TC: Small: Real-Time Intrusion Detection for VoIP over IEEE 802.11 Based Wireless Networks: An Analytical Approach for Guaranteed Performance

TC：小型：基于 IEEE 802.11 的无线网络的 VoIP 实时入侵检测：保证性能的分析方法

• 批准号: 1117687
• 负责人: Yu Cheng
• 金额: $ 38.61万
• 依托单位: Illinois Institute of Technology
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2012
• 资助国家: 美国
• 起止时间: 2012-01-01 至 2015-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1117687&HistoricalAwards=false
• 关键词: TC; Small; Real; Time; Intrusion

Voice over IP (VoIP) over IEEE 802.11 based wireless networks leads to a promising all-IP platform provisioning economic high-quality voice services to mobile users anytime and anywhere. Due to the openness and distributed nature of the protocols involved in the VoIP over wireless, it becomes easy for malicious users to achieve their own gain or disrupt the service by deviating from the normal protocol behaviors. This project develops a real-time intrusion detection framework, requiring no modification to the relevant standard protocols. Analytical tools are also developed for guiding the detection system design for guaranteed performance.This research is expected to significantly advance the state of the art of real-time intrusion detection for VoIP over 802.11 based wireless networks, through three complementary tracks: selfish behavior detection over the 802.11 protocol, session initiation protocol (SIP)-layer attacks and detections, and development of a cross-layer intrusion detection framework. On the education front, the proposed interdisciplinary research seamlessly integrates theoretical studies in the areas of Markov decision process, wavelet analysis, 802.11 protocol analysis, and traffic modeling, as well as computer simulation and testbed experiments, with the advantages of providing various training projects to undergraduate and graduate students with different interests. On the industry front, the success of this project will generate an intrusion detection framework for the VoIP over wireless networks with the advantages of robust detection performance, provable detection quality of service, and excellent extendibility for future intrusion detection techniques.

基于 IEEE 802.11 的无线网络上的 IP 语音 (VoIP) 带来了一个前景光明的全 IP 平台，可以随时随地为移动用户提供经济的高质量语音服务。由于无线 VoIP 所涉及协议的开放性和分布式特性，恶意用户很容易通过偏离正常协议行为来获取自己的利益或破坏服务。该项目开发了一个实时入侵检测框架，无需修改相关标准协议。还开发了分析工具来指导检测系统设计以保证性能。这项研究预计将通过三个互补的途径，显着推进基于 802.11 的无线网络上的 VoIP 实时入侵检测的最新技术： 802.11 协议、会话发起协议 (SIP) 层攻击和检测，以及跨层入侵检测框架的开发。在教育方面，所提出的跨学科研究无缝整合了马尔可夫决策过程、小波分析、802.11协议分析、流量建模等领域的理论研究以及计算机模拟和测试台实验，具有为学生提供各种培训项目的优势。兴趣不同的本科生和研究生。在行业方面，该项目的成功将为无线网络VoIP产生一个入侵检测框架，具有强大的检测性能、可证明的检测服务质量以及未来入侵检测技术的良好可扩展性等优点。