A dynamic intrusion detection hierarchy for MANETs

MANETs lack natural concentration points at which a single dedicated node can monitor all network traffic for intrusions. Consequently, detecting attacks on MANETs requires distributed, cooperative intrusion detection techniques. We examine an approach to organizing a cooperative intrusion detection system for MANETs as a dynamic hierarchy that adapts to changes in topology and other environmental factors. We describe the rationale for this approach, the design of a set of hierarchy services to support it, and our experience developing prototype intrusion detection components that utilize these services.