An Architecture for Blockchain-based Collaborative Signature-based Intrusion Detection System

<p>Collaborative intrusion detection system (CIDS), where IDS hosts work with each other and share resources, have been proposed to cope with the increasingly sophisticated cyberattacks. Despite the promising benefits such as expanded signature databases and alert data from multiple sites, trust management and consensus building remain as challenges for a CIDS to work effectively. The blockchain technology with built-in immutability and consensus building capability provides a viable solution to the issues of CIDS. In this paper, we introduce an architecture for a blockchain-enabled signature-based collaborative IDS, discuss the implementation strategy of the proposed architecture and developed a prototype using Hyperledger and Snort. Our preliminary evaluation on a bench mark showed the proposed architecture offers a solution by addressing the issues of trust, data sharing and insider attacks in the network environment of CIDSs. The implications and limitations of this study are also discussed.</p>

Name thesis:degree_name

Master of Science in Information Technology (MSIT)

Level thesis:degree_level

Thesis

Discipline thesis:degree_discipline

Information Technology

Year dc:date.available

2019

Author dc:creator

• Laufenberg, Daniel

Contributors dc:contributor

• Dr. Lei Li
• Dr. Hossain Shahriar
• Dr. Meng Han

• blockchain security intrusion detection systems IDS architecture
• Databases and Information Systems
• Information Security
• Systems Architecture

Repository record dc:identifier

https://digitalcommons.kennesaw.edu/msit_etd/5

OAI identifier oai:identifier

oai:digitalcommons.kennesaw.edu:msit_etd-1006