RIDES Robust Intrusion Detection System for IP-Based Ubiquitous Sensor Networks 英文参考文献.docVIP

Sensors 2009, 9, 3447-3468; doi:10.3390/OPEN ACCESS sensors ISSN 1424-8220 /journal/sensors Article RIDES: Robust Intrusion Detection System for IP-Based Ubiquitous Sensor Networks Syed Obaid Amin, Muhammad Shoaib Siddiqui, Choong Seon Hong * and Sungwon Lee Department of Computer Engineering, School of Electronics and Information, Kyung Hee University, Korea; E-Mails: obaid@networking.khu.ac.kr (S.O.A.); shoaib@networking.khu.ac.kr (M.S.S.); drsungwon@khu.ac.kr (S.-W.L.) * Author to whom correspondence should be addressed; E-Mail: cshong@khu.ac.kr; Tel. +82-31-201-2532; Fax: +82-31-204-9082 Received: 26 February 2009; in revised form: 24 April 2009 / Accepted: 11 May 2009 / Published: 11 May 2009 Abstract: The IP-based Ubiquitous Sensor Network (IP-USN) is an effort to build the “Internet of things”. By utilizing IP for low power networks, we can benefit from existing well established tools and technologies of IP networks. Along with many other unresolved issues, securing IP-USN is of great concern for researchers so that future market satisfaction and demands can be met. Without proper security measures, both reactive and proactive, it is hard to envisage an IP-USN realm. In this paper we present a design of an IDS (Intrusion Detection System) called RIDES (Robust Intrusion DEtection System) for IP-USN. RIDES is a hybrid intrusion detection system, which incorporates both Signature and Anomaly based intrusion detection components. For signature based intrusion detection this paper only discusses the implementation of distributed pattern matching algorithm with the help of signature-code, a dynamically created attack-signature identifier. Other aspects, such as creation of rules are not discussed. On the other hand, for anomaly based detection we propose a scoring classifier based on the SPC (Statistical Process Control) technique called CUSUM charts. We