IEEE Consumer Electronics Magazine - November/December 2022 - 88

Security, Trust and Privacy Solutions for Intelligent Internet of Vehicular Things
energy.13 In this cluster-based IDS approach, the
cluster heads (CHs) for every cluster are
appointed, and the responsibility for that cluster
is taken entirely by the CH.
In the article by Arunkumar and Annalakshmi,14
four different IDS architectures were discussed,
namely stand-alone, cooperative, distributed IDS,
and, finally, the one we are most concerned with,
hierarchical IDS. Since there is a dearth of cooperation
among the various types of IDS designed for ad
hoc networks, to resolve this, an alternate scheme
has been put forward for intrusion detectionwhere
a network is divided into a number of groups
known as clusters where every cluster is assigned
one CH that is aided by a cooperative algorithm
that organizes the nodes.
Misuse and Signature-Based IDS
In the article by Bimeyer,15 the authors proposed
signature-based IDS for verifying data from
moving vehicles using the plausibility model. With
this approach, an individual vehicle withmalicious
intent can be recognized even when it simulates
authenticmovement. The V2X Simulation Runtime
Infrastructure (VSimRTI) was used to run a simulation
that modeled the proposed IDS so it could be
evaluated. Not only was this IDS able to detect
attacks, but the authors developed a trust model
that can be used to recognize the attacker's vehicle,
after recognition a report is created and a flag
on that vehicle is set, providing useful information
to higher layer applications.
Challenges and Limitations of IDS
Deployment in VANETs and IoV
IDS deployment in either VANETs or the IoV is
different andmore challenging than its deployment
in traditional networks. This is due to some inherent
features of VANETs and the IoV that make it different
from traditional networks. The vehicles in
VANETs,which are nodes of the network, are highly
mobile and dynamic. They constantly change their
locations and move large distances in a fraction of
a second making it difficult for existing traditional
IDS schemes to detect and track potential attackers.
Also, along with their dynamic nature, the
nodes in VANETs and the IoV are not as resourcerich
as the nodes in traditional networks. Although
the nodes in VANETs and the IoV are usually
88
equipped with resources like storage, bandwidth,
and computational capabilities, these resources
cannot be compared with those available from traditional
fixed network nodes. So, the computationally
expensive IDS detection schemes cannot be
used in VANETs and the IoV. The use of such
schemes in VANETs and the IoV will drain the
resources of the VANET, potentially causing the
whole network to collapse and making it more
prone to various resource exhaustion attacks. Also,
the use of a computationally expensive IDS would
introduce unnecessary delay in the dissemination
of information, and any delay is catastrophic in networks
like aVANET, where even a small delay could
cost lives and lead to the collapse of the whole network.
So, before the deployment of an IDS in such
networks, the developers must keep the resourceconstrained
nodes in mind. An IDS scheme for
VANETs and the IoV needs to be lightweight in
terms of its resources required yet powerful in
terms of its detection capability. Only then can the
use of an IDS scheme be thought of as fruitful for
VANETs and the IoV.
Proposed Honeypot Based Proactive
IDS for VANET
To cope with the disadvantages and challenges
associated with existing IDS approaches
for VANETs, as mentioned in " Challenges and
Limitations of IDS Deployment in VANETs and IoV "
section, and based on the use of honeypots in
existing traditional networks, as shown in Table 1,
we propose a honeypot-based IDS (HPIDS) for the
enhancement of VANETs security. The concept
behind our HPIDS is shown in Figure 2.
From the literature survey conducted, there is
great potential to investigate a HPIDS to be used in
VANETs. Very little research has been done on the
useof HPIDS solutions todetect threats inVANETs,
while honeypots have already shown their value in
traditional networks. In various similar networks
like Artificial Intelligence of Things,16 which are
highly prone to security threats, honeypots-based
security frameworks are already been used for
enhancing the security of the whole network.
Therefore, keeping in mind the security
measures needed to cope with the various existing
challenges faced by VANET-based security
frameworks, a HPIDS for VANETs and the IoV is
proposed in this article.
IEEE Consumer Electronics Magazine
IEEE Consumer Electronics Magazine - November/December 2022

Table of Contents for the Digital Edition of IEEE Consumer Electronics Magazine - November/December 2022
