Effect of Intrusion Detection on Reliability Jin-Hee Cho, Member, IEEE, Ing-Ray Chen, Member, IEEE, and Phu-Gui Feng IEEE TRANSACTIONS ON RELIABILITY, VOL. 59, NO. 1, MARCH Clarence Bingsheng Wang – CS5214– M & E of CSs of Mission-Oriented Mobile Group Systems Reporter: Clarence Bingsheng Wang in Mobile Ad Hoc Networks

Effect of IDSs on Reliability Outline Introduction & Background System Model Performance Model Parameterization Numerical Results & Analysis Applicability & Conclusion Reference Q & A Clarence Bingsheng Wang – CS5214– M & E of CSs2

Effect of IDSs on Reliability Introduction Analyzing the effect of intrusion detection system (IDS) techniques on the reliability of a mission-oriented group communication in mobile ad hoc networks. Knowing design conditions for employing intrusion detection system (IDS) techniques that can enhance the reliability, and thus prolong the lifetime of GCS. Clarence Bingsheng Wang – CS5214– M & E of CSs3

Effect of IDSs on Reliability Introduction Identify the optimal rate at which IDS should be executed to maximize the system lifetime. Consider the effect of security threats, and Intrusion Detection Systems (IDSs) techniques on system lifetime of a mission-oriented Group Communication System (GCS) in Mobile Ad Hoc Networks (MANETs). Clarence Bingsheng Wang – CS5214– M & E of CSs4

Effect of IDSs on Reliability Background Mobile ad hoc networks (MANETs)  Move Independently: Rapid Change in Topology  Forward Traffic Clarence Bingsheng Wang – CS5214– M & E of CSs5

Effect of IDSs on Reliability Background Group Communication Systems. GGroup: “Directly Communicate” GGroup Partition GGroup Merge Security Protocol in MANETs CCharacteristics Actions Against Malicious Attacks PPrevention: “Security holes” DDetection: Mission-Oriented GCSs RRecovery Clarence Bingsheng Wang – CS5214– M & E of CSs6

Effect of IDSs on Reliability Background Optimal setting for IDS techniques  Maximize the security-induced failure time Clarence Bingsheng Wang – CS5214– M & E of CSs7 MMTSF: Mean time to security failure  Reflect the expected system lifetime

Effect of IDSs on Reliability System Model Connectivity-Oriented Mobile Group  Defined based on “Connectivity”  Single Hop: All members are connected  Multi Hops: Separation between groups Clarence Bingsheng Wang – CS5214– M & E of CSs8 Group Partition Failure /Mobility Group Merge

Effect of IDSs on Reliability System Model Mission-Oriented GCSs  Mission execution is an application-level goal built on top of connectivity-oriented group communications Clarence Bingsheng Wang – CS5214– M & E of CSs9

Effect of IDSs on Reliability System Model Secure Group Communications: Broadcast  Group Key  Encrypt the message for Confidentiality  Rekey: Group member Join/Leave/Eviction, Group Partition/Merge  Contributory key agreement protocol: GDH Clarence Bingsheng Wang – CS5214– M & E of CSs10

Effect of IDSs on Reliability Group Member’s Authenticity  Public/Private key pair  Challenge/Response mechanism  Assumption: The public keys of all group members preloaded into every node. No certificate authority (CA) in the MANET during mission period  A node’s public key servers as the identifier of the node Clarence Bingsheng Wang – CS5214– M & E of CSs11

Effect of IDSs on Reliability System Model-IDSs Clarence Bingsheng Wang – CS5214– M & E of CSs12

Effect of IDSs on Reliability System Model-IDSs Clarence Bingsheng Wang – CS5214– M & E of CSs13

Effect of IDSs on Reliability System Model-IDSs Clarence Bingsheng Wang – CS5214– M & E of CSs14 (a) The per-node false negative, and positive probabilities ( 1, and 2) (b) The number of vote-participants, (c) The estimate of the current number of compromised nodes which may collude with the objective to disrupt the service of the system.

Effect of IDSs on Reliability System Model-IDSs Intrusion tolerance  For the selection of participants, each node periodically exchanges its routing information, location, and identifier with its neighboring nodes  Candidates: all neighbor nodes of a target node  A coordinator is selected randomly so that the adversaries will not have specific targets Clarence Bingsheng Wang – CS5214– M & E of CSs15 Coordinator

Effect of IDSs on Reliability System Model-IDSs Clarence Bingsheng Wang – CS5214– M & E of CSs16

Effect of IDSs on Reliability System Model-IDSs Intrusion tolerance  Any node not following the protocol raises a flag as a potentially compromised node, and may get itself evicted when it is being evaluated as a target node.  The vote-participants are known to other nodes, and based on votes received, they can determine whether or not a target node is to be evicted. Clarence Bingsheng Wang – CS5214– M & E of CSs17

Effect of IDSs on Reliability System Model Failure Definition  Definition 1: The failure of any group leads to GCSs’ failure. (SF1)  Definition 2: The failures of all groups lead to GCSs’ failure. (SF2)  Condition 1: a compromised but undetected group member requests and subsequently obtains data using the group key. (C1)  Condition 2: more than 1/3 of group member nodes are compromised, but undetected by IDS (Byzantine Failure model) (C2) Clarence Bingsheng Wang – CS5214– M & E of CSs18

Effect of IDSs on Reliability System Model Network Connectivity, System Failure  Group nodes are connected within a single hop, forming a single group in the system without experiencing group merge or partition events Only a single group in the system, SF1 and SF2 (i.e., the two system failure definitions) are the same.  Group nodes are connected through multi-hops so that there are multiple groups in the system due to group partition/merge events because of node mobility or node failure. Clarence Bingsheng Wang – CS5214– M & E of CSs19

Effect of IDSs on Reliability System Model Reliability Metric: MTTSF  Indicates the lifetime of the GCSs before it fails.  A GCS fails when one mobile group fails, or when all mobile groups fail in the mission-oriented GCS, as defined by SF1 or SF2.  A mobile group fails when either C1 or C2 is true.  A lower MTTSF Implies a faster loss of system integrity, or availability.  The goal is to maximize MTTSF. Clarence Bingsheng Wang – CS5214– M & E of CSs20

Effect of IDSs on Reliability Performance Model Use places to deposit tokens. Use transitions to model events. Tracks the behavior of a single mobile group Tracks the number of mobile groups existing in the GCSs during the system lifetime A transition is eligible to fire when the firing conditions associated with the event are met, including (a) its input places each must contain at least one token, and (b) the associated enabling guard function, if it exists, must return true Clarence Bingsheng Wang – CS5214– M & E of CSs21

Effect of IDSs on Reliability Performance Model SPN Clarence Bingsheng Wang – CS5214– M & E of CSs22

Effect of IDSs on Reliability Performance Model Clarence Bingsheng Wang – CS5214– M & E of CSs23

Effect of IDSs on Reliability Performance Model Clarence Bingsheng Wang – CS5214– M & E of CSs24

Effect of IDSs on Reliability Performance Model Clarence Bingsheng Wang – CS5214– M & E of CSs25

Effect of IDSs on Reliability Performance Model Clarence Bingsheng Wang – CS5214– M & E of CSs26

Effect of IDSs on Reliability Performance Model Clarence Bingsheng Wang – CS5214– M & E of CSs27

Effect of IDSs on Reliability Performance Model Clarence Bingsheng Wang – CS5214– M & E of CSs28

Effect of IDSs on Reliability Performance Model Clarence Bingsheng Wang – CS5214– M & E of CSs29

Effect of IDSs on Reliability Parameterization Clarence Bingsheng Wang – CS5214– M & E of CSs30

Effect of IDSs on Reliability Parameterization Clarence Bingsheng Wang – CS5214– M & E of CSs31

Effect of IDSs on Reliability Parameterization Clarence Bingsheng Wang – CS5214– M & E of CSs32

Effect of IDSs on Reliability Parameterization Clarence Bingsheng Wang – CS5214– M & E of CSs33

Effect of IDSs on Reliability Parameterization Clarence Bingsheng Wang – CS5214– M & E of CSs34

Effect of IDSs on Reliability Parameterization Clarence Bingsheng Wang – CS5214– M & E of CSs35

Effect of IDSs on Reliability Clarence Bingsheng Wang – CS5214– M & E of CSs36

Effect of IDSs on Reliability Clarence Bingsheng Wang – CS5214– M & E of CSs37

Effect of IDSs on Reliability Clarence Bingsheng Wang – CS5214– M & E of CSs38

Effect of IDSs on Reliability Clarence Bingsheng Wang – CS5214– M & E of CSs39

Effect of IDSs on Reliability Clarence Bingsheng Wang – CS5214– M & E of CSs40

Effect of IDSs on Reliability Clarence Bingsheng Wang – CS5214– M & E of CSs41

Effect of IDSs on Reliability Applicability & Conclusion Clarence Bingsheng Wang – CS5214– M & E of CSs42 Attacker Behavior System Failure definitions Operational Conditions

Effect of IDSs on Reliability Applicability & Conclusion Results Clarence Bingsheng Wang – CS5214– M & E of CSs43 m m Node Density m m

Effect of IDSs on Reliability Reference 1. Jin-Hee Cho, Ing-Ray Chen, Phu-Gui Feng, “Effect of Intrusion Detection on Reliability of Mission-Oriented Mobile Group Systems in Mobile Ad Hoc Networks,” IEEE TRANSACTIONS ON RELIABILITY, pp. 231 – 241, VOL. 59, NO. 1, MARCH Jin-Hee Cho, “Design and Analysis of QoS-Aware Key Management and Intrusion Detection Protocols for Secure Mobile Group Communications in Wireless Networks,” PhD. Dissertation, Nov. 12, Clarence Bingsheng Wang – CS5214– M & E of CSs44

Effect of IDSs on Reliability Clarence Bingsheng Wang – CS5214– M & E of CSs45