Rafique Saida Hafsa, Abdallah Amira, Musa Nura Shifa, Murugan Thangavel
College of Information Technology, United Arab Emirates University, Abu Dhabi P.O. Box 15551, United Arab Emirates.
College of Engineering, Al Ain University, Abu Dhabi P.O. Box 15551, United Arab Emirates.
Sensors (Basel). 2024 Mar 20;24(6):1968. doi: 10.3390/s24061968.
With its exponential growth, the Internet of Things (IoT) has produced unprecedented levels of connectivity and data. Anomaly detection is a security feature that identifies instances in which system behavior deviates from the expected norm, facilitating the prompt identification and resolution of anomalies. When AI and the IoT are combined, anomaly detection becomes more effective, enhancing the reliability, efficacy, and integrity of IoT systems. AI-based anomaly detection systems are capable of identifying a wide range of threats in IoT environments, including brute force, buffer overflow, injection, replay attacks, DDoS assault, SQL injection, and back-door exploits. Intelligent Intrusion Detection Systems (IDSs) are imperative in IoT devices, which help detect anomalies or intrusions in a network, as the IoT is increasingly employed in several industries but possesses a large attack surface which presents more entry points for attackers. This study reviews the literature on anomaly detection in IoT infrastructure using machine learning and deep learning. This paper discusses the challenges in detecting intrusions and anomalies in IoT systems, highlighting the increasing number of attacks. It reviews recent work on machine learning and deep-learning anomaly detection schemes for IoT networks, summarizing the available literature. From this survey, it is concluded that further development of current systems is needed by using varied datasets, real-time testing, and making the systems scalable.
随着物联网(IoT)呈指数级增长,它产生了前所未有的连接水平和数据量。异常检测是一种安全功能,可识别系统行为偏离预期规范的情况,有助于迅速识别和解决异常问题。当人工智能与物联网相结合时,异常检测会变得更加有效,从而提高物联网系统的可靠性、有效性和完整性。基于人工智能的异常检测系统能够识别物联网环境中的各种威胁,包括暴力破解、缓冲区溢出、注入、重放攻击、分布式拒绝服务(DDoS)攻击、SQL注入和后门利用。智能入侵检测系统(IDS)在物联网设备中至关重要,因为物联网越来越多地应用于多个行业,但其攻击面较大,为攻击者提供了更多的切入点,所以有助于检测网络中的异常或入侵。本研究回顾了关于使用机器学习和深度学习进行物联网基础设施异常检测的文献。本文讨论了在检测物联网系统中的入侵和异常时所面临的挑战,强调了攻击数量的不断增加。它回顾了物联网网络中机器学习和深度学习异常检测方案的近期工作,总结了现有文献。通过这项调查得出结论,需要通过使用多样化的数据集、实时测试并使系统具有可扩展性来进一步发展当前系统。