L. Sujihelen ¹, C. Jayakumar ², C. Senthil Singh ³

Affiliations
1 Faculty Of Computing, Sathyabama University, Chennai, IN
2 Department Of C.S.E, R.M.K. Engineering College, Chennai, IN
3 Toch Institute of Technology, Ernakulam, IN

Abstract

Wireless Sensor Networks has collection of sensor nodes. The sensor nodes may be captured by the attacker because the nodes are spread out in unattended surroundings. The attacker collects all secret information such as key, secret credentials, etc. and replicates the node. This replicated node is also called as Clone node. In this paper, an attack called as node replication attack is discussed. The clone node or replicated node behaves as a legitimate node. The clone node can damage the network. In node replication attack, detecting the clone node is an important issue in Wireless Sensor Networks. In this survey, the existing detection schemes by researchers are discussed.

Keywords

Centralized, Distributed, Mobile WSN, Node Replication Attacks, Security, Static WSN

Full Text

   

S. Nithya ¹, C. Jayakumar ²

Affiliations
1 SITE, VIT University, Vellore - 632014, Tamil Nadu, IN
2 RMK Engineering College, Gummidipoondi Taluk, Kavaraipettai, Tiruvallur - 601206, Tamil Nadu, IN

Abstract

Background: Association rule mining plays a vital role in predicting the attacks and generating the firewall rules automatically. Data mining techniques discover the knowledge by counting the frequently occurring items, whereas most of the real-world datasets are non-uniform containing both frequently and relatively rarely occurring items. This paper discusses about how to generate the automatic firewall rules to detect anomalies using multiple minimum support. Methods: Mining association rules based on single minimum support approach suffers from the dilemma known as ‘rare item problem’ it requires multiple scans of database which increase the load and time consuming. To avoid this problem Multiple Minimum Support with Probability based approach (MMSP) is used to generate rules. Findings: To create a model of current user behavior from the dataset the probability will be compute with threshold value and the alarm will be raised accordingly. By using MMSP, the number of false alarm are reduced during intrusion detection and automatic firewall rules will be generated.

Keywords

Apriori, Firewall, Intrusion Detection, Minimum Support, Probability Approach, Rare Association Mining.

Full Text