A distributed sequential algorithm for collaborative intrusion detection networks

Quanyan Zhu, Carol J. Fung, Raouf Boutaba, Tamer Başar

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Abstract

Collaborative intrusion detection networks are often used to gain better detection accuracy and cost efficiency as compared to a single host-based intrusion detection system (IDS). Through cooperation, it is possible for a local IDS to detect new attacks that may be known to other experienced acquaintances. In this paper, we present a sequential hypothesis testing method for feedback aggregation for each individual IDS in the network. Our simulation results corroborate our theoretical results and demonstrate the properties of cost efficiency and accuracy compared to other heuristic methods. The analytical result on the lower-bound of the average number of acquaintances for consultation is essential for the design and configuration of IDSs in a collaborative environment.

Original languageEnglish (US)
Title of host publication2010 IEEE International Conference on Communications, ICC 2010
DOIs
StatePublished - 2010
Event2010 IEEE International Conference on Communications, ICC 2010 - Cape Town, South Africa
Duration: May 23 2010May 27 2010

Publication series

NameIEEE International Conference on Communications
ISSN (Print)0536-1486

Other

Other2010 IEEE International Conference on Communications, ICC 2010
CountrySouth Africa
CityCape Town
Period5/23/105/27/10

ASJC Scopus subject areas

  • Computer Networks and Communications
  • Electrical and Electronic Engineering

Fingerprint Dive into the research topics of 'A distributed sequential algorithm for collaborative intrusion detection networks'. Together they form a unique fingerprint.

  • Cite this

    Zhu, Q., Fung, C. J., Boutaba, R., & Başar, T. (2010). A distributed sequential algorithm for collaborative intrusion detection networks. In 2010 IEEE International Conference on Communications, ICC 2010 [5501981] (IEEE International Conference on Communications). https://doi.org/10.1109/ICC.2010.5501981