Natália Réka Ivánkó

In an attempt to cope with the increased number of cyber-
attacks, research in Intrusion Detection Systems (IDSs) is moving to-
wards more collaborative mechanisms. Collaborative IDSs (CIDSs) are
such an approach; they combine the knowledge of a plethora of moni-
tors to generate a holistic picture of the monitored network. Despite the
research done in this field, CIDSs still face a number of fundamental chal-
lenges, especially regarding maintaining trust among the… Mehr anzeigen

In an attempt to cope with the increased number of cyber-
attacks, research in Intrusion Detection Systems (IDSs) is moving to-
wards more collaborative mechanisms. Collaborative IDSs (CIDSs) are
such an approach; they combine the knowledge of a plethora of moni-
tors to generate a holistic picture of the monitored network. Despite the
research done in this field, CIDSs still face a number of fundamental chal-
lenges, especially regarding maintaining trust among the collaborating
parties. Recent advances in distributed ledger technologies, e.g. various
implementations of blockchain protocols, are a good fit to the problem
of enhancing trust in collaborative environments. This paper touches the
intersection of CIDSs and blockchains. Particularly, it introduces the idea
of utilizing blockchain technologies as a mechanism for improving CIDSs.
We argue that certain properties of blockchains can be of significant ben-
efit for CIDSs; namely for the improvement of trust between monitors,
and for providing accountability and consensus. For this, we study the
related work and highlight the research gaps and challenges towards such
a task. Finally, we propose a generic architecture for the incorporation of
blockchains into the field of CIDSs and an analysis of the design decisions
that need to be made to implement such an architecture. Weniger anzeigen