Distributed Novelty Detection at the Edge for IoT Network Security

Autor(es):Mostrar menos -

Puhl, Luis ; Cassales, Guilherme Weigert ; Guardia, Helio Crestana ; Senger, Hermes ; Gervasi, O ; Murgante, B ; Misra, S ; Garau, C ; Blecic, I ; Taniar, D ; Apduhan, BO ; Rocha, AMAC ; Tarantino, E ; Torre, CM

• Tipo de documento: Artigo Científico
• Fonte: COMPUTATIONAL SCIENCE AND ITS APPLICATIONS, ICCSA 2021, PT III; v. 12951, p. 16-pg., 2021-01-01.

Resumo

The ongoing implementation of the Internet of Things (IoT) is sharply increasing the number and variety of small devices on edge networks. Likewise, the attack opportunities for hostile agents also increases, requiring more effort from network administrators and strategies to detect and react to those threats. For a network security system to operate in the context of edge and IoT, it has to comply with processing, storage, and energy requirements alongside traditional requirements for stream and network analysis like accuracy and scalability. Using a previously defined architecture (IDSA-IoT), we address the construction and evaluation of a support mechanism for distributed Network Intrusion Detection Systems based on the MINAS Data Stream Novelty Detection algorithm. We discuss the algorithm steps, how it can be deployed in a distributed environment, the impacts on the accuracy and evaluate performance and scalability using a cluster of constrained devices commonly found in IoT scenarios. The obtained results show a negligible accuracy loss in the distributed version but also a small reduction in the execution time using low profile devices. Although not efficient, the parallel version showed to be viable as the proposed granularity provides equivalent accuracy and viable response times. (AU)

• Processo FAPESP: 15/24461-2 - Estudo de modelos de negócios para federação de serviços para suporte a e-Ciência
• Beneficiário: Francisco Vilar Brasileiro
• Modalidade de apoio: Auxílio à Pesquisa - Temático
• Processo FAPESP: 18/22979-2 - IoT-SED: segurança e eficiência no transporte de dados na Internet das Coisas
• Beneficiário: Daniel Macêdo Batista
• Modalidade de apoio: Auxílio à Pesquisa - Regular