IMPACT: Impersonation Attack Detection via Edge Computing Using Deep Autoencoder and Feature Abstraction
An ever-increasing number of computing devices interconnected through wireless networks encapsulated in the cyber-physical-social systems and a significant amount of sensitive network data transmitted among them have raised security and privacy concerns. Intrusion detection system (IDS) is known as...
Main Authors: | , , , , , , |
---|---|
Format: | Article |
Language: | English |
Published: |
IEEE
2020-01-01
|
Series: | IEEE Access |
Subjects: | |
Online Access: | https://ieeexplore.ieee.org/document/9055368/ |
id |
doaj-f992daabe1b54eaa87b455571b35655d |
---|---|
record_format |
Article |
spelling |
doaj-f992daabe1b54eaa87b455571b35655d2021-03-30T03:17:53ZengIEEEIEEE Access2169-35362020-01-018655206552910.1109/ACCESS.2020.29850899055368IMPACT: Impersonation Attack Detection via Edge Computing Using Deep Autoencoder and Feature AbstractionSeo Jin Lee0Paul D. Yoo1https://orcid.org/0000-0001-7665-8616A. Taufiq Asyhari2https://orcid.org/0000-0002-3023-8285Yoonchan Jhi3Lounis Chermak4Chan Yeob Yeun5https://orcid.org/0000-0002-1398-952XKamal Taha6https://orcid.org/0000-0002-6674-4614Centre for Electronic Warfare, Information and Cyber (CEWIC), Cranfield School of Defence and Security, Defence Academy of the United Kingdom, Shrivenham, U.K.Department of CSIS, Birkbeck College, University of London, London, U.K.School of Computing and Digital Technology, Birmingham City University, Birmingham, U.K.Security Research Center, Samsung SDS, Seoul, South KoreaCentre for Electronic Warfare, Information and Cyber (CEWIC), Cranfield School of Defence and Security, Defence Academy of the United Kingdom, Shrivenham, U.K.Department of EECS, Center for Cyber-Physical Systems (C2PS), Khalifa University, Abu Dhabi, United Arab EmiratesDepartment of EECS, Center for Cyber-Physical Systems (C2PS), Khalifa University, Abu Dhabi, United Arab EmiratesAn ever-increasing number of computing devices interconnected through wireless networks encapsulated in the cyber-physical-social systems and a significant amount of sensitive network data transmitted among them have raised security and privacy concerns. Intrusion detection system (IDS) is known as an effective defence mechanism and most recently machine learning (ML) methods are used for its development. However, Internet of Things (IoT) devices often have limited computational resources such as limited energy source, computational power and memory, thus, traditional ML-based IDS that require extensive computational resources are not suitable for running on such devices. This study thus is to design and develop a lightweight ML-based IDS tailored for the resource-constrained devices. Specifically, the study proposes a lightweight ML-based IDS model namely IMPACT (IMPersonation Attack deteCTion using deep auto-encoder and feature abstraction). This is based on deep feature learning with gradient-based linear Support Vector Machine (SVM) to deploy and run on resource-constrained devices by reducing the number of features through feature extraction and selection using a stacked autoencoder (SAE), mutual information (MI) and C4.8 wrapper. The IMPACT is trained on Aegean Wi-Fi Intrusion Dataset (AWID) to detect impersonation attack. Numerical results show that the proposed IMPACT achieved 98.22% accuracy with 97.64% detection rate and 1.20% false alarm rate and outperformed existing state-of-the-art benchmark models. Another key contribution of this study is the investigation of the features in AWID dataset for its usability for further development of IDS.https://ieeexplore.ieee.org/document/9055368/IoT securityintrusion detectionfeature engineeringmutual informationmachine learningedge computing |
collection |
DOAJ |
language |
English |
format |
Article |
sources |
DOAJ |
author |
Seo Jin Lee Paul D. Yoo A. Taufiq Asyhari Yoonchan Jhi Lounis Chermak Chan Yeob Yeun Kamal Taha |
spellingShingle |
Seo Jin Lee Paul D. Yoo A. Taufiq Asyhari Yoonchan Jhi Lounis Chermak Chan Yeob Yeun Kamal Taha IMPACT: Impersonation Attack Detection via Edge Computing Using Deep Autoencoder and Feature Abstraction IEEE Access IoT security intrusion detection feature engineering mutual information machine learning edge computing |
author_facet |
Seo Jin Lee Paul D. Yoo A. Taufiq Asyhari Yoonchan Jhi Lounis Chermak Chan Yeob Yeun Kamal Taha |
author_sort |
Seo Jin Lee |
title |
IMPACT: Impersonation Attack Detection via Edge Computing Using Deep Autoencoder and Feature Abstraction |
title_short |
IMPACT: Impersonation Attack Detection via Edge Computing Using Deep Autoencoder and Feature Abstraction |
title_full |
IMPACT: Impersonation Attack Detection via Edge Computing Using Deep Autoencoder and Feature Abstraction |
title_fullStr |
IMPACT: Impersonation Attack Detection via Edge Computing Using Deep Autoencoder and Feature Abstraction |
title_full_unstemmed |
IMPACT: Impersonation Attack Detection via Edge Computing Using Deep Autoencoder and Feature Abstraction |
title_sort |
impact: impersonation attack detection via edge computing using deep autoencoder and feature abstraction |
publisher |
IEEE |
series |
IEEE Access |
issn |
2169-3536 |
publishDate |
2020-01-01 |
description |
An ever-increasing number of computing devices interconnected through wireless networks encapsulated in the cyber-physical-social systems and a significant amount of sensitive network data transmitted among them have raised security and privacy concerns. Intrusion detection system (IDS) is known as an effective defence mechanism and most recently machine learning (ML) methods are used for its development. However, Internet of Things (IoT) devices often have limited computational resources such as limited energy source, computational power and memory, thus, traditional ML-based IDS that require extensive computational resources are not suitable for running on such devices. This study thus is to design and develop a lightweight ML-based IDS tailored for the resource-constrained devices. Specifically, the study proposes a lightweight ML-based IDS model namely IMPACT (IMPersonation Attack deteCTion using deep auto-encoder and feature abstraction). This is based on deep feature learning with gradient-based linear Support Vector Machine (SVM) to deploy and run on resource-constrained devices by reducing the number of features through feature extraction and selection using a stacked autoencoder (SAE), mutual information (MI) and C4.8 wrapper. The IMPACT is trained on Aegean Wi-Fi Intrusion Dataset (AWID) to detect impersonation attack. Numerical results show that the proposed IMPACT achieved 98.22% accuracy with 97.64% detection rate and 1.20% false alarm rate and outperformed existing state-of-the-art benchmark models. Another key contribution of this study is the investigation of the features in AWID dataset for its usability for further development of IDS. |
topic |
IoT security intrusion detection feature engineering mutual information machine learning edge computing |
url |
https://ieeexplore.ieee.org/document/9055368/ |
work_keys_str_mv |
AT seojinlee impactimpersonationattackdetectionviaedgecomputingusingdeepautoencoderandfeatureabstraction AT pauldyoo impactimpersonationattackdetectionviaedgecomputingusingdeepautoencoderandfeatureabstraction AT ataufiqasyhari impactimpersonationattackdetectionviaedgecomputingusingdeepautoencoderandfeatureabstraction AT yoonchanjhi impactimpersonationattackdetectionviaedgecomputingusingdeepautoencoderandfeatureabstraction AT lounischermak impactimpersonationattackdetectionviaedgecomputingusingdeepautoencoderandfeatureabstraction AT chanyeobyeun impactimpersonationattackdetectionviaedgecomputingusingdeepautoencoderandfeatureabstraction AT kamaltaha impactimpersonationattackdetectionviaedgecomputingusingdeepautoencoderandfeatureabstraction |
_version_ |
1724183822144110592 |