An Efficient Security System for Mobile Data Monitoring. (11th June 2018)

• Record Type: Journal Article
• Authors: Liu, Likun; Zhang, Hongli; Yu, Xiangzhan; Xin, Yi; Shafiq, Muhammad; Ge, Mengmeng
• Other Names: Wang Lu Academic Editor.
• Is Part Of: Wireless communications and mobile computing. Volume 2018(2018)
• Publication Date: 2018-06-11
• Subjects: Wireless communication systems -- Periodicals; Mobile communication systems -- Periodicals; 621.38205
• DOI: 10.1155/2018/9809345
• Languages: English
• ISSNs: 1530-8669

Abstract

Abstract : During the last decade, rapid development of mobile devices and applications has produced a large number of mobile data which hide numerous cyber-attacks. To monitor the mobile data and detect the attacks, NIDS/NIPS plays important role for ISP and enterprise, but now it still faces two challenges, high performance for super large patterns and detection of the latest attacks. High performance is dominated by Deep Packet Inspection (DPI) mechanism, which is the core of security devices. A new TTL attack is just put forward to escape detecting, such that the adversary inserts packet with short TTL to escape from NIDS/NIPS. To address the above-mentioned problems, in this paper, we design a security system to handle the two aspects. For efficient DPI, a new two-step partition of pattern set is demonstrated and discussed, which includes first set-partition and second set-partition. For resisting TTL attacks, we set reasonable TTL threshold and patch TCP protocol stack to detect the attack. Compared with recent produced algorithm, our experiments show better performance and the throughput increased 27% when the number of patterns is10 6 . Moreover, the success rate of detection is 100%, and while attack intensity increased, the throughput decreased.