A Machine Learning Security Framework for Iot Systems

被引:94
作者
Bagaa, Miloud [1 ]
Taleb, Tarik [1 ,3 ,4 ]
Bernabe, Jorge Bernal [2 ]
Skarmeta, Antonio [2 ]
机构
[1] Aalto Univ, Sch Elect Engn, Dept Commun & Networking, Espoo 02150, Finland
[2] Univ Murcia, Dept Commun & Informat Engn, Murcia 30001, Spain
[3] Sejong Univ, Dept Comp & Informat Secur, Seoul 05006, South Korea
[4] Univ Oulu, Ctr Wireless Commun CWC, Oulu 90570, Finland
基金
欧盟地平线“2020”; 芬兰科学院;
关键词
Machine learning; Intrusion detection; Internet of Things; Computer security; Software; security; artificial intelligence; SDN; NFV; orchestration and MANO; INTRUSION DETECTION; INTERNET;
D O I
10.1109/ACCESS.2020.2996214
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Internet of Things security is attracting a growing attention from both academic and industry communities. Indeed, IoT devices are prone to various security attacks varying from Denial of Service (DoS) to network intrusion and data leakage. This paper presents a novel machine learning (ML) based security framework that automatically copes with the expanding security aspects related to IoT domain. This framework leverages both Software Defined Networking (SDN) and Network Function Virtualization (NFV) enablers for mitigating different threats. This AI framework combines monitoring agent and AI-based reaction agent that use ML-Models divided into network patterns analysis, along with anomaly-based intrusion detection in IoT systems. The framework exploits the supervised learning, distributed data mining system and neural network for achieving its goals. Experiments results demonstrate the efficiency of the proposed scheme. In particular, the distribution of the attacks using the data mining approach is highly successful in detecting the attacks with high performance and low cost. Regarding our anomaly-based intrusion detection system (IDS) for IoT, we have evaluated the experiment in a real Smart building scenario using one-class SVM. The detection accuracy of anomalies achieved 99.71%. A feasibility study is conducted to identify the current potential solutions to be adopted and to promote the research towards the open challenges.
引用
收藏
页码:114066 / 114077
页数:12
相关论文
共 49 条
[41]  
Tavallaee M, 2009, P 2009 IEEE S COMP I, P1, DOI [10.1109/CISDA.2009.5356528, DOI 10.1109/CISDA.2009.5356528]
[42]   A triangle area based nearest neighbors approach to intrusion detection [J].
Tsai, Chih-Fong ;
Lin, Chia-Ying .
PATTERN RECOGNITION, 2010, 43 (01) :222-229
[43]   Blockchain for Managing Heterogeneous Internet of Things: A Perspective Architecture [J].
Tseng, Lewis ;
Wong, Liwen ;
Otoum, Safa ;
Alopily, Moayad ;
Ben Othman, Lalel .
IEEE NETWORK, 2020, 34 (01) :16-23
[44]   Security as a Service Model for Cloud Environment [J].
Varadharajan, Vijay ;
Tupakula, Udaya .
IEEE TRANSACTIONS ON NETWORK AND SERVICE MANAGEMENT, 2014, 11 (01) :60-75
[45]   Convergence of Edge Computing and Deep Learning: A Comprehensive Survey [J].
Wang, Xiaofei ;
Han, Yiwen ;
Leung, Victor C. M. ;
Niyato, Dusit ;
Yan, Xueqiang ;
Chen, Xu .
IEEE COMMUNICATIONS SURVEYS AND TUTORIALS, 2020, 22 (02) :869-904
[46]   A Deep Learning Approach for Intrusion Detection Using Recurrent Neural Networks [J].
Yin, Chuanlong ;
Zhu, Yuefei ;
Fei, Jinlong ;
He, Xinzheng .
IEEE ACCESS, 2017, 5 :21954-21961
[47]   QoS enhancement with deep learning-based interference prediction in mobile IoT [J].
Zafar, Saniya ;
Jangsher, Sobia ;
Bouachir, Ouns ;
Aloqaily, Moayad ;
Ben Othman, Jalel .
COMPUTER COMMUNICATIONS, 2019, 148 :86-97
[48]   Virtual IoT HoneyNets to Mitigate Cyberattacks in SDN/NFV-Enabled IoT Networks [J].
Zarca, Alejandro Molina ;
Bernabe, Jorge Bernal ;
Skarmeta, Antonio ;
Alcaraz Calero, Jose M. .
IEEE JOURNAL ON SELECTED AREAS IN COMMUNICATIONS, 2020, 38 (06) :1262-1277
[49]   A survey of intrusion detection in Internet of Things [J].
Zarpelao, Bruno Bogaz ;
Miani, Rodrigo Sanches ;
Kawakani, Claudio Toshio ;
de Alvarenga, Sean Carlisto .
JOURNAL OF NETWORK AND COMPUTER APPLICATIONS, 2017, 84 :25-37