Abstract Mobile devices are becoming the most popular way of connection, but protocols supporting mobility represent a serious source of concerns because their initial design did not enforce strong security. This paper introduces a novel class of stealth network attacks, called mobility-based evasion, where an attacker splits a malicious payload in such a way that no part can be recognized by existing defensive mechanisms including the most modern network intrusion detection systems operating in stateful mode. We propose an original cooperative framework for intrusion detection that can prevent mobility-based evasion. The viability and performance of the proposed solution is shown through a prototype applied to Mobile IPv4, Mobile IPv6 and WiFi protocols.

A collaborative framework for intrusion detection in mobile networks / Andreolini, Mauro; Colajanni, Michele; Marchetti, Mirco. - In: INFORMATION SCIENCES. - ISSN 0020-0255. - 321:(2015), pp. 179-192. [10.1016/j.ins.2015.03.025]

A collaborative framework for intrusion detection in mobile networks

ANDREOLINI, Mauro;COLAJANNI, Michele;MARCHETTI, Mirco
2015

Abstract

Abstract Mobile devices are becoming the most popular way of connection, but protocols supporting mobility represent a serious source of concerns because their initial design did not enforce strong security. This paper introduces a novel class of stealth network attacks, called mobility-based evasion, where an attacker splits a malicious payload in such a way that no part can be recognized by existing defensive mechanisms including the most modern network intrusion detection systems operating in stateful mode. We propose an original cooperative framework for intrusion detection that can prevent mobility-based evasion. The viability and performance of the proposed solution is shown through a prototype applied to Mobile IPv4, Mobile IPv6 and WiFi protocols.
321
179
192
A collaborative framework for intrusion detection in mobile networks / Andreolini, Mauro; Colajanni, Michele; Marchetti, Mirco. - In: INFORMATION SCIENCES. - ISSN 0020-0255. - 321:(2015), pp. 179-192. [10.1016/j.ins.2015.03.025]
Andreolini, Mauro; Colajanni, Michele; Marchetti, Mirco
File in questo prodotto:
File Dimensione Formato  
PRE PRINT_MarchettiAndreolini.pdf

accesso aperto

Tipologia: Pre-print dell'autore (bozza pre referaggio)
Dimensione 3 MB
Formato Adobe PDF
3 MB Adobe PDF Visualizza/Apri
Pubblicazioni consigliate

Caricamento pubblicazioni consigliate

Licenza Creative Commons
I metadati presenti in IRIS UNIMORE sono rilasciati con licenza Creative Commons CC0 1.0 Universal, mentre i file delle pubblicazioni sono rilasciati con licenza Attribuzione 4.0 Internazionale (CC BY 4.0), salvo diversa indicazione.
In caso di violazione di copyright, contattare Supporto Iris

Utilizza questo identificativo per citare o creare un link a questo documento: http://hdl.handle.net/11380/1135275
Citazioni
  • ???jsp.display-item.citation.pmc??? ND
  • Scopus 17
  • ???jsp.display-item.citation.isi??? 14
social impact