@conference {
	title = {Intrusion Detection System Resiliency to Byzantine Attacks: The Case Study of Wormholes in OLSR},
	author = {Baras, John S., Radosavac, Svetlana., Theodorakopoulos, George., Sterne, Dan., Budulas, Peter., Gopaul, Richard.},
	year = {2007},
	month = {10/2007},
	abstract = {In this paper, we extend the work presented in [1] by quantifying the effects of in-band wormhole attacks on Intrusion Detection Systems. More specifically, we propose a mathematical framework for obtaining performance bounds of Byzantine attackers and the Intrusion Detection System (IDS) in terms of detection delay. We formulate the problem of distributed collaborative defense against coordinated attacks in MANET as a dynamic game problem. In our formulation, we have on the one hand a group of attackers that observe what is going on in the network and coordinate their attack in an adaptive manner. On the other side, we have a group of defending nodes (the IDS nodes) that collaboratively observe the network and coordinate their actions against the attackers. Using extensions of the game theoretic framework of [2] we provide a mathematical framework for efficient identification of the worst attacks and damages that the attackers can achieve, as well as the best response of the defenders. This approach leads to quantifying resiliency of the routing-attack IDS with respect to Byzantine attacks.},
	address = {Orlando, FL},
	booktitle = {2007 Military Communication Conference},
	pages = {pp. 1-7}
}
@conference {
	title = {Performance Comparison of Detection Schemes for MAC Layer Misbehavior},
	author = {Cardenas, Alvaro A., Radosavac, Svetlana., Baras, John S.},
	year = {2007},
	month = {05/2007},
	abstract = {This paper revisits the problem of detecting greedy behavior in the IEEE 802.11 MAC protocol by evaluating the performance of two previously proposed schemes: DOMINO and the Sequential Probability Ratio Test (SPRT). The evaluation is carried out in four steps. We first derive a new analytical formulation of the SPRT that takes into account the discrete nature of the problem. Then we develop a new tractable analytical model for DOMINO. As a third step, we evaluate the theoretical performance of SPRT and DOMINO with newly introduced metrics that take into account the repeated nature of the tests. This theoretical comparison provides two major insights into the problem: it confirms the optimality of SPRT and motivates us to define yet another test, a nonparametric CUSUM statistic that shares the same intuition as DOMINO but gives better performance.We finalize the paper with experimental results, confirming our theoretical analysis and validating the introduction of the new nonparametric CUSUM statistic.},
	address = {Anchorage, Alaska},
	booktitle = {Proceedings of the 26th Annual IEEE Conference on Computer Communications (Infocom)},
	pages = {pp. 1496-1504}
}
@conference {
	title = {Detecting IEEE 802.11 MAC Layer Misbehavior in Ad Hoc Networks},
	author = {Radosavac, Svetlana., Cardenas, Alvaro A., Baras, John S., Moustakides, George V.},
	year = {2007},
	month = {01/2007},
	abstract = {Selfish behavior at the Medium Access (MAC) Layer can have devastating side effects on the performance of wireless networks, with effects similar to those of Denial of Service (DoS) attacks. In this paper we consider the problem of detection and prevention of node misbehavior at the MAC layer, focusing on the back-off manipulation by selfish nodes. We first propose an algorithm that ensures honest behavior of non-colluding participants. Furthermore, we analyze the problem of colluding selfish nodes, casting the problem within a minimax robust detection framework and providing an optimal detection rule for the worst-case attack scenarios. Finally, we evaluate the performance of single and colluding attackers in terms of detection delay. Although our approach is general and can be used with any probabilistic distributed MAC protocol, we focus our analysis on the IEEE 802.11 MAC.},
	booktitle = {Robust Strategies Against Individual and Colluding Attacker\&quot; Journal of Computer Security: Special Issue on Security of Ad Hoc and Sensor Networks},
	pages = {pp. 103-128}
}
