Intrusion detection system for detecting wireless attacks in IEEE 802.11 networks. Issue 4 (1st July 2019)

• Record Type: Journal Article
• Authors: Sethuraman, Sibi Chakkaravarthy; Dhamodaran, Sangeetha; Vijayakumar, Vaidehi
• Is Part Of: IET networks. Volume 8:Issue 4(2019)
• Page Start: 219
• Page End: 232
• Publication Date: 2019-07-01
• Subjects: computer network security -- telecommunication security -- wireless LAN -- security of data -- probability -- hidden Markov models; aforementioned attacks -- KDE‐HMM technique/method -- intrusion detection model -- attack signatures -- passive mode -- efficient intrusion detection system -- existing intrusion detection schemes -- AP -- fake access point -- Wi‐Fi networks -- sophisticated wireless attacks; Computer network architectures -- Periodicals; Computer network protocols -- Periodicals; Information networks -- Periodicals; Telecommunication systems -- Periodicals; 004.605
• DOI: 10.1049/iet-net.2018.5050
• Languages: English
• ISSNs: 2047-4954

Abstract

Abstract : Sophisticated wireless attacks such as Wifiphishing, Evil twin and so on are a serious threat to Wi‐Fi networks. These attacks are tricky enough to spoof users by launching a fake access point (AP) pretending to be a legitimate one. The existing intrusion detection schemes are prone to a high rate of false positives as they depend on restricted features. Hence, an efficient intrusion detection system, which considers many more features is needed. Kernel density estimation (KDE) statistically models the distribution of data and detects the attacks in active mode. However, in passive mode (without any connectivity to the AP), detecting the attack is complicated and it requires prior knowledge of attack signatures. The other intrusion detection model which is used in passive mode, namely hidden Markov model (HMM), does not need knowledge of initial probabilities. In this study, a novel wireless intrusion detection system is proposed, by combining KDE and HMM through a tandem queue with feedback. The proposed KDE‐HMM technique/method combines the advantages of both statistical and probabilistic properties to yield better results. The performance of the proposed KDE‐HMM technique has been experimentally validated and it is found that the proposed KDE‐HMM detects the aforementioned attacks with 98% accuracy.