سامانه مدیریت نشریات علمی دانشگاه صنعتی شاهرود

Alikhani, Meysam, Ahmadi Livani, Mohammad. (1391). Dynamic anomaly detection by using incremental approximate PCA in AODV-based MANETs. , 1(2), 89-101. doi: 10.22044/jadm.2013.100
Meysam Alikhani; Mohammad Ahmadi Livani. "Dynamic anomaly detection by using incremental approximate PCA in AODV-based MANETs". , 1, 2, 1391, 89-101. doi: 10.22044/jadm.2013.100
Alikhani, Meysam, Ahmadi Livani, Mohammad. (1391). 'Dynamic anomaly detection by using incremental approximate PCA in AODV-based MANETs', , 1(2), pp. 89-101. doi: 10.22044/jadm.2013.100
Alikhani, Meysam, Ahmadi Livani, Mohammad. Dynamic anomaly detection by using incremental approximate PCA in AODV-based MANETs. , 1391; 1(2): 89-101. doi: 10.22044/jadm.2013.100

Dynamic anomaly detection by using incremental approximate PCA in AODV-based MANETs

Journal of AI and Data Mining
مقاله 3، دوره 1، شماره 2، مهر 2013، صفحه 89-101    اصل مقاله (676.2 K)
نوع مقاله: Research Note
شناسه دیجیتال (DOI): 10.22044/jadm.2013.100
نویسندگان
Meysam Alikhani* 1؛ Mohammad Ahmadi Livani2
1Faculty of Electrical and Computer Engineering Tarbiat Modares University
2Faculty of Electrical and Computer Engineering Tarbiat Modares Univercity
چکیده
Mobile Ad-hoc Networks (MANETs) by contrast of other networks have more vulnerability because of having nature properties such as dynamic topology and no infrastructure. Therefore, a considerable challenge for these networks, is a method expansion that to be able to specify anomalies with high accuracy at network dynamic topology alternation. In this paper, two methods proposed for dynamic anomaly detection in MANETs those named IPAD and IAPAD. The anomaly detection procedure consists three main phases: Training, Detection and Updating in these methods. In the IPAD method, to create the normal profile, we use the normal feature vectors and principal components analysis, in the training phase. In detection phase, during each time window, anomaly feature vectors based on their projection distance from the first global principal component specified. In updating phase, at end of each time window, normal profile updated by using normal feature vectors in some previous time windows and increasing principal components analysis. IAPAD is similar to IPAD method with a difference that each node use approximate first global principal component to specify anomaly feature vectors. In addition, normal profile will updated by using approximate singular descriptions in some previous time windows. The simulation results by using NS2 simulator for some routing attacks show that average detection rate and average false alarm rate in IPAD method is 95.14% and 3.02% respectively, and in IAPAD method is 94.20% and 2.84% respectively.
کلیدواژه‌ها
MANETs؛ Dynamic Anomaly Detection؛ Routing attacks؛ Incremental Principal Component Analyses
آمار
تعداد مشاهده مقاله: 5,355
تعداد دریافت فایل اصل مقاله: 3,116