The Research of Frame and Key Technologies for Intrusion Detection System in IEEE 802.11-based Wireless Mesh Networks

The architecture and characteristic of wireless mesh networks (WMN), as well as the significance of intrusion detection system (IDS) in its application were investigated. Based on the embedded analyzing of IDS technologies in ad hoc network and WLAN (wireless local area network), combined with the security requirements in WMN itself, it is concluded that both the architecture of distributed and cooperative IDS in ad hoc network and distributed IDS in WLAN can not be applied directly in WMN. A new architecture of asymmetric distributed and cooperative IDS for WMN based on the application of agent was proposed in the paper. This new architecture of IDS in WMN was then simulated by the attack detection of IEEE 802.11 MAC selfish behavior in NS2, using the IDS selfish behavior attack detection model ground on the judgment mechanism of double mode, which was also brought forward. The result of the simulation shows that the given new architecture of asymmetric distributed and cooperative IDS and the IDS selfish behavior attack detection model fitted WMN well.