E-commerce security requirement analysis and intrusion detection deployment in ad hoc networks

Abstract

This study focus on e-commerce security requirement analysis for system evaluation, intrusion detection deployment in mobile ad hoc networks, and educational requirement analysis for e-commerce security. In e-commerce environment, security should be considered as an essential factor for success. In this thesis, we present a security evaluation model for e-commerce system, and it is focused on the practical usage, not theoretical contribution, in the field of e-commerce security. To create necessary security requirements, we mainly investigate the previous researches related to the e-commerce, and also inquire the professionals whether there are more necessary security requirements not covered from the researches. For the systematic organization of the requirements, we estimate the relative importance of each requirement using the Delphi and Analytic Hierarchical Process (AHP) method. Another issue concerned for this thesis is a deployment of intrusion detection system (IDS) in mobile ad hoc networks. The rapid change of mobile ad hoc networks and mobile computing application has occurred recently. Unlike fixed wired networks, the mobile ad hoc networks have some differences that mobile nodes have limited bandwidth, battery power, and dynamic change of ad-hoc network situations. These differences cause the mobile ad hoc networks to be vulnerable to additional threats that do not exist in a fixed wired network. Therefore, security problem is an important issue for mobile ad hoc networks. In this thesis, we propose a monitoring node selection scheme for intrusion detection in mobile ad hoc networks. Network survivability is an important issue in a mobile ad hoc network and proposed scheme considers the remaining battery power of each node in selecting monitoring nodes to extend its lifetime. The simulation results show that proposed scheme can actually extend the lifetime of the whole network while providing a required level of intrusion detection in ad hoc ...