2018 · 140 citations · 5 references
Smart DevicesEngineeringMachine LearningInformation SecurityIot SecurityInformation ForensicsIot SystemData ScienceData MiningSmart SystemsAdaptive Intrusion DetectionInternet Of Things SecurityIot ChallengeInternet Of ThingsDdos DetectionIntrusion Detection SystemComputer EngineeringComputer ScienceData SecurityIot Data AnalyticsEdge ComputingCloud ComputingIntrusion DetectionBotnet DetectionIot Forensics
The rapid growth of IoT devices introduces new security and privacy challenges, making them a target for cyber‑attacks and a weak link in secure infrastructures, as evidenced by botnet attacks such as Mirai. The study aims to develop an adaptive IDS, Pulse, dedicated to monitoring heterogeneous IoT ecosystems and detecting malicious activity. Pulse employs machine‑learning techniques to identify network scanning, probing, and simple DoS attacks. Initial results show Pulse can successfully detect network scanning, probing, and simple DoS attacks.
The number of diverse interconnected Internet of Things (IoT) devices keeps increasing exponentially, introducing new security and privacy challenges. These devices tend to become more pervasive than mobile phones and already have access to very sensitive personal information such as usernames, passwords, etc., making them a target for cyber-attacks. Given that smart devices are vulnerable to a variety of attacks, they can be considered to be the weakest link for breaking into a secure infrastructure. For instance, IoT devices have recently been employed as part of botnets, such as Mirai, and have launched several of the largest Distributed Denial of Service (DDoS) and spam attacks in history. As a result, there is a need to develop an Intrusion Detection System (IDS) dedicated to monitor IoT ecosystems, which will be able to adapt to this heterogeneous environment and detect malicious activity on the network. In this paper, we describe the initial stages of developing Pulse; a novel IDS for the IoT, which employs Machine Learning (ML) methodologies and is capable of successfully identifying network scanning probing and simple forms of Denial of Service (DoS) attacks.
5
Mark Hall, Eibe Frank, Geoffrey Holmes et al. · ACM SIGKDD Explorations Newsletter · 2009 · 17.8K citations
Sybil Attacks and Their Defenses in the Internet of Things
Kuan Zhang, Xiaohui Liang, Rongxing Lu et al. · IEEE Internet of Things Journal · 2014 · 399 citations