Research On Intrusion Detection Technology For Clustering Mobile Ad Hoc Network

Mobile ad hoc network(MANET) has become the focus in the research of wireless network. MANET with special nature, is vulnerable to an adversary's malicious attacks. Moreover, the construction of the security system for MANET is more complicated. So the security is the important issue in mobile ad hoc network, especially to the services susceptible to the intrusion. Intrusion detection presents a second wall of defense and it is a necessity in any high-survivability network. To study intrusion detection technology for mobile ad hoc network is a very significant work.On the basis of the intensive analysis of the trust management, trust evaluation model and clustering strategy which had been proposed for MANET, a novel trust-based clustering algorithm was proposed in this paper. This algorithm can realize the function of the malicious nodes detection which was nelgected by other clustering algorithum and overcome the deficiency of being incapable of implementing the relative mobility metric of corresponding nodes in the MOBIC algorithm caused by the fact that the receiving power of two consecutive HELLO packet cannot be measured. The hierarchical mobile ad hoc network, deduced from the trust-based clustering strategy, have better network performance with effective operation and management and solve the question of "how to make mobile ad hoc network structure on the aspect of security mamagement".In this paper, a novel distributed intrusion detection system model—Mobile Agent Multilayered Distributed Intrusion Detection System(MAMDIDS) is proposed in order to make intrusion detection be adaptive to the nature of mobile ad hoc network much better. MAMDIDS system, constructed on the clustering mobile ad hoc network with the trust-based clustering strategy, has distributed structure and distributed control, which makes it different from the tranditonal intrusion detection system. The data source in MAMDIDS module is classified into intracluster data source and intercluster data source. By combining the mobile agent technology with the multi-layer conception, The function of selecting the different processing according to the different data sources can be realized. The multi-layer conception emphasizes the undisturbed single-layer coordination among the different layers to ensure the objective analysis of the intrusion coming from intracluster data source and the introduction of mobile agents adaptive to MANET fully embodies the flexible distribution with low-load cooperation. The heuristic global...