Borges, Pedro, Sousa, Bruno, Ferreira, Luis, Saghezchi, Firooz B., Mantas, Georgios ORCID: 0000-0002-8074-0417, Ribeiro, Jose, Rodriguez, Jonathan, Cordeiro, Luis and Simoes, Paulo (2017) Towards a hybrid intrusion detection system for android-based PPDR terminals. In: 2017 IFIP/IEEE Symposium on Integrated Network and Service Management (IM). IEEE, pp. 1034-1039. ISBN 978-1509056583 (doi:https://doi.org/10.23919/INM.2017.7987434)

Full text not available from this repository. (Request a copy)

Abstract

Mobile devices are used for communication and for tasks that are sensitive and subject to tampering. Indeed, attacks can be performed on the users' devices without user awareness, this represents additional risk in mission critical scenarios, such as Public Protection and Disaster Relief (PPDR). Intrusion Detection Systems are important for scenarios where information leakage is of crucial importance, since they allow to detect possible attacks to information assets (e.g., installation of malware), or can even compromise the security of PPDR personnel. HyIDS is an Hybrid IDS for Android and supporting the stringent security requirements of PPDR, by comprising agents that continuously monitor mobile device and periodically transmit the data to an analysis framework at the Command Control Center (CCC). The data collection retrieves resource usage metrics for each installed application such as CPU, memory usage, and incoming and outgoing network traffic. At the CCC, the HyIDS employs Machine Learning techniques to identify patterns that are consistent with malware signatures based on the data collected from the applications. The HyIDS's evaluation results demonstrate that the proposed solution has low impact on the mobile device in terms of battery consumption and CPU/memory usage.

Item Type:	Conference Proceedings
Title of Proceedings:	2017 IFIP/IEEE Symposium on Integrated Network and Service Management (IM)
Uncontrolled Keywords:	hybrid intrusion detection system, android-based PPDR terminals, mobile devices, public protection and disaster relief, machine learning techniques, malware signatures
Subjects:	T Technology > TA Engineering (General). Civil engineering (General)
Faculty / School / Research Centre / Research Group:	Faculty of Engineering & Science Faculty of Engineering & Science > School of Engineering (ENG)
Last Modified:	02 Nov 2020 13:40
URI:	http://gala.gre.ac.uk/id/eprint/27763

Actions (login required)

View Item