Edge-HetIoT defense against DDoS attack using learning techniques

Shalaka S. Mahadik

doi:10.1016/j.cose.2023.103347

2023-09-01

Shalaka S. Mahadik

Pranav M. Pawar *

Raja Muthalagu

DOI：10.1016/j.cose.2023.103347

原文链接

查看原文

摘要

En 中文

The heterogeneous nature of the internet-of-thing (IoT) is gaining popularity and, simultaneously, faces rising security issues. The distributed denial of service (DDoS) attack is the most significant security threat addressed in the research. The research proposes edge-heterogeneous IoT (HetIoT) centric defense IDS that aids the HetIoT infrastructure in detecting and blocking victim traffic near the network edge. The Edge-HetIoT defense IDS helps to address significant issues such as performance and security due to proximity to the local network. The research focuses on six learning techniques, including five ma-chine learning (ML) classifiers, namely, ID3, NB, RF, LR, and AdaBoost, and the proposed deep learning (DL)-based hybrid model (i.e., CNN+LSTM). These learning techniques are trained and tested using the real-time benchmark-dataset CICDDoS2019 and consider binary and multiclass (14 classes) classification. The performance is analyzed and evaluated against six classifiers to determine which classification model performs best in detecting and classifying various DDoS attacks. The proposed DL-based hybrid model outperforms when compared against ID3, NB, RF, LR, and AdaBoost. The proposed DL-based hybrid model successfully detects and classifies MSSQL, NetBIOS, TFTP, NTP, Syn, and Portmap attacks with 100% pre-cision, recall, and f1-score. The overall weighted average precision, recall, and f1-score for the proposed DL-based hybrid model are 92%, 89%, and 90%, respectively. & COPY; 2023 Elsevier Ltd. All rights reserved.

Keyword:

Heterogeneous Internet-of-Things

Edge computing

Machine learning (ML)

Deep learning (DL)

CNN and LSTM

DDoS attack

Hybrid