期刊名称：The International Arab Journal of Information Technology
印刷版ISSN：1683-3198
出版年度：2012
卷号：9
期号：3
出版社：Zarqa Private University
摘要：In this paper, we propose to design a cross-layer based intrusion detection technique for wireless networks. In this technique a combined weight value is computed from the Received signal strength (RSS) and Time taken for RTS-CTS handshake between sender and receiver (TT). Since it is not possible for an attacker to assume the RSS exactly for a sender by a receiver, it is an useful measure for intrusion detection. We propose that we can develop a dynamic profile for the communicating nodes based on their RSS values through monitoring the RSS values periodically for a specific mobile station (MS) or a base station (BS) from a server. Monitoring observed TT values at the server provides a reliable passive detection mechanism for session hijacking attacks since it is an unspoofable parameter related to its measuring entity. If the weight value is greater than a threshold value, then the corresponding node is considered as an attacker. By suitably adjusting the threshold value and the weight constants, we can reduce the false positive rate, significantly. By simulation results, we show that our proposed technique attains low misdetection ratio and false positive rate while increasing the packet delivery ratio.
关键词：Detection; Wireless Networks; Received Signal Strength (RSS); Cross Layer; RTS-CTS Handshake; and (TT).
