Rghioui, Anas Abdelmalek Essaadi University - Faculty of Sciences and Technology of Tangier - Labroatory of informatics systems and Telecomunications, Morocco , Bouhorma, Mohammed Abdelmalek Essaadi University - Faculty of Sciences and Technology of Tangier - Labroatory of informatics systems and Telecomunications, Morocco , Alluhaidan, Yasser Abdulrahman Saudi Business Machines, Saudi Arabia

Intrusion detection architecture based on neighbor behavior surveillance

15277

Even when 6LoWPAN has an ideal cryptographyline defense, it is still necessary to implement an intrusiondetection system (IDS) to deal with threats targeting networkperformance such as Denial of Service attacks. IDS discover andstop most attacks that make changes on the operation of thenetwork. However, few IDS solution has been proposed for6LoWPAN networks. IDS missions are to monitor and raise analarm about any possible threats and pass it to the system torestart the keying process for eliminating the attackers. Newtechnique has been proposed recently based on the principle thatneighbor nodes have a trend to have the same behavior, so thedetection of the malicious node is based on the detection of theabnormal node that has a bad behavior different than itneighbors. The security goal is to provide a monitoring systemthat will attempt to detect anomalous malicious behavior and toprevent it from harming the network performance basing on theneighbors nodes behavior monitoring.

49

6LoWPAN , IDS , Neighbor , based IDS , Security

Mediterranean Telecommunications Journal

53