstract

Mobile ad hoc network (MANET) is a self-created and self organized network of wireless mobile nodes. Due to special characteristics of these networks, security issue is a difficult task to achieve. Hence, applying current intrusion detection techniques developed for fixed networks is not sufficient for MANETs. In this paper, we proposed an approach based on genetic algorithm (GA) and artificial immune system (AIS), called GAAIS, for dynamic intrusion detection in AODV-based MANETs. GAAIS is able to adapting itself to network topology changes using two updating methods: partial and total. Each normal feature vector extracted from network traffic is represented by a hypersphere with fix radius. A set of spherical detector is generated using NicheMGA algorithm for covering the nonself space. Spherical detectors are used for detecting anomaly in network traffic. The performance of GAAIS is evaluated for detecting several types of routing attacks simulated using the NS2 simulator, such as Flooding, Blackhole, Neighbor, Rushing, and Wormhole. Experimental results show that GAAIS is more efficient in comparison with similar approaches.

URLhttps://ieeexplore.ieee.org/document/6802607/
DOI10.1109/IranianCIS.2014.6802607
Citation Key6802607