An Architecture for Resilient Intrusion Detection in IoT Networks
Authors: Qurashi, M.A., Angelopoulos, C.M. and Katos, V.
Journal: IEEE International Conference on Communications
Volume: 2020-June
ISBN: 9781728150895
ISSN: 1550-3607
DOI: 10.1109/ICC40277.2020.9148868
Abstract:We introduce a lightweight architecture of Intrusion Detection Systems (IDS) for ad-hoc IoT networks. Current state-of-the-art IDS have been designed based on assumptions holding from conventional computer networks, and therefore, do not properly address the nature of IoT networks. In this work, we first identify the correlation between the communication overheads and the placement of an IDS (as captured by proper placement of active IDS agents in the network). We model such networks as Random Geometric Graphs. We then introduce a novel IDS architectural approach by having only a minimum subset of the nodes acting as IDS agents. These nodes are able to monitor the network and detect attacks at the networking layer in a collaborative manner by monitoring 1-hop network information provided by routing protocols such as RPL. Conducted experiments show that our proposed IDS architecture is resilient and robust against frequent topology changes due to node failures. Our detailed experimental evaluation demonstrates significant performance gains in terms of communication overhead and energy dissipation while maintaining high detection rates.
https://eprints.bournemouth.ac.uk/36305/
Source: Scopus
An Architecture for Resilient Intrusion Detection in IoT Networks
Authors: Al Qurashi, M., Angelopoulos, C.M. and Katos, V.
Journal: ICC 2020 - 2020 IEEE INTERNATIONAL CONFERENCE ON COMMUNICATIONS (ICC)
ISSN: 1550-3607
DOI: 10.1109/icc40277.2020.9148868
https://eprints.bournemouth.ac.uk/36305/
Source: Web of Science (Lite)
An Architecture for Resilient Intrusion Detection in IoT Networks
Authors: Qurashi, M.A., Angelopoulos, C.M. and Katos, V.
Conference: IEEE International Conference on Communications (ICC)
ISBN: 9781728150895
ISSN: 1550-3607
Abstract:We introduce a lightweight architecture of Intrusion Detection Systems (IDS) for ad-hoc IoT networks. Current state-of-the-art IDS have been designed based on assumptions holding from conventional computer networks, and therefore, do not properly address the nature of IoT networks. In this work, we first identify the correlation between the communication overheads and the placement of an IDS (as captured by proper placement of active IDS agents in the network). We model such networks as Random Geometric Graphs. We then introduce a novel IDS architectural approach by having only a minimum subset of the nodes acting as IDS agents. These nodes are able to monitor the network and detect attacks at the networking layer in a collaborative manner by monitoring 1-hop network information provided by routing protocols such as RPL. Conducted experiments show that our proposed IDS architecture is resilient and robust against frequent topology changes due to node failures. Our detailed experimental evaluation demonstrates significant performance gains in terms of communication overhead and energy dissipation while maintaining high detection rates.
https://eprints.bournemouth.ac.uk/36305/
Source: BURO EPrints