Agent Based Dynamic Anomaly Intrusion Detection in MANET

Abstract

Wireless ad hoc networks susceptible to intrusions as they operate in an open medium and use co-operative strategies for network communications. Solutions that are designed for wired networks are not always suitable for wireless networks, especially Mobile Ad Hoc Networks (MANET) are in Dynamic nature. To obtain an acceptable level of security for MANET’s, Traditional security solutions like Agent (mobile agent) based are combined with intrusion detection mechanisms. One method is to have IDS is running on every mobile host in a network, which runs a local detection engine analyzing local data for anomalies. A cooperative detection mechanism decides whether there is an intrusion, with all nodes taking part in the decision process related agent. But MANET nodes typically limited battery power. Thus it is not efficient to make each MANET node always a monitoring node, especially when the threat level is low. Instead a cluster of neighboring MANET nodes can randomly and fairly elect a monitoring node use agent and the cluster head. If a compromised node happens to be selected as the cluster head, it can launch attacks without being detected. The cluster head selection based on the fitness function based. The higher fitness function value take the monitoring the nodes of others in the cluster network.