Intrusion Detection Systems for Distributed Environment

Malani, Dhrumil; Modi, Jimit; Lilani, Siddharth; Desai, Yukta; Dhanare, Ritesh

doi:10.1109/icicv50876.2021.9388377

Cited by 2 publications

(1 citation statement)

References 22 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…While cloud-based applications or industrial automation systems possess significant resources for monitoring health and determining their status and correct behavior at runtime, IoT devices operate with limited hardware capabilities and tight resource constraints, making monitoring, analysis, and response activities a challenging endeavor [9]. Depending on the type of security issue, or system state, an analysis may need to be performed locally on the device, or centrally by a higher-level authority [10]. Following the NIST Cybersecurity Framework [11], IoT devices need to identify, protect, detect, respond, and recover from cyber-attacks, unauthorized access, and other threats.…”

Section: Introductionmentioning

confidence: 99%

A Distributed MAPE-K Framework for Self-Protective IoT Devices

Riegler

Sametinger

Vierhauser

2023

2023 IEEE/ACM 18th Symposium on Software Engineering for Adaptive and Self-Managing Systems (SEAMS)

View full text Add to dashboard Cite

Internet of Things (IoT) devices have become ubiquitous in our everyday life, with security becoming an evergrowing issue as more and more cyber-attack incidents being reported, primarily due to deficiencies in existing security mechanisms. However, while, for example, cloud-based applications, or industrial automation systems of systems possess significant resources for monitoring health, and determining their status and correct behavior at runtime, IoT devices operate with limited hardware capabilities and under tight resource constraints, making monitoring, analysis, and response activities a challenging endeavor. Following the NIST Cybersecurity Framework, IoT devices need to identify, protect, detect, respond, and recover from cyber-attacks, unauthorized access, and other security threats. A common way to provide self-adaptation to changing conditions is the MAPE-K loop with four pivotal phases: Monitor, Analyze, Plan, and Execute. This paper presents DSec4IoT, a "Distributed MAPE-K Framework for Self-Protective IoT Devices". Our framework leverages the idea of distributed MAPE-K patterns and establishes a model for managing and controlling Self-Protective IoT Devices. We evaluate our approach by simulating port scans and performing adaptation activities. Results have confirmed that DSec4IoT can be easily applied to detect and mitigate them.

show abstract

Section: Introductionmentioning

confidence: 99%