Design of Complex Event-Processing IDS in Internet of Things

Chen, Jun; Chen, Chi

doi:10.1109/icmtma.2014.57

Cited by 78 publications

(46 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We believe the dynamic nature of the IoT systems makes the challenge of multi-stage attack detection non-trivial requiring explicit efforts to address it. Jun and Chi [20] represent one of the initial effort which recognize and explicitly seek to detect relationships between different malicious incidents. However, it represents a limited effort and further work is required to address detection and protection against multi-stage attacks within the IoT systems.…”

Section: ) Constrained Resources: a Typical Iot Device Hasmentioning

confidence: 99%

A Review of Performance, Energy and Privacy of Intrusion Detection Systems for IoT

et al. 2020

View full text Add to dashboard Cite

Internet of Things (IoT) is a disruptive technology with applications across diverse domains such as transportation and logistics systems, smart grids, smart homes, connected vehicles, and smart cities. Alongside the growth of these infrastructures, the volume and variety of attacks on these infrastructures has increased highlighting the significance of distinct protection mechanisms. Intrusion detection is one of the distinguished protection mechanisms with notable recent efforts made to establish effective intrusion detection for IoT and IoV. However, unique characteristics of such infrastructures including battery power, bandwidth and processors overheads, and the network dynamics can influence the operation of an intrusion detection system. This paper presents a comprehensive study of existing intrusion detection systems for IoT systems including emerging systems such as Internet of Vehicles (IoV). The paper analyzes existing systems in three aspects: computational overhead, energy consumption and privacy implications. Based on a rigorous analysis of the existing intrusion detection approaches, the paper also identifies open challenges for an effective and collaborative design of intrusion detection system for resource-constrained IoT system in general and its applications such as IoV. These efforts are envisaged to highlight state of the art with respect to intrusion detection for IoT and open challenges requiring specific efforts to achieve efficient intrusion detection within these systems.

show abstract

Section: ) Constrained Resources: a Typical Iot Device Hasmentioning

confidence: 99%

A Review of Performance, Energy and Privacy of Intrusion Detection Systems for IoT

et al. 2020

View full text Add to dashboard Cite

show abstract

“…Jun and Chi [91] proposed an IDS integrated with complex event-processing (CEP) technology. The benefit of CEP technology is the ability to identify complex patterns via real-time data processing.…”

Section: Idss Designed For Iot Systemsmentioning

confidence: 99%

Intrusion detection systems for IoT-based smart environments: a survey

Elrawy¹,

2018

View full text Add to dashboard Cite

One of the goals of smart environments is to improve the quality of human life in terms of comfort and efficiency. The Internet of Things (IoT) paradigm has recently evolved into a technology for building smart environments. Security and privacy are considered key issues in any real-world smart environment based on the IoT model. The security vulnerabilities in IoT-based systems create security threats that affect smart environment applications. Thus, there is a crucial need for intrusion detection systems (IDSs) designed for IoT environments to mitigate IoT-related security attacks that exploit some of these security vulnerabilities. Due to the limited computing and storage capabilities of IoT devices and the specific protocols used, conventional IDSs may not be an option for IoT environments. This article presents a comprehensive survey of the latest IDSs designed for the IoT model, with a focus on the corresponding methods, features, and mechanisms. This article also provides deep insight into the IoT architecture, emerging security vulnerabilities, and their relation to the layers of the IoT architecture. This work demonstrates that despite previous studies regarding the design and implementation of IDSs for the IoT paradigm, developing efficient, reliable and robust IDSs for IoT-based smart environments is still a crucial task. Key considerations for the development of such IDSs are introduced as a future outlook at the end of this survey.

show abstract

“…An architecture to protect against DoS attacks within 6LoWPANs has been presented in [35] where the system uses network-level traffic and attack signature to identify malicious traffic. Moreover, Jun and Chi addressed the problem of processing a significant volume of alerts and network traffic as a part of intrusion detection in [36]. The authors identified the challenge of a significant volume of network traffic within a limited time to be processed by an intrusion detection module and proposed to use established Complex Event Processing (CEP) techniques to address this challenge.…”

Section: Intrusion Detection Within Iot Systemsmentioning

confidence: 99%

COLIDE: a collaborative intrusion detection framework for Internet of Things

et al. 2019

View full text Add to dashboard Cite

Internet of Things (IoT) represent a network of resource-constrained sensor devices connected through the open Internet which are susceptible to misuse by intruders. Proliferation of IoT across diverse application domains renders their security critical to ensure normal service delivery by such infrastructures. Traditional standalone intrusion detection systems are tasked with monitoring device behaviours to identify malicious activities. These systems not only require extensive network and system resources but also cause delays in detecting a malicious actor due to unavailability of a comprehensive view of the intruder's activities. Collaboration among IoT devices enables considering knowledge from a collection of host and network devices to achieve improved detection accuracy in a timely manner. However, collaboration introduces the challenge of energy efficiency and event processing which is particularly significant for resource-constrained devices. In this paper, we present an intrusion detection framework for IoT (COLIDE) that leverages collaboration among resource-constrained sensor devices and border nodes for effective and timely detection of intruders. The paper presents a detailed description of the proposed framework along with its formal description and analysis to assess its effectiveness for a typical IoT system. We implemented the COLIDE framework with Contiki OS and conducted thorough experimentation to evaluate its performance. This evaluation demonstrates efficiency of COLIDE framework with respect to energy and processing overheads achieving effectiveness within an IoT system.

show abstract

Design of Complex Event-Processing IDS in Internet of Things

Cited by 78 publications

References 12 publications

A Review of Performance, Energy and Privacy of Intrusion Detection Systems for IoT

A Review of Performance, Energy and Privacy of Intrusion Detection Systems for IoT

Intrusion detection systems for IoT-based smart environments: a survey

COLIDE: a collaborative intrusion detection framework for Internet of Things

Contact Info

Product

Resources

About