arrow
返回

IDERES: Intrusion detection and response system using machine learning and attack graphs

delete2022-10-01
delete18
PRE
AI
J
Joseph Rose
M
Matthew Swann
K
Konstantinos-Panagiotis Grammatikakis
I
Ioannis Koufos
G
Gueltoum Bendiab *
S
Stavros Shiaeles
N
Nicholas Kolokotronis
DOI:10.1016/j.sysarc.2022.102722delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
The rapid increase in the use of IoT devices brings many benefits to the digital society, ranging from improved efficiency to higher productivity. However, the limited resources and the open nature of these devices make them vulnerable to various cyber threats. This paper explores the potential of using network profiling, machine learning, and game theory, to secure IoT against cyber-attacks. The proposed anomaly-based intrusion detection solution dynamically and actively profiles and monitors all networked devices for the detection of IoT device tampering attempts as well as suspicious network transactions. Any deviation from the defined profile is considered to be an attack and is subject to further analysis. Raw traffic is also passed on to the machine learning classifier for identification of potential attacks. To complement this solution, an intrusion response system is used to act upon the generated alerts and compute the mitigation actions at real-time. Performance assessment of the proposed methodology is conducted on the Cyber-Trust testbed using normal and malicious network traffic. The experimental results show that the proposed anomaly detection system delivers promising results with an overall accuracy of 98.35% and 0.98% of false-positive alarms, resulting in the mitigation of the majority of the executed attacks.
Keyword:
Machine learning
Intrusion detection
Intrusion response
Security
Internet of Things

期刊

Journal of Systems Architecture 封面图
Journal of Systems Architecture
IF:
4.1
论文数:
3.0K
被引数:
4.2K

机构

U
University of Portsmouth
学者数:
5.1K
论文数: 5.5K
被引数: 9.2K
U
University of Peloponnese
学者数:
873
论文数: 764
被引数: 531
U
universite constantine
学者数:
986
论文数: 648
被引数: 0
学者 查看更多机构
引用论文

引用论文

Strontium-Induced Gelation of Sodium Alginate in the Presence of Carbon Nanotubes: Elemental Analysis and Gel Structure
err2023-07-12
err0
errOAAI
errOlga S. Zueva; Tahar Khair; Svetlana R. Derkach; Mariia A. Kazantseva; Yuriy F. Zuev
err分享
err收藏
Intrusion response systems: Foundations, design, and challenges
err2016-02-01
err82
PREAI
errInayat, Zakira; Gani, Abdullah; Anuar, Nor Badrul; Khan, Muhammad Khurram; Anwar, Shahid
err分享
err收藏
err分享
err收藏
学者 查看更多内容