IMPACT: Impersonation Attack Detection via Edge Computing Using Deep Autoencoder and Feature Abstraction

An ever-increasing number of computing devices interconnected through wireless networks encapsulated in the cyber-physical-social systems and a significant amount of sensitive network data transmitted among them have raised security and privacy concerns. Intrusion detection system (IDS) is known as...

Full description

Bibliographic Details
Main Authors: Seo Jin Lee, Paul D. Yoo, A. Taufiq Asyhari, Yoonchan Jhi, Lounis Chermak, Chan Yeob Yeun, Kamal Taha
Format: Article
Language:English
Published: IEEE 2020-01-01
Series:IEEE Access
Subjects:
Online Access:https://ieeexplore.ieee.org/document/9055368/
id doaj-f992daabe1b54eaa87b455571b35655d
record_format Article
spelling doaj-f992daabe1b54eaa87b455571b35655d2021-03-30T03:17:53ZengIEEEIEEE Access2169-35362020-01-018655206552910.1109/ACCESS.2020.29850899055368IMPACT: Impersonation Attack Detection via Edge Computing Using Deep Autoencoder and Feature AbstractionSeo Jin Lee0Paul D. Yoo1https://orcid.org/0000-0001-7665-8616A. Taufiq Asyhari2https://orcid.org/0000-0002-3023-8285Yoonchan Jhi3Lounis Chermak4Chan Yeob Yeun5https://orcid.org/0000-0002-1398-952XKamal Taha6https://orcid.org/0000-0002-6674-4614Centre for Electronic Warfare, Information and Cyber (CEWIC), Cranfield School of Defence and Security, Defence Academy of the United Kingdom, Shrivenham, U.K.Department of CSIS, Birkbeck College, University of London, London, U.K.School of Computing and Digital Technology, Birmingham City University, Birmingham, U.K.Security Research Center, Samsung SDS, Seoul, South KoreaCentre for Electronic Warfare, Information and Cyber (CEWIC), Cranfield School of Defence and Security, Defence Academy of the United Kingdom, Shrivenham, U.K.Department of EECS, Center for Cyber-Physical Systems (C2PS), Khalifa University, Abu Dhabi, United Arab EmiratesDepartment of EECS, Center for Cyber-Physical Systems (C2PS), Khalifa University, Abu Dhabi, United Arab EmiratesAn ever-increasing number of computing devices interconnected through wireless networks encapsulated in the cyber-physical-social systems and a significant amount of sensitive network data transmitted among them have raised security and privacy concerns. Intrusion detection system (IDS) is known as an effective defence mechanism and most recently machine learning (ML) methods are used for its development. However, Internet of Things (IoT) devices often have limited computational resources such as limited energy source, computational power and memory, thus, traditional ML-based IDS that require extensive computational resources are not suitable for running on such devices. This study thus is to design and develop a lightweight ML-based IDS tailored for the resource-constrained devices. Specifically, the study proposes a lightweight ML-based IDS model namely IMPACT (IMPersonation Attack deteCTion using deep auto-encoder and feature abstraction). This is based on deep feature learning with gradient-based linear Support Vector Machine (SVM) to deploy and run on resource-constrained devices by reducing the number of features through feature extraction and selection using a stacked autoencoder (SAE), mutual information (MI) and C4.8 wrapper. The IMPACT is trained on Aegean Wi-Fi Intrusion Dataset (AWID) to detect impersonation attack. Numerical results show that the proposed IMPACT achieved 98.22% accuracy with 97.64% detection rate and 1.20% false alarm rate and outperformed existing state-of-the-art benchmark models. Another key contribution of this study is the investigation of the features in AWID dataset for its usability for further development of IDS.https://ieeexplore.ieee.org/document/9055368/IoT securityintrusion detectionfeature engineeringmutual informationmachine learningedge computing
collection DOAJ
language English
format Article
sources DOAJ
author Seo Jin Lee
Paul D. Yoo
A. Taufiq Asyhari
Yoonchan Jhi
Lounis Chermak
Chan Yeob Yeun
Kamal Taha
spellingShingle Seo Jin Lee
Paul D. Yoo
A. Taufiq Asyhari
Yoonchan Jhi
Lounis Chermak
Chan Yeob Yeun
Kamal Taha
IMPACT: Impersonation Attack Detection via Edge Computing Using Deep Autoencoder and Feature Abstraction
IEEE Access
IoT security
intrusion detection
feature engineering
mutual information
machine learning
edge computing
author_facet Seo Jin Lee
Paul D. Yoo
A. Taufiq Asyhari
Yoonchan Jhi
Lounis Chermak
Chan Yeob Yeun
Kamal Taha
author_sort Seo Jin Lee
title IMPACT: Impersonation Attack Detection via Edge Computing Using Deep Autoencoder and Feature Abstraction
title_short IMPACT: Impersonation Attack Detection via Edge Computing Using Deep Autoencoder and Feature Abstraction
title_full IMPACT: Impersonation Attack Detection via Edge Computing Using Deep Autoencoder and Feature Abstraction
title_fullStr IMPACT: Impersonation Attack Detection via Edge Computing Using Deep Autoencoder and Feature Abstraction
title_full_unstemmed IMPACT: Impersonation Attack Detection via Edge Computing Using Deep Autoencoder and Feature Abstraction
title_sort impact: impersonation attack detection via edge computing using deep autoencoder and feature abstraction
publisher IEEE
series IEEE Access
issn 2169-3536
publishDate 2020-01-01
description An ever-increasing number of computing devices interconnected through wireless networks encapsulated in the cyber-physical-social systems and a significant amount of sensitive network data transmitted among them have raised security and privacy concerns. Intrusion detection system (IDS) is known as an effective defence mechanism and most recently machine learning (ML) methods are used for its development. However, Internet of Things (IoT) devices often have limited computational resources such as limited energy source, computational power and memory, thus, traditional ML-based IDS that require extensive computational resources are not suitable for running on such devices. This study thus is to design and develop a lightweight ML-based IDS tailored for the resource-constrained devices. Specifically, the study proposes a lightweight ML-based IDS model namely IMPACT (IMPersonation Attack deteCTion using deep auto-encoder and feature abstraction). This is based on deep feature learning with gradient-based linear Support Vector Machine (SVM) to deploy and run on resource-constrained devices by reducing the number of features through feature extraction and selection using a stacked autoencoder (SAE), mutual information (MI) and C4.8 wrapper. The IMPACT is trained on Aegean Wi-Fi Intrusion Dataset (AWID) to detect impersonation attack. Numerical results show that the proposed IMPACT achieved 98.22% accuracy with 97.64% detection rate and 1.20% false alarm rate and outperformed existing state-of-the-art benchmark models. Another key contribution of this study is the investigation of the features in AWID dataset for its usability for further development of IDS.
topic IoT security
intrusion detection
feature engineering
mutual information
machine learning
edge computing
url https://ieeexplore.ieee.org/document/9055368/
work_keys_str_mv AT seojinlee impactimpersonationattackdetectionviaedgecomputingusingdeepautoencoderandfeatureabstraction
AT pauldyoo impactimpersonationattackdetectionviaedgecomputingusingdeepautoencoderandfeatureabstraction
AT ataufiqasyhari impactimpersonationattackdetectionviaedgecomputingusingdeepautoencoderandfeatureabstraction
AT yoonchanjhi impactimpersonationattackdetectionviaedgecomputingusingdeepautoencoderandfeatureabstraction
AT lounischermak impactimpersonationattackdetectionviaedgecomputingusingdeepautoencoderandfeatureabstraction
AT chanyeobyeun impactimpersonationattackdetectionviaedgecomputingusingdeepautoencoderandfeatureabstraction
AT kamaltaha impactimpersonationattackdetectionviaedgecomputingusingdeepautoencoderandfeatureabstraction
_version_ 1724183822144110592