基于在线聚类和检测成本的移动自组网异常检测  

Online Clustering and Detective Cost Based Anomaly Detection Scheme for MANET

作　　者：王雷春[1] 马传香[1] 

机构地区：[1]湖北大学数学与计算机科学学院,武汉430062

出　　处：《计算机科学》2010年第9期105-108,167,共5页Computer Science

基　　金：国家自然科学基金(60603069)资助

摘　　要：移动自组网具有无线信道、动态拓扑、缺乏基础设施和节点资源受限等特点,更易受到安全威胁,且无法部署复杂的安全协议和算法。为了有效检测移动自组网中的异常访问行为,提出了一种基于在线聚类和检测成本的异常检测方案TCDC。TCDC先在单个节点内对访问行为进行在线聚类和处理,然后在不同节点间通过基于检测成本的协同检测进一步确认访问行为。仿真实验表明,该异常检测方案能够有效地检测移动自组网中的异常行为,且消耗资源较少。Mobile Ad hoc networks（MANET） are highly vulnerable to be attacked and difficult to deploy complicated safe protocols and algorithms due to the open medium,dynamically changing network topology,lack of centralized monitoring and management point,and limited resources.To detect efficiently anomaly behaviors in MANET,this paper proposed a online clustering and detective cost based anomaly detection scheme for MANET,TCDC.In this scheme,TCDC firstly analyzes and deals with access behaviors in single node using online clustering based on access behaviors,and then validates farther access behaviors by cooperative detection based on detective cost among different nodes.Simulation results show TCDC can efficiently detect anomaly behaviors in MANET with less resource consumption.

关 键 词：移动自组网 在线聚类 检测成本 异常检测 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]