Enhancing security using mobility-based anomaly detection in cellular mobile networks

Location information is an important feature in users' profiles in cellular mobile networks. In this paper, by exploiting the location history traversed by a mobile user, two domain-independent online anomaly detection schemes are designed, namely the Lempel-Ziv (LZ)-based and Markov-based detection schemes. The authors focus on the identification of a group of especially harmful internal attackers-masqueraders. For both schemes, cell IDs traversed by each mobile user are extracted as the feature value. Specifically, the mobility pattern of each user is characterized by a high-order Markov model. The LZ-based detection scheme from the well-developed data compression techniques is derived. Moreover, the technique of exponentially weighted moving average is used to modify a user's normal profile dynamically. The user profile can characterize the normal behavior of each user accurately and is sensitive to abnormal changes. For the Markov-based detection scheme, a fixed-order Markov model is used to characterize the normal behavior. Based on the constructed probability transition matrix, the probability of the user's current activity is calculated. A threshold policy is then used in both schemes to determine whether a mobile device is potentially compromised or not. Simulation results are presented to show the effectiveness of the proposed schemes. Moreover, our results show that the LZ-based detection scheme performs better than the Markov-based detection scheme, especially for low-speed mobile users

• Publication year

  2006

• Venue

  IEEE Transactions on Vehicular Technology

• Publication date

  2006-07-01

• Fields of study

  Computer Science, Engineering

• Identifiers
  DOI 10.1109/TVT.2006.874579
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• The quest for personal control over mobile location privacy

  2004cited by this paper
• The predictive user mobility profile framework for wireless multimedia networks

  2004cited by this paper
• Applied Multivariate Statistical Analysis

  2003cited by this paper
• Evaluating location predictors with extensive Wi-Fi mobility data

  2003cited by this paper
• Location prediction algorithms for mobile wireless systems

  2003cited by this paper
• Potential Fraudulent Usage in Mobile Telecommunications Networks

  2002influential reference
• Mobility-based predictive call admission control and bandwidth reservation in wireless cellular networks

  2001cited by this paper
• A revised taxonomy for intrusion-detection systems

  2000cited by this paper
• LeZi-update: an information-theoretic approach to track mobile users in PCS networks

  1999cited by this paper
• How to increase security in mobile networks by anomaly detection

  1998cited by this paper
• Live Traffic Analysis of TCP/IP Gateways

  1998cited by this paper
• IDAMN: An Intrusion Detection Architecture for Mobile Networks

  1997cited by this paper
• A PATTERN MATCHING MODEL FOR MISUSE INTRUSION DETECTION

  1994cited by this paper
• USTAT: a real-time intrusion detection system for UNIX

  1993cited by this paper
• A neural network component for an intrusion detection system

  1992cited by this paper
• Optimal prefetching via data compression

  1991cited by this paper
• Text Compression

  1990influential reference
• An Intrusion-Detection Model

  1986cited by this paper
• Data Compression Using Adaptive Coding and Partial String Matching

  1984cited by this paper
• Compression of individual sequences via variable-rate coding

  1978influential reference
• A universal algorithm for sequential data compression

  1977cited by this paper
• The Quest for Personal Control over Mobile Location Privacy

  year unknowncited by this paper

• A Machine Learning-Based Efficient Anomaly Detection System for Enhanced Security in Compromised and Maligned IoT Networks

  2025cites this paper
• Exploring the role of behavioral analytics and anomaly detection in securing mobile networks for critical infrastructure

  2025influential citation
• Region-specific reliable channel estimation in RIS-enabled wireless communications via clustered federated learning

  2025cites this paper
• NASA space station rolling bearings anomaly detection based on PARA-LSTM model

  2024cites this paper
• Research on Anomaly Detection in Time Series: Exploring United States Exports and Imports Using Long Short-Term Memory

  2023cites this paper
• A Machine Learning-Driven Analysis of Phantom E911 Calls

  2022cites this paper
• Edge Intelligence (EI)-Enabled HTTP Anomaly Detection Framework for the Internet of Things (IoT)

  2021cites this paper
• Cross Layer Design and Optimization Techniques for IoT Module

  2021cites this paper
• Rapid: Robust and Adaptive Detection of Distributed Denial-of-Service Traffic from the Internet of Things

  2020cites this paper
• Anomaly Detection for Individual Sequences with Applications in Identifying Malicious Tools

  2020cites this paper
• An Efficient Classification Model for Analyzing Skewed Data to Detect Frauds in the Financial Sector. (Un modèle de classification efficace pour l'analyse des données déséquilibrées pour détecter les fraudes dans le secteur financier)

  2019cites this paper
• Machine Learning Applications for Anomaly Detection

  2019cites this paper
• User Activity Analysis Driven Anomaly Detection in Cellular Network

  2018cites this paper
• A novel host intrusion detection system using neural network

  2018cites this paper
• Continuous Trajectory Pattern Mining for Mobility Behaviour Change Detection

  2018cites this paper
• Masquerade Detection on Mobile Devices

  2018cites this paper
• Inference of Compromised Synchrophasor Units Within Substation Control Networks

  2018cites this paper
• Procedure Candidate Selection { Step 1 : For each test instance

  2017cites this paper
• A survey of intrusion detection systems in smart grid

  2017cites this paper
• Fraud Analysis Approaches in the Age of Big Data - A Review of State of the Art

  2017cites this paper
• Behavioural Profiling Authentication Based on Trajectory Based Anomaly Detection Model of User's Mobility

  2017cites this paper
• Anomaly detection to evaluate in-class learning process using distance and density approach of machine learning

  2017cites this paper
• Fraud Data Analytics Tools and Techniques in Big Data Era

  2017cites this paper
• A hybrid PSO-SVM model for network intrusion detection

  2016cites this paper
• Fraud detection system: A survey

  2016influential citation
• Software-Defined Networking (SDN) and Distributed Denial of Service (DDoS) Attacks in Cloud Computing Environments: A Survey, Some Research Issues, and Challenges

  2016cites this paper
• A Comprehensive Study of Recent Advancements in Methods and Tools for Network Anomaly Detection

  2016cites this paper
• Security tests and attack experimentations of ProtoGENI

  2015cites this paper
• Detecting Anomalies in Mobile Telecommunication Networks Using a Graph Based Approach

  2015cites this paper
• Cloud based intrusion detection architecture for smartphones

  2015cites this paper
• Mobile Active Authentication via Linguistic Modalities

  2015cites this paper
• Entropy-Based Privacy against Profiling of User Mobility

  2015cites this paper
• Reliability-based updating strategies of cyber infrastructures

  2015cites this paper
• Community detection in social network using shuffled frog-leaping optimisation

  2015cites this paper
• Cooperative Spectrum Sensing with Trust Assistance for Cognitive Radio Vehicular Ad hoc Networks

  2015cites this paper
• EAI Endorsed Transactions on Industrial Networks and Intelligent Systems

  2015cites this paper
• Anomalous Behavior Detection in Mobile Network

  2015cites this paper
• Integrated Anomaly Detection for cyber security of the substations

  2014cites this paper
• Accountability and Q-Accountable Logging in Wireless Networks

  2014cites this paper
• Network Anomaly Detection: Methods, Systems and Tools

  2014cites this paper
• Integrated Anomaly Detection for Cyber Security of the Substations

  2014cites this paper
• A Survey of Cross-Layer Designs in Wireless Networks

  2014cites this paper
• GlobalView: building global view with log files in a distributed/networked system for accountability

  2014cites this paper
• Spatio-temporal patterns link your digital identities

  2014influential citation
• Movement modeling in cellular networks - Markov Movement Model Creator Framework (MMCF)

  2013influential citation
• Game Theory for Network Security

  2013cites this paper
• Anomaly-based intrusion detection and prevention systems for mobile devices: Design and development

  2013cites this paper
• A survey of security visualization for computer network logs

  2012cites this paper
• Accountability using flow-net: design, implementation, and performance evaluation

  2012cites this paper
• Efficient location aware intrusion detection to protect mobile devices

  2012cites this paper
• General mobility modeling and location prediction based on markovian approach constructor framework

  2011cites this paper
• Protecting Private Data on Mobile Systems based on Spatio-temporal Analysis

  2011cites this paper
• Privacy analysis of user association logs in a large-scale wireless LAN

  2011cites this paper
• SECURITY SOLUTIONS BY DETECTING FRAUDULENT USAGE IN WIRELESS NETWORKS

  2011influential citation
• User dependent cryptography for security in future mobile telecommunication systems

  2011influential citation
• A framework for defending embedded systems against software attacks

  2011cites this paper
• BANBAD: A centralized anomaly detection technique for ad hoc networks

  2011cites this paper
• Large-scale Wireless Local-area Network Measurement and Privacy Analysis

  2011cites this paper
• Implementation and evaluation of accountability using flow-net in wireless networks

  2010cites this paper
• Efficient Intrusion Detection for Mobile Devices Using Spatio-temporal Mobility Patterns

  2010cites this paper
• Notice of RetractionBuilding global view with log files in a distributed/network system

  2010influential citation
• Mobi-watchdog: you can steal, but you can't run!

  2009influential citation
• BANBAD - A Centralized Belief-Networks-Based Anomaly Detection Algorithm for MANETs

  2009cites this paper
• Wireless Network Security

  2009influential citation
• SMS-Watchdog: Profiling Social Behaviors of SMS Users for Anomaly Detection

  2009cites this paper
• Flow-net methodology for accountability in wireless networks

  2009cites this paper
• Anomaly Detection Techniques for Ad Hoc Networks.

  2009cites this paper
• Anomaly Detection on Mobile Phone Based Operational Behavior

  2008cites this paper
• Mobility-Pattern-Based Anomaly Detection Algorithm in Mobile Networks

  2008cites this paper
• An application of supervised and unsupervised learning approaches to telecommunications fraud detection

  2008cites this paper
• Secure Communication Framework for Mobile Devices

  2008cites this paper
• HIDMN: A Host and Network-Based Intrusion Detection for Mobile Networks

  2008cites this paper
• Detection of Fraudulent Usage in Wireless Networks

  2007cites this paper
• Intrusion Detection in Cellular Mobile Networks

  2007cites this paper
• A framework for behavior-based detection of user substitution in a mobile context

  2007cites this paper
• EWIDS: Uma Extensão para Arquiteturas de Sistemas de Detecção de Intrusos para Redes Sem Fio Metropolitanas

  2006cites this paper
• Design and evaluation of a rough set-based anomaly detection scheme considering weighted feature values

  2006cites this paper
• Enhancing Security using Mobility Profile for Cellular Mobile Networks

  2006cites this paper
• Detection of rogue devices in wireless networks

  2006cites this paper
• Global Mobile Data Traffic Prediction and Anomaly Detection in Cellular Network

  year unknowncites this paper
• LSTM based Anomaly Detection in Time Series for United States exports and imports

  year unknowncites this paper
• Masquerader Detection in Mobile Context Based on Behaviour and Environment Monitoring Based on Behaviour and Environment Monitoring Masquerader Detection in Mobile Context Masquerader Detection in Mobile Context Based on Behaviour and Environment Monitoring Jyväskylä Studies in Computing 74 Masquera

  year unknowncites this paper