On effective sampling techniques for host-based intrusion detection in MANET

Tactical Mobile Ad Hoc Network (MANET) demands a robust, diverse, and resilient protected communication and computing environment enabling network-centric operation with minimal downtime. Nevertheless, the nature of MANET causes security risks because mobile nodes are deployed in the open field and wireless communication makes the information accessible by anyone. Conducting cyber attack monitoring and detection in a tactical MANET becomes challenging because of limited resources and its infrastructureless network environment. To address these issue, we first study the host-based detection architecture to monitor and detect cyber attacks and then develop sampling techniques to balance the tradeoff between detection accuracy and bandwidth overhead. We also investigate the impact of host-based attack detection on MANET.