IoT Intrusion Detection Taxonomy, Reference Architecture, and Analyses
Open Access
- 26 September 2021
- Vol. 21 (19), 6432
- https://doi.org/10.3390/s21196432
Abstract
This paper surveys the deep learning (DL) approaches for intrusion-detection systems (IDSs) in Internet of Things (IoT) and the associated datasets toward identifying gaps, weaknesses, and a neutral reference architecture. A comparative study of IDSs is provided, with a review of anomaly-based IDSs on DL approaches, which include supervised, unsupervised, and hybrid methods. All techniques in these three categories have essentially been used in IoT environments. To date, only a few have been used in the anomaly-based IDS for IoT. For each of these anomaly-based IDSs, the implementation of the four categories of feature(s) extraction, classification, prediction, and regression were evaluated. We studied important performance metrics and benchmark detection rates, including the requisite efficiency of the various methods. Four machine learning algorithms were evaluated for classification purposes: Logistic Regression (LR), Support Vector Machine (SVM), Decision Tree (DT), and an Artificial Neural Network (ANN). Therefore, we compared each via the Receiver Operating Characteristic (ROC) curve. The study model exhibits promising outcomes for all classes of attacks. The scope of our analysis examines attacks targeting the IoT ecosystem using empirically based, simulation-generated datasets (namely the Bot-IoT and the IoTID20 datasets).Keywords
This publication has 76 references indexed in Scilit:
- Mining network data for intrusion detection through combining SVMs with ant colony networksFuture Generation Computer Systems, 2014
- An Integrated System for Regional Environmental Monitoring and Management Based on Internet of ThingsIEEE Transactions on Industrial Informatics, 2014
- A Security Differential Game Model for Sensor Networks in Context of the Internet of ThingsWireless Personal Communications, 2013
- Toward developing a systematic approach to generate benchmark datasets for intrusion detectionComputers & Security, 2012
- Intrusion detection by machine learning: A reviewExpert Systems with Applications, 2009
- Anomaly-based network intrusion detection: Techniques, systems and challengesComputers & Security, 2009
- Learning Deep Architectures for AIFoundations and Trends® in Machine Learning, 2009
- Deep belief networksScholarpedia, 2009
- Reducing the Dimensionality of Data with Neural NetworksScience, 2006
- Long Short-Term MemoryNeural Computation, 1997