Anomaly intrusion detection methods for peer-to-peer system

作者：Tian Daxin^*; Liu Yanheng; Li Bin

来源：IFIP International Conference on Network and Parallel Computing, 2007-09-18 To 2007-09-21.

DOI：10.1109/NPC.2007.20

• peer-to-peer system security
• intrusion detection system
• hidden Markov model
• adaptive resonance theory

Peer-to-peer systems and applications are the hotspot of research of network applications. As peer-to-peer system has no central system and is deployed on an open network, new concerns regarding security have been raised. As an additional security measure, the intrusion detection system would help determine whether unauthorized users are attempting to access, have already accessed, or have compromised the network. Intrusion detection, as the second line of defense, is an indispensable toot for highly survivable networks. In this paper two anomaly intrusion detection methods are proposed for peer-to-peer system. The main characters of the methods are that they can detect intrusion in real-time without any expert knowledge and attack signatures. One method uses hidden Markov model to check reflector DoS attacks, another based on adaptive resonance theory, which can learn the normal behavior with unsupervised method. The experimental P2P system is built on FreePastry 1.4 _ 01 and JDK 1.5.0. The results have indicated that the methods can find DoS attacks immediately and find new intruders with low false alarm rate.

• 出版日期2007
• 单位吉林大学