Ahmad Syed Zubair, Qamar Farhan
Computer Engineering Department, UET Taxila, Rawalpindi, Punjab, 47050, Pakistan.
Sci Rep. 2024 Dec 28;14(1):30695. doi: 10.1038/s41598-024-78262-0.
IoT device security has become a major concern as a result of the rapid expansion of the Internet of Things (IoT) and the growing adoption of cloud computing for central monitoring and management. In order to provide centrally managed services each IoT device have to connect to their respective High-Performance Computing (HPC) clouds. The ever increasing deployment of Internet of Things (IoT) devices linked to HPC clouds use various medium such as wired and wireless. The security challenges increases further when these devices communicate over satellite links. This Satellite-Based IoT-HPC Cloud architecture poses new security concerns which exacerbates this problem. An intrusion detection technology integrated in the central cloud is suggested as a potential remedy to monitor and detect aberrant activity within the network in order to allay these worries. However, the enormous amounts of data generated by IoT devices and their constrained computing power dose not allow to implement IDS techniques at source and renders towards typical central Intrusion Detection Systems (IDS) ineffectiveness. Moreover, to protect these systems, powerful intrusion detection techniques are required due to the inherent vulnerabilities of IoT devices and the possible hazards during data transmission.During the course of literature survey it is revealed that the research work has been done to detect few types of attacks by using the old school model of IDS. The computational expensiveness in terms of processing time is also an important parameter to be considered. This work introduces a novel Embedded Hybrid Deep Learning-based intrusion detection technique (EHID) based on embedded hybrid deep learning that is created specifically for IoT devices linked to HPC clouds via satellite connectivity. Two Deep Learning (DL) algorithms are integrated in the proposed method to improve detection abilities with decent accuracy while considering the processing time and number of trainable parameters to detect 14 types of threats. It segregates among the normal and attack traffic. We also modify the conventional IDS approach and propose architectural change to harness the processing power of central server of cloud. This hybrid approach effectively detects threats by harnessing the computing power available at HPC cloud along with leveraging the power of AI. Additionally, the proposed system enables real-time monitoring and detection of intrusions while providing monitoring and management services through HPC using IoT-generated data. Experiments on Edge-IIoTset Cyber Security Dataset of IoT & IIoT indicate improved detection accuracy, reduced false positives, and efficient computational performance.
由于物联网(IoT)的迅速扩张以及云计算在中央监控和管理方面越来越广泛的应用,物联网设备安全已成为一个主要关注点。为了提供集中管理的服务,每个物联网设备都必须连接到各自的高性能计算(HPC)云。与HPC云相连的物联网设备的部署不断增加,使用了有线和无线等各种媒介。当这些设备通过卫星链路通信时,安全挑战进一步增加。这种基于卫星的物联网 - HPC云架构带来了新的安全问题,加剧了这个问题。建议在中央云中集成入侵检测技术,作为一种潜在的补救措施,以监控和检测网络内的异常活动,从而缓解这些担忧。然而,物联网设备产生的大量数据及其有限的计算能力不允许在源端实施入侵检测系统(IDS)技术,并且使得典型的中央入侵检测系统无效。此外,由于物联网设备固有的漏洞以及数据传输过程中可能存在的危害,需要强大的入侵检测技术来保护这些系统。在文献调研过程中发现,已经开展了一些研究工作,利用传统的入侵检测系统模型来检测少数几种类型的攻击。处理时间方面的计算成本也是一个需要考虑的重要参数。这项工作引入了一种基于嵌入式混合深度学习的新型入侵检测技术(EHID),该技术专门为通过卫星连接与HPC云相连的物联网设备创建。所提出的方法集成了两种深度学习(DL)算法,以在考虑处理时间和可训练参数数量的同时,以相当高的准确率提高检测能力,以检测14种类型的威胁。它能区分正常流量和攻击流量。我们还修改了传统的入侵检测系统方法,并提出架构变更,以利用云中央服务器的处理能力。这种混合方法通过利用HPC云可用的计算能力以及借助人工智能的力量,有效地检测威胁。此外,所提出的系统能够实时监控和检测入侵,同时通过使用物联网生成的数据通过HPC提供监控和管理服务。对物联网和工业物联网的Edge-IIoTset网络安全数据集进行的实验表明,检测准确率提高,误报减少,并且计算性能高效。