Plenary Lecture
A Blockchain Architecture for Data Security Enhancement in Cooperative Intrusion Detection System (BACOIDS)
Professor Tarek Saadawi
City University of New York
USA
Email: saadawi@ccny.cuny.edu
Abstract: The single vantage point of the intrusion detection system (IDS) limits its ability to detect distributed or coordinated cyberattacks. Due to this reason, some attacks can go undetected. To combat this, there is a need to exchange attack features among IDS nodes. Also, a zero-day attack (an attack without a known signature) experienced at different locations or organizations are not the same. If these attack characteristics can be exchanged, more attack threats can be stopped by the collaborative efforts of the participating nodes. The cooperative intrusion detection system was proposed to share attack features. The detection system was adopted because it enhances the reaction of IDS nodes to unknown attacks, however, the security of data being shared becomes a great concern. More specifically, detecting/preventing malicious activities such as fake feature injection, features manipulation, and deletion becomes the main concern. In this paper, we propose BACOIDS which is a permissionless public-private blockchain-based solution that detects and prevents malicious activities and solve data consistency problems facing cooperative intrusion detection. The result of performance evaluation shows that the architecture is resistant to malicious data injection, manipulation or deletion and it is robust to network growth with reducing response time.
Brief Biography of the Speaker: Dr Saadawi is Professor and Director of the Center of Infomration Networking & Telecommunicaqtions, City University of New York, City College (CUNY/CCNY). He is current research interests are intersion detection systemes and cyber security. URL: http://foreignpolicyconcepts.com/tarek-saadawi-on-internet-infrastructure-security/