AI-Assisted Enhanced Composite Metric-Based Intrusion Detection System for Secured Cyber Internet Security for Next-Generation Wireless Networks

被引:0
作者
Samha, Amani K. [1 ]
Alshammri, Ghalib H. [2 ]
Attuluri, Sasidhar [3 ]
Suman, Preetam [4 ]
Yadav, Arvind [5 ]
机构
[1] King Saud Univ, Coll Business Adm, Management Informat Syst Dept, Riyadh 28095, Saudi Arabia
[2] King Saud Univ, Community Coll, Dept Comp Sci, Riyadh 11437, Saudi Arabia
[3] Savin Technol Inc, 9901 Valley Ranch Pkwy E, Irving, TX 75063 USA
[4] VIT Bhopal Univ, Sch Comp Sci & Engn, CSE Core, Bhopal Indore Highway, Sehore 466114, Madhya Pradesh, India
[5] SRM Univ, Dept Comp Sci & Engn, Delhi NCR, Sonepat 131029, India
关键词
Next-generation wireless networks; machine learning; intrusion detection system; cloud; intrusion detection; flooding assaults;
D O I
10.1142/S0218843024500035
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
The prevalence of distributed denial of service (DDoS) flooding assaults is one of the most serious risks to cloud computing security. These types of assaults have as their primary objective the exhaustion of the system's available resources, that is, the target of the attack, in order to make the system in question unavailable to authorized users. Internet thieves often conduct flooding assaults of the kind known as DDoS, focusing primarily on the application and network levels. When the computer infrastructure is multi-mesh-geo distributed, includes multi-parallel services, and a high number of domains, it may be difficult to detect assaults. This is particularly true when a substantial number of domains are present. When there are a big number of independent administrative users using the services, the situation gets more complicated. The purpose of this body of research is to identify signs that may be utilized to detect DDoS flooding assaults; this is its main objective. As a result, throughout the course of our study, we established a composite metric that considers application, system, network, and infrastructure elements as possible indicators of the incidence of DDoS assaults. According to our research, DDoS assaults may be triggered by a combination of variables. Investigations of simulated traffic are being conducted in the cloud. High traffic may be the result of flooding assaults. The composite metric-based intrusion detection system will be the name of a one-of-a-kind intrusion detection system (IDS) that has been agreed upon ICMIDS. This system will use K-Means clustering and the Genetic Algorithm (GA) to detect whether an effort has been made to flood the cloud environment. CMIDS employs a multi-threshold algorithmic strategy in order to identify malicious traffic occurring on a cloud-based network. Cisco has created this technology. This strategy necessitates a comprehensive investigation of all factors, which is crucial for assuring the continuation of cloud-based computing-based activities. This monitoring system involves the development, administration, and storage of a profile database, denoted as Profile DB. This database is used for recording and using the composite metric for each virtual machine. The results of a series of tests are compared to the ISCX benchmark dataset and statistical settings. The results indicate that ICMIDS has a reasonably high detection rate and the lowest false alarm rate in the majority of situations examined during the series of tests done to validate and verify its efficacy. This was shown by the fact that ICMIDS had the lowest false alarm rate among all examined conditions.
引用
收藏
页数:38
相关论文
共 40 条
  • [1] Ahanger Tariq Ahamed, 2021, Computer Networks and Inventive Communication Technologies. Proceedings of Third ICCNCT 2020. Lecture Notes on Data Engineering and Communications Technologies (LNDECT 58), P1147, DOI 10.1007/978-981-15-9647-6_91
  • [2] Ahirwar D., 2015, inNext Generation WirelessNetwork Security and Privacy, P313, DOI [10.4018/978-1-4666-8687-8.ch011, DOI 10.4018/978-1-4666-8687-8.CH011.17.C]
  • [3] Applying machine learning enabled myriad fragment empirical modes in 5G communications to detect profile injection attacks
    Alzaidi, Mohammed S. S.
    Shukla, Piyush Kumar
    Sangeetha, V.
    Pandagre, Karuna Nidhi
    Minchula, Vinodh Kumar
    Sharma, Sachin
    Khan, Arfat Ahmad
    Prashanth, V.
    [J]. WIRELESS NETWORKS, 2024, 30 (06) : 5533 - 5546
  • [4] Antwi O. A., 2020, 2019 INT C MECHATRON, P1, DOI [10.1109/ICMRSISIIT46373.2020.9405851, DOI 10.1109/ICMRSISIIT46373.2020.9405851]
  • [5] SEHIDS: Self Evolving Host-Based Intrusion Detection System for IoT Networks
    Baz, Mohammed
    [J]. SENSORS, 2022, 22 (17)
  • [6] Multi Adaptive Hybrid Networks (MAHNet): Ensemble Learning in Convolutional Neural Network
    Cakar, Mahmut
    Yildiz, Kazim
    Genc, Yakup
    [J]. 2021 IEEE ASIA-PACIFIC CONFERENCE ON COMPUTER SCIENCE AND DATA ENGINEERING (CSDE), 2021,
  • [7] Xception: Deep Learning with Depthwise Separable Convolutions
    Chollet, Francois
    [J]. 30TH IEEE CONFERENCE ON COMPUTER VISION AND PATTERN RECOGNITION (CVPR 2017), 2017, : 1800 - 1807
  • [8] Detection of DDoS attacks with feed forward based deep neural network model
    Cil, Abdullah Emir
    Yildiz, Kazim
    Buldu, Ali
    [J]. EXPERT SYSTEMS WITH APPLICATIONS, 2021, 169
  • [9] Dahl GE, 2013, INT CONF ACOUST SPEE, P8609, DOI 10.1109/ICASSP.2013.6639346
  • [10] Lightweight authentication scheme for massive MIMO on Internet of Things connectivity
    Dwivedi, Abhishek
    Agarwal, Ratish
    Shukla, Piyush Kumar
    [J]. PHYSICAL COMMUNICATION, 2023, 58