A Novel Intrusion Detection Architecture Based on Adaptive Selection Event Triggering for Mobile Ad-hoc Networks

Due to resource limitation, it is an optimum solution for intrusion detection in mobile ad-hoc networks (MANETs) that all nodes investigate system and user activities while a subset of network nodes are selected as monitoring nodes to monitor and detect network packets. In this paper, a novel intrusion detection architecture for energy-constrained mobile ad-hoc networks is proposed, in which the network detection module is optional. Monitoring nodes are selected by activating the network detection model to work. A selection scheme of monitoring nodes called event triggering based adaptive selection (ETBAS) is also proposed, which introduces the mechanism of monitoring states and the method of event triggering. Triggering events, for example, a node has been voted to be a monitoring node by its neighbors, the battery power of a monitoring node has consumed to a threshold, or the networks topology has changed, can activate a non-monitoring node, or make a monitoring node fall asleep. High connectivity and energy resource are balanced in ETBAS for adaptive selection scheme, which is adaptable to dynamically changing networks and enhances the network lifetime.