methodologies and frameworks for testing ids in adhoc networks
Testing Intrusion Detection Systems (IDS) has been a substantial part of the development lifecycle, since the first prototypes and products appeared on the market. Unfortunately, many of the existing principles, procedures and systematic frameworks for testing IDS are not broad enough to cover systems which are focussed on mobile adhoc networks (MANETs). As a baseline, this paper expands the most important requirements for IDS testing to MANET environments. Two alternative testbed realization approaches are described, including a common example scenario for comparing the properties of the approaches. One approach is based on hardware nodes, reproducible physical motion and radio signal attenuation; the other uses both hardware and virtual nodes and a motion emulation framework that is able to incorporate arbitrary radio propagation models. A selection of MANET specific attacks and their implementation and impact on both types of testbeds is presented. These attacks are beyond the threats that we know from conventional wired networks, which still need to be taken care of in MANETs. Finally, the advantages of both test bed approaches are discussed. As a conclusion, a deployment strategy for testing MANET IDS under different conditions is derived.
reproducible node motion semi-virtual testbed attacks and attack implementations hardware testbed smart manet jamming worm hole black hole