Shoaying Zou, Carleton University

TITLE: Anomaly-based Intrusion Detection Using Mobility Profiles of 
Wireless/Mobile Users

ABSTRACT:
It is clearly evident that the use of wireless devices and cell phones 
is becoming a computing platform of choice. While this trend had been 
forecasted some years ago, what is crucial today is the need for robust 
intrusion detection systems (IDS) in wireless and mobile networks.
Although numerous commercial anomaly-based detection systems are 
currently available, they all suffer from a high rate of false 
positives. This outstanding problem can be addressed, by comparing an 
observed event/behavior against multiple profiles, namely calling 
patterns, hardware characteristics of devices (e.g. hardware fingerprint 
of transceivers) and others, prior to rendering a decision.
This talkpresents an anomaly-based IDS based on user-mobility profiles. 
Preliminary simulation results confirm the technical feasibility of this 
approach. It is expected that the use of user-mobility profiles, in 
combination with other aforementioned profiles, could potentially reduce 
the rate of false positives.