Multi-Aspect Based Approach to Attack Detection in IoT Clouds

This article covers the issues of constructing tools for detecting network attacks targeting devices in IoT clouds. The detection is performed within the framework of cloud infrastructure, which receives data flows that are limited in size and content, and characterize the current network interactio...

Full description

Bibliographic Details
Main Authors: Vasily Desnitsky, Andrey Chechulin, Igor Kotenko
Format: Article
Language:English
Published: MDPI AG 2022-02-01
Series:Sensors
Subjects:
Online Access:https://www.mdpi.com/1424-8220/22/5/1831
_version_ 1797473773213974528
author Vasily Desnitsky
Andrey Chechulin
Igor Kotenko
author_facet Vasily Desnitsky
Andrey Chechulin
Igor Kotenko
author_sort Vasily Desnitsky
collection DOAJ
description This article covers the issues of constructing tools for detecting network attacks targeting devices in IoT clouds. The detection is performed within the framework of cloud infrastructure, which receives data flows that are limited in size and content, and characterize the current network interaction of the analyzed IoT devices. The detection is based on the construction of training models and uses machine learning methods, such as AdaBoostClassifier, RandomForestClassifier, MultinomialNB, etc. The proposed combined multi-aspect approach to attack detection relies on session-based spaces, host-based spaces, and other spaces of features extracted from incoming traffic. An attack-specific ensemble of various machine learning methods is applied to improve the detection quality indicators. The performed experiments have confirmed the correctness of the constructed models and their effectiveness, expressed in terms of the precision, recall, and f1-measure indicators for each analyzed type of attack, using a series of existing samples of benign and attacking traffic.
first_indexed 2024-03-09T20:21:11Z
format Article
id doaj.art-3d595ca85f8043ed9b0ed51d264a0ee4
institution Directory Open Access Journal
issn 1424-8220
language English
last_indexed 2024-03-09T20:21:11Z
publishDate 2022-02-01
publisher MDPI AG
record_format Article
series Sensors
spelling doaj.art-3d595ca85f8043ed9b0ed51d264a0ee42023-11-23T23:46:55ZengMDPI AGSensors1424-82202022-02-01225183110.3390/s22051831Multi-Aspect Based Approach to Attack Detection in IoT CloudsVasily Desnitsky0Andrey Chechulin1Igor Kotenko2St. Petersburg Federal Research Center of the Russian Academy of Sciences (SPC RAS), 199178 St. Petersburg, RussiaSt. Petersburg Federal Research Center of the Russian Academy of Sciences (SPC RAS), 199178 St. Petersburg, RussiaSt. Petersburg Federal Research Center of the Russian Academy of Sciences (SPC RAS), 199178 St. Petersburg, RussiaThis article covers the issues of constructing tools for detecting network attacks targeting devices in IoT clouds. The detection is performed within the framework of cloud infrastructure, which receives data flows that are limited in size and content, and characterize the current network interaction of the analyzed IoT devices. The detection is based on the construction of training models and uses machine learning methods, such as AdaBoostClassifier, RandomForestClassifier, MultinomialNB, etc. The proposed combined multi-aspect approach to attack detection relies on session-based spaces, host-based spaces, and other spaces of features extracted from incoming traffic. An attack-specific ensemble of various machine learning methods is applied to improve the detection quality indicators. The performed experiments have confirmed the correctness of the constructed models and their effectiveness, expressed in terms of the precision, recall, and f1-measure indicators for each analyzed type of attack, using a series of existing samples of benign and attacking traffic.https://www.mdpi.com/1424-8220/22/5/1831attack detectionIoTnetwork securitycloud
spellingShingle Vasily Desnitsky
Andrey Chechulin
Igor Kotenko
Multi-Aspect Based Approach to Attack Detection in IoT Clouds
Sensors
attack detection
IoT
network security
cloud
title Multi-Aspect Based Approach to Attack Detection in IoT Clouds
title_full Multi-Aspect Based Approach to Attack Detection in IoT Clouds
title_fullStr Multi-Aspect Based Approach to Attack Detection in IoT Clouds
title_full_unstemmed Multi-Aspect Based Approach to Attack Detection in IoT Clouds
title_short Multi-Aspect Based Approach to Attack Detection in IoT Clouds
title_sort multi aspect based approach to attack detection in iot clouds
topic attack detection
IoT
network security
cloud
url https://www.mdpi.com/1424-8220/22/5/1831
work_keys_str_mv AT vasilydesnitsky multiaspectbasedapproachtoattackdetectioniniotclouds
AT andreychechulin multiaspectbasedapproachtoattackdetectioniniotclouds
AT igorkotenko multiaspectbasedapproachtoattackdetectioniniotclouds