Agent Based Distributed and Cooperative Intrusion Detection for Mobile Ad Hoc Networks

In this proposal, Intelligent Automation, Inc. (IAI) and its consultant, Dr. Wenke Lee, propose to prototyping and commercialize the intrusion detection algorithms for mobile ad hoc networks developed in Phase I. First, we will further improve the intrusion detection and identification algorithms and study intrusion response strategies to mitigate the damage inflicted by intrusions or anomalies. Second, we will define performance metrics and realist network scenarios containing both normal and anomalous behaviors and test our techniques against these scenarios. Meanwhile, we will develop a NetSim-based software prototype, with which the performance of various intrusion detection schemes can be evaluated. NetSim is an agent-based network simulation tool developed by IAI, It has several advantages over the well known NS-2 network simulator. Finally, we will develop a visualization tool for NetSim and deliver this tool to the Army at the end of Phase II. With this tool, topologies of the wireless networks can be displayed, detection results may be interpreted visually, anomaly sources can be indicated, and visual alerts such as different color codes can be issued. At the end, we will give the Army a demonstration of the technology developed and implemented in Phase II.