Generative Adversarial Networks for Distributed Intrusion Detection in the Internet of Things

Abstract

To reap the benefits of the Internet of Things (IoT), it is imperative to secure the system against cyber attacks in order to enable mission critical and real-time applications. To this end, intrusion detection systems (IDSs) have been widely used to detect anomalies caused by a cyber attacker in IoT systems. However, due to the large-scale nature of the IoT, an IDS must operate in a distributed manner with minimum dependence on a central controller. Moreover, in many scenarios such as health and financial applications, the datasets are private and IoTDs may not intend to share such data. To this end, in this paper, a distributed generative adversarial network (GAN) is proposed to provide a fully distributed IDS for the IoT so as to detect anomalous behavior without reliance on any centralized controller. In this architecture, every IoTD can monitor its own data as well as neighbor IoTDs to detect internal and external attacks. In addition, the proposed distributed IDS does not require sharing the datasets between the IoTDs, thus, it can be implemented in IoTs that preserve the privacy of user data such as health monitoring systems or financial applications. It is shown analytically that the proposed distributed GAN has higher accuracy of detecting intrusion compared to a standalone IDS that has access to only a single IoTD dataset. Simulation results show that, the proposed distributed GAN-based IDS has up to 20% higher accuracy, 25% higher precision, and 60% lower false positive rate compared to a standalone GAN-based IDS.

Generative Adversarial Network Based Rogue Device Identification Using Differential Constellation Trace Figure

“…Therefore, GAN is more practical than traditional CNN in identifying rogue devices. Ferdowsi et al utilized a distributed GAN-based intrusion detection system (IDS) to detect the data collected by IoT devices to prevent the invasion of abnormal data sent from cyber attackers [41]. Our method used GAN to identify the RF fingerprint collected from accessing devices to prevent rogue devices accessed by attackers.…”

Deep Learning Anomaly Detection for Cellular IoT With Applications in Smart Logistics

“…Ferdowsi and Saad proposed a distributed privacy preserving IoT intrusion detection security system based on federated generative adversarial networks. In the proposed decentralized architecture, every IoT device monitors its own data as well as neighbor IoT devices to detect internal and external attacks [33]. Meidan et al proposed N-BaIoT -a method for detecting IoT botnet attacks based on deep autoencoders.…”

Intrusion Detection for Wireless Edge Networks Based on Federated Learning

“…However, the efficiency of these collaborative detection schemes is not high, and the false alarm rate is high [14]. The authors of [15] proposed a novel distributed GAN (generative adversarial network) architecture that provides an effective intrusion detection system by adapting a mechanism in which every IoT (Internet of Things) device monitors the neighbor IoT devices, the proposed distributed intrusion detection system does not require any sharing of datasets among the IoT devices, compared with the standalone GAN-based intrusion detection system, the distributed GAN-based intrusion detection system has a higher accuracy rate.…”