A Hybrid CNN-LSTM Model for IIoT Edge Privacy-Aware Intrusion Detection

Autor(es):Mostrar menos -

de Elias, Erik Miguel ; Carriel, Vinicius Sanches ; de Oliveira, Guilherme Werneck ; dos Santos, Aldri Luiz ; Nogueira, Michele ; Hirata Junior, Roberto ; Batista, Daniel Macedo ; Moraes, IM ; Campista, MEM ; Ghamri-Doudane, Y ; Costa, LHMK ; Rubinstein, MG

• Tipo de documento: Artigo Científico
• Fonte: 2022 IEEE LATIN-AMERICAN CONFERENCE ON COMMUNICATIONS (LATINCOM); v. N/A, p. 6-pg., 2022-01-01.

Resumo

Security is a critical issue in the context of IoT and, more recently, of Industrial IoT (IIoT) environments. To mitigate security threats, Intrusion Detection Systems have been proposed. Still, most of them can achieve high accuracy only by having access to the application layer of the flows, which is problematic in terms of privacy. This paper presents a neural network model based on a hybrid CNN-LSTM architecture to detect several attacks in the network traffic at the Edge of IIoT using only features from the transport and network layers. Besides improving privacy, the proposal achieves 97.85% average accuracy when classifying the traffic as benign or malicious and 97.14% average accuracy when classifying 15 specific attacks in a dataset containing IIoT traffic. Moreover, all the code produced is available as free software, facilitating new studies and the reproduction of the experiments. (AU)

• Processo FAPESP: 15/24485-9 - Internet do futuro aplicada a cidades inteligentes
• Beneficiário: Fabio Kon
• Modalidade de apoio: Auxílio à Pesquisa - Temático
• Processo FAPESP: 18/23098-0 - MENTORED: da modelagem à experimentação - predizendo e detectando ataques DDoS e zero-day
• Beneficiário: Michele Nogueira Lima
• Modalidade de apoio: Auxílio à Pesquisa - Temático
• Processo FAPESP: 14/50937-1 - INCT 2014: da Internet do Futuro
• Beneficiário: Fabio Kon
• Modalidade de apoio: Auxílio à Pesquisa - Temático