Dirichlet-based trust management for effective collaborative intrusion detection networks

作者：Fung Carol J^*; Zhang Jie; Aib Issam; Boutaba Raouf

来源：IEEE Transactions on Network and Service Management, 2011, 8(2): 79-91.

DOI：10.1109/TNSM.2011.050311.100028

• Collaborative intrusion detection system
• Insider Threat
• Intrusion Detection Systems
• Security management
• Trust management

The accuracy of detecting intrusions within a Collaborative Intrusion Detection Network (CIDN) depends on the efficiency of collaboration between peer Intrusion Detection Systems (IDSes) as well as the security itself of the CIDN. In this paper, we propose Dirichlet-based trust management to measure the level of trust among IDSes according to their mutual experience. An acquaintance management algorithm is also proposed to allow each IDS to manage its acquaintances according to their trustworthiness. Our approach achieves strong scalability properties and is robust against common insider threats, resulting in an effective CIDN. We evaluate our approach based on a simulated CIDN, demonstrating its improved robustness, efficiency and scalability for collaborative intrusion detection in comparison with other existing models.

• 出版日期2011