TRIDEnT: Blockchain-based Collaborative Intrusion Detection

Master Thesis

Beschreibung
Cyber attacks are becoming increasingly sophisticated and coordinated. Isolated intrusion detection systems can sometimes not detect coordinated attacks in time. Therefore, collaboration between intrusion detection systems in needed, in the form of alert exchange. However, beneficial collaboration between mutually untrusted peers (some may be controlled by attackers already) is a problem of its own. To address this problem, we have introduced TRIDEnT (opens in new tab), a blockchain-based Collaborative Intrusion Detection System (CIDS).
This thesis involves continuing the development of TRIDEnT with theoretical and practical contributions. Prototypes will be built using Hyperledger Fabric and will be evaluated in simulated, as well as in real-world settings.

Motivation
Cyber attacks are becoming increasingly sophisticated and coordinated. Isolated intrusion detection systems can sometimes not detect coordinated attacks in time. Therefore, collaboration between intrusion detection systems in needed, in the form of alert exchange. However, beneficial collaboration between mutually untrusted peers (some may be controlled by attackers already) is a problem of its own. To address this problem, we have introduced TRIDEnT (opens in new tab), a blockchain-based Collaborative Intrusion Detection System (CIDS).

Start: 10.11.2017

Betreuer:

  • Nikolaos Alexopoulos (alexopoulos(a-t)tk.tu-darmstadt.de)
  • Emmanouil Vasilomanolakis (vasilomano(a-t)tk.tu-darmstadt.de)

Forschungsgebiete: CRISP, CROSSING, Telecooperation , – SPIN: Smart Protection in Infrastructures and Networks