Network Anomaly Detection inside Consumer Networks—A Hybrid Approach
With an increasing number of Internet of Things (IoT) devices in the digital world, the attack surface for consumer networks has been increasing exponentially. Most of the compromised devices are used as zombies for attacks such as Distributed Denial of Services (DDoS). Consumer networks, unlike mos...
Main Authors: | , , , , |
---|---|
Format: | Article |
Language: | English |
Published: |
MDPI AG
2020-06-01
|
Series: | Electronics |
Subjects: | |
Online Access: | https://www.mdpi.com/2079-9292/9/6/923 |
_version_ | 1797566379521474560 |
---|---|
author | Darsh Patel Kathiravan Srinivasan Chuan-Yu Chang Takshi Gupta Aman Kataria |
author_facet | Darsh Patel Kathiravan Srinivasan Chuan-Yu Chang Takshi Gupta Aman Kataria |
author_sort | Darsh Patel |
collection | DOAJ |
description | With an increasing number of Internet of Things (IoT) devices in the digital world, the attack surface for consumer networks has been increasing exponentially. Most of the compromised devices are used as zombies for attacks such as Distributed Denial of Services (DDoS). Consumer networks, unlike most commercial networks, lack the infrastructure such as managed switches and firewalls to easily monitor and block undesired network traffic. To counter such a problem with limited resources, this article proposes a hybrid anomaly detection approach that detects irregularities in the network traffic implicating compromised devices by using only elementary network information like Packet Size, Source, and Destination Ports, Time between subsequent packets, Transmission Control Protocol (TCP) Flags, etc. Essential features can be extracted from the available data, which can further be used to detect zero-day attacks. The paper also provides the taxonomy of various approaches to classify anomalies and description on capturing network packets inside consumer networks. |
first_indexed | 2024-03-10T19:26:56Z |
format | Article |
id | doaj.art-929594d342f5454389dae24f276ce373 |
institution | Directory Open Access Journal |
issn | 2079-9292 |
language | English |
last_indexed | 2024-03-10T19:26:56Z |
publishDate | 2020-06-01 |
publisher | MDPI AG |
record_format | Article |
series | Electronics |
spelling | doaj.art-929594d342f5454389dae24f276ce3732023-11-20T02:31:32ZengMDPI AGElectronics2079-92922020-06-019692310.3390/electronics9060923Network Anomaly Detection inside Consumer Networks—A Hybrid ApproachDarsh Patel0Kathiravan Srinivasan1Chuan-Yu Chang2Takshi Gupta3Aman Kataria4School of Computing Science and Engineering, Vellore Institute of Technology, Vellore 632014, IndiaSchool of Information Technology and Engineering, Vellore Institute of Technology, Vellore 632014, IndiaDepartment of Computer Science and Information Engineering, National Yunlin University of Science and Technology, Yunlin 64002, TaiwanInformation Security Engineering, Soonchunhyang University, Asan-si 31538, KoreaDepartment of Electrical and Instrumentation Engineering, Thapar Institute of Engineering and Technology, Patiala 147004, IndiaWith an increasing number of Internet of Things (IoT) devices in the digital world, the attack surface for consumer networks has been increasing exponentially. Most of the compromised devices are used as zombies for attacks such as Distributed Denial of Services (DDoS). Consumer networks, unlike most commercial networks, lack the infrastructure such as managed switches and firewalls to easily monitor and block undesired network traffic. To counter such a problem with limited resources, this article proposes a hybrid anomaly detection approach that detects irregularities in the network traffic implicating compromised devices by using only elementary network information like Packet Size, Source, and Destination Ports, Time between subsequent packets, Transmission Control Protocol (TCP) Flags, etc. Essential features can be extracted from the available data, which can further be used to detect zero-day attacks. The paper also provides the taxonomy of various approaches to classify anomalies and description on capturing network packets inside consumer networks.https://www.mdpi.com/2079-9292/9/6/923data mininganomaly detectionmachine learningIoT |
spellingShingle | Darsh Patel Kathiravan Srinivasan Chuan-Yu Chang Takshi Gupta Aman Kataria Network Anomaly Detection inside Consumer Networks—A Hybrid Approach Electronics data mining anomaly detection machine learning IoT |
title | Network Anomaly Detection inside Consumer Networks—A Hybrid Approach |
title_full | Network Anomaly Detection inside Consumer Networks—A Hybrid Approach |
title_fullStr | Network Anomaly Detection inside Consumer Networks—A Hybrid Approach |
title_full_unstemmed | Network Anomaly Detection inside Consumer Networks—A Hybrid Approach |
title_short | Network Anomaly Detection inside Consumer Networks—A Hybrid Approach |
title_sort | network anomaly detection inside consumer networks a hybrid approach |
topic | data mining anomaly detection machine learning IoT |
url | https://www.mdpi.com/2079-9292/9/6/923 |
work_keys_str_mv | AT darshpatel networkanomalydetectioninsideconsumernetworksahybridapproach AT kathiravansrinivasan networkanomalydetectioninsideconsumernetworksahybridapproach AT chuanyuchang networkanomalydetectioninsideconsumernetworksahybridapproach AT takshigupta networkanomalydetectioninsideconsumernetworksahybridapproach AT amankataria networkanomalydetectioninsideconsumernetworksahybridapproach |