A Filter Model Based on Hidden Generalized Mixture Transition Distribution Model for Intrusion Detection System in Vehicle Ad Hoc Networks

Abstract

Vehicle ad hoc networks (VANETs) are considered to be the next big thing that will remarkably change our lives, since this kind of technology is able to make our lives and roads safer. Due to the very fast move and high dynamic in VANETs, it is important to quickly ascertain the reliability of information. Although intrusion detection system (IDS) has been proposed as a reliable approach to protect VANETs against attacks, its overhead is serious, which spends too much time on detection, especially when the number of vehicles increases. Thus, in this paper, we propose a novel filter model based on a hidden generalized mixture transition distribution model (HgMTD) in VANETs, called FM-HgMTD, which can quickly filter the messages from neighboring vehicles so as to reduce the overhead and detection time. It adopts a well-known multi-objective optimization (NSGA-II) algorithm combined with an expectation-maximization (EM) algorithm to forecast the future states of neighboring vehicles and then to filter out malicious messages, by monitoring the change of the state pattern of each neighboring vehicle. In addition, a timeliness method is used to maintain the accuracy of the forecast. The experiments show that IDS with the proposed FM-HgMTD has better performance than other available IDSs in terms of detection rate, detection time, and overhead.