A Security Supervision System for Hybrid Networks

Françoise Sailhan (1) , Julien Bourgeois (1) , Valérie Issarny (2)

1 FEMTO-ST - Franche-Comté Électronique Mécanique, Thermique et Optique - Sciences et Technologies (UMR 6174)
2 ARLES - Software architectures and distributed systems

The traditional way of protecting networks and applications with e.g., firewalls and encryption, is no longer sufficient to protect effectively emerging hybrid wired-cum-wireless networks including ad hoc networks. Intrusion detection mechanisms should be coupled with preventive measures so as to identify unauthorised abuses. To this end, we propose a novel Hybrid Distributed Security Operation Center (HDSOC) which collects logs that are generated by any application/service, layer of the protocol stack or resource (e.g., router), providing a global view of the supervised system based on which complex and distributed intrusions can be detected. Our HDSOC further (i) distributes its capabilities and (ii) provides extensive coordination capabilities for guarantying that both the networks and the HDSOC components do not constitute isolated entities largely unaware of each others.

Domaines: Informatique mobile; Informatique ubiquitaire

Françoise Sailhan, Julien Bourgeois, Valérie Issarny. A Security Supervision System for Hybrid Networks. R. Lee. Software Engineering, Artificial Intelligence, Networking and Parallel/Distributed Computing, Springer, pp.137-149, 2008. ⟨inria-00415144⟩