基于在线聚类和检测成本的移动自组网异常检测

移动自组网具有无线信道、动态拓扑、缺乏基础设施和节点资源受限等特点,更易受到安全威胁,且无法部署复杂的安全协议和算法.为了有效检测移动自组网中的异常访问行为,提出了一种基于在线聚类和检测成本的异常检测方案TCDC.TCDC先在单个节点内对访问行为进行在线聚类和处理,然后在不同节点间通过基于检测成本的协同检测进一步确认访问行为.仿真实验表明,该异常检测方案能够有效地检测移动自组网中的异常行为,且消耗资源较少.

Online Clustering and Detective Cost Based Anomaly Detection Scheme for MANET

Mobile Ad hoc networks(MANET) arc highly vulnerable to be attacked and difficult to deploy complicated safe protocols and algorithms due to the open medium, dynamically changing network topology,lack of centralized monitoring and management point, and limited resources. To detect efficiently anomaly behaviors in MANET, this paper proposed a online clustering and detective cost based anomaly detection scheme for MANET, TCDC. In this scheme, TCDC firstly analyzes and deals with access behaviors in single node using online clustering based on access behaviors, and then validates farther access behaviors by cooperative detection based on detective cost among different nodes. Simulation results show TCDC can efficiently detect anomaly behaviors in MANET with less resource consumption.