Abstract:

A novel honesty-rate measuring based approach is proposed to improve the security and trust of distributed intrusion detection systems. All the cooperative nodes join the system with an initial value of 1 for an honesty rate. The honesty rate of a node dynamically increases or decreases depending on its status and behavior. The proposed approach compares the honesty rate of each node to eliminate or reduce the impact of harmful information from the malicious nodes, and then reduces the false positives and false negatives of the intrusion systems. The experiments and analyses of a representative case confirm the ability of the proposed approach improves detection accuracy and detection capability.

Key words:  honesty-rate measuring; distributed; intrusion detection; ossec