Honesty-rate measurement: A novel approach for the fragile trust inside the DIDS

Abstract

In this paper, a novel honesty-rate measuring based approach is proposed to improve the security and trust of distributed intrusion detection systems. All the cooperative nodes join the system with an initial value of 1 for an honesty rate. The honesty rate of a node dynamically varies depending on its status and the honesty rate will decrease when a suspicious behavior of the node is detected and increase when the node obeys certain criteria. The proposed approach compares the honesty rate of each node to eliminate or reduce the impact of harmful information from the malicious nodes, and then reduces the false positives and false negatives of the intrusion detection systems. The experiments and analyses of a representative case confirm the ability of the proposed approach to improve detection accuracy and detection capability. © 2011 Springer-Verlag Berlin Heidelberg.