Hybrid Intrusion Detection System for Internet of Things
(IoT)
Abstract
The Internet of things (IoT) is a promising
solution to connect and access every device
through the internet. IoT provides numerous
services and applications, however, it faces
severe security issues and is vulnerable to
attacks. Intrusion detection system is used to
detect such attacks when the network security is
breached. This research work proposed an
intrusion detection system for IoT networks to
detect different types of attacks based on hybrid
convolutional neural network model. Proposed
model is suitable for wide range of IoT
applications. Proposed research work is
validated and compared with the conventional
model. Experimental result demonstrate that
proposed hybrid model is more sensitive to
attacks in the IoT network.
Motivation
Since the IoT environment is not limited to one
specific goal, it is used for multiple goals and
services, and it is necessary to provide a safe
and convenient environment for the user. It has
become necessary to provide a separate module
to ensure the IoT network security this is
because the Internet of Things (IoT)
environment is vulnerable to various types of
attacks. Which leads to the conclusion that it is
necessary to we have to use an Intrusion
detection system that is used to detect attacks
when the network security is breached.
Therefore, this paper proposed a model that is
more sensitive to attacks and can be applied to a
wide range of IoT applications.
Dr. S. Smys, Dr. Abul Basar, Dr. Haoxiang Wang
Sarah Salameh , Reem Al-Sahli , Nouf essa
Methodology
This paper suggested that the security mechanism of
the Internet of Things environment should focus on
preventing unauthorized access to the data source. It
also focuses on data confidentiality and integrity. In
addition to identifying security threats in the shortest
possible time. The paper also suggested the use of a
centralized intrusion detection system in order to
reduce the complexity of the intrusion detection
process. This system monitors the network and remote
nodes to identify intrusions. So, an alert is triggered to
the network administrator to respond to the security
issues. Figure 1 depicts an illustration of intrusion
detection system.
Fig. 1 Intrusion detection system
Hybrid IDS was used in this paper as it provides a
better trade-off between storage and computing cost
with fewer false positives. This proposed system is
built on the analysis of problems in existing intrusion
detection systems. The proposed model is divided into
four stages: data collection, data pre-processing,
network training, and attack identification. During
these phases, trained data and information actually
collected are processed together, and the training
period is used to detect attacks. Figure 2 depicts the overall
process flow of proposed intrusion detection system.
Fig. 2 Proposed Intrusion Detection System
Evaluation
The proposed intrusion detection system is
experimentally verified and compared with RNN
based intrusion detection system. By comparing the
proposed model and RNN model-based intrusion
detection systems. It is observed from the values, the
proposed model attains better detection performance
over RNN model. Few parameters such as recall and
precision are similar to RNN however the ration of
true positive and false positive is much better than
RNN model. By comparing detection accuracy of
the proposed mode with the RNN model, the
proposed hybrid convolutional neural network
model achieves a better efficiency of 98% which is
3% greater than the traditional recurrent neural
network model.
Conclusion
Intrusion detection systems are an inevitable
processing unit in recent wireless networks. The
proposed model in this paper has been
experimentally verified and compared with the
traditional recurrent neural network, and the results
show that it achieves a better detection accuracy of
98%, which makes the application suitable for
different IoT environments.
References
1. Snehal Deshmukh-Bhosale, Santosh S. Sonavane (2019). A Real-Time Intrusion
Detection System for Wormhole Attack in the RPL based Internet of Things.
Procedia Manufacturing. 32:840-847.
2. Rup Kumar Deka, Dhruba Kumar Bhattacharyya, Jugal Kumar Kalita (2019).
Active learning to detect DDoS attack using ranked features. Computer
Communications. 145:209-222
3. Shailendra Rathore, Jong Hyuk Park (2018). Semi-supervised learning based
distributed attack detection framework for IoT. Applied Soft Computing. 72:79-
89.
4. Alekha Kumar Mishra, Asis Kumar Tripathy, Deepak Puthal, Laurence T. Yang
(2019). Analytical Model for Sybil Attack Phases in Internet of Things. IEEE
Internet of Things Journal. 6(1): 379-387
5. Guangjie Han, Xun Li, Jinfang Jiang, Lei Shu, Jaime Lloret (2015). Intrusion
Detection Algorithm Based on Neighbor Information Against Sinkhole Attack in
Wireless Sensor Networks. The Computer Journal, 58(6): 1280-1292