A new fangled smart approach for intrusion detection and prevention system in mobile ad hoc networks

Abstract

newline Over the past few decades, Mobile Ad Hoc Network (MANET) has gained a great attention in both safety / non-safety applications. Typically, MANET consists of group of mobile nodes that involved in data communication. In this network, any type of mobile node can connect with other device at any time without any centralized entity. Nevertheless, this remarkable improvement has exposed mobile nodes to suffer from large number of security threats / attacks under harsh environment. Especially, security is highly demand in public safety networks. Hence, it is sure that threats protection scheme is required to defend against variety of security threats. These security threats are often called as Intrusions . In MANET, intrusion detection is a challenging since it changes network topology dynamically, broken wireless communication, infrastructure utilization and noisy traffic analysis. In addition, intrusions may come from both inside or outside the network. Certain intrusions are follows: Denial of Service (DoS), Port Scan and Packet Sniffing. In this work, Intrusion Detection and Prevention Systems (IDPS) have been analyzed and a novel scheme to identify and prevent intrusions from attackers is proposed. Thereby, a node can meet the main security constraints such as confidentiality, availability and integrity. However, much IDPS works have been studied in MANET and research is only based on two aspects, which are Anomaly-based and Signature-based IDPS. On the individual scheme, many issues are unsolved such as high false positives, and false negatives, low accuracy rate, and time consuming operation. However, it is important to secure the network from attackers. Motivated by this fact, a hybrid-IDPS is explored which is a combination of anomaly-based and signature-based IDPS. In case if combine the merits of both the types, Hybrid-IDPS can defend well against the MANET security attacks. Nonetheless, hybrid-based IDS has been very limited and it cannot find the unknown packets completely. This New-Fangled hybrid IDPS