Application of Situation assessment in WIDS

1
Application of Situation assessment in WIDS

• Håvard Hasli
• Supervised by
• Slobodan Petrovic

2
Introduction

• About my thesis
• Research questions
• Methods
• Results
• Conclusion

3
About Situation Assessment in WIDS

• Wireless Intrusion Detection System (WIDS)
• Combining information from several sources
• Handling missing values and priority of sources
• Create an overall assessment of the situation
• Present the assessment

4
Building blocks of a SA-system
5
Research Questions

• How can situation assessment be implemented in a
  wireless intrusion detection system (WIDS)?
• Can application of SA increase security in WIDS?

6
Making of the prototype

• Analysis of the proposed system
• Agent class
• Assessment class
• Presentation class

7
Results

• Prototype which can simulate agents
• Different priority of each source
• Tons of further work ?

8
Conclusion

• Yes, one can say that it is possible to implement
  SA in WIDS
• It can increase security, but this require action
  to be taken when an alert is detected

9
?? Questions ??