返回
IDERES: Intrusion detection and response system using machine learning and attack graphs
DOI:10.1016/j.sysarc.2022.102722.png)
摘要
En 中文
The rapid increase in the use of IoT devices brings many benefits to the digital society, ranging from improved efficiency to higher productivity. However, the limited resources and the open nature of these devices make them vulnerable to various cyber threats. This paper explores the potential of using network profiling, machine learning, and game theory, to secure IoT against cyber-attacks. The proposed anomaly-based intrusion detection solution dynamically and actively profiles and monitors all networked devices for the detection of IoT device tampering attempts as well as suspicious network transactions. Any deviation from the defined profile is considered to be an attack and is subject to further analysis. Raw traffic is also passed on to the machine learning classifier for identification of potential attacks. To complement this solution, an intrusion response system is used to act upon the generated alerts and compute the mitigation actions at real-time. Performance assessment of the proposed methodology is conducted on the Cyber-Trust testbed using normal and malicious network traffic. The experimental results show that the proposed anomaly detection system delivers promising results with an overall accuracy of 98.35% and 0.98% of false-positive alarms, resulting in the mitigation of the majority of the executed attacks.
Keyword:
Machine learning
Intrusion detection
Intrusion response
Security
Internet of Things
期刊
IF:
4.1
论文数:
3.0K
被引数:
4.2K
机构
引用论文
Sequential Model Based Intrusion Detection System for IoT Servers Using Deep Learning Methods基于深度学习方法的物联网服务器入侵检测系统
SENSORS
IF3.5
Anomaly-based intrusion detection system for IoT networks through deep learning model基于深度学习模型的物联网网络异常入侵检测系统
Design and Development of a Deep Learning-Based Model for Anomaly Detection in IoT Networks基于深度学习的物联网网络异常检测模型的设计与开发
IEEE ACCESS
IF3.6

