A Novel Architecture of Intrusion Detection System

In this paper, we propose a novel Intrusion Detection System (IDS), Court-like Cluster-based IDS (CCIDS), to secure routing protocols in Mobile Ad Hoc Networks (MANETs). After the network is divided into one-hop clusters, each of these clusters performs similar functions as a court in real-life, such as accusation, investigation and defence. We show that court like IDS is effective in many aspects, especially the capability to prevent malicious alerts and reduce false positive rate. To further prove its effectiveness, we then apply CCIDS in securing the Optimized Link State Routing (OLSR) protocol to solve two most severe attacks-link spoofing and link deletion. Through extensive simulation, four performance parameters, namely, detection rate, false positive rate, detection delay, and communication overhead are evaluated.