Securing IoT Based Maritime Transportation System Through Entropy-Based Dual-Stack Machine Learning Framework

Abstract

Internet of Things (IoTs) is envisaged to widely capture the realm of logistics and transportation services in future. The applications of ubiquitous IoTs have been extended to Maritime Transportation Systems (MTS) that spawned increasing security threats; posing serious fiscal concerns to stakeholders involved. Among these threats, Distributed Denial of Service Attack (DDoS) is ranked very high and can wreak havoc on IoT artifacts of MTS network. Timely and effective detection of such attacks is imperative for necessary mitigation. Conventional approaches exploit entropy of attributes in network traffic for detecting DDoS attacks. However, majority of these approaches are static in nature and evaluate only a few network traffic parameters, limiting the number of DDoS attack detection to a few types and intensities. In current research, a novel framework named "Dual Stack Machine Learning (S2ML)" has been proposed to calculate distinct entropy-based varying 10-Tuple (T) features from network traffic features, three window sizes and associated Rate of Exponent Separation (RES). These features have been exploited for developing an intelligent model over MTS-IoT datasets to successfully detect multiple types of DDoS attacks in MTS. S2ML is an efficient framework that overcomes the shortcomings of prevalent DDoS detection approaches, as evident from the comparison with Multi-layer Perceptron (MLP), Alternating Decision Tree (ADT) and Simple Logistic Regression (SLR) over different evaluation metrics (Confusion metrics, ROCs). The proposed S2ML technique outperforms prevalent ones with 1.5% better results compared to asserted approaches on distribution of normal/attack traffic. We look forward to enhance the model performance through dynamic windowing, measuring packet drop rates and infrastructure of Software Defined Networks (SDNs).

DDoS attacks and machine‐learning‐based detection methods: A survey and taxonomy

“…Ali et al 79 proposed a dual‐stack machine learning framework for securing IoT‐based maritime transportation systems. The authors explain that the rise of the IoT has led to an increased need for security in transportation systems, especially in maritime transportation, where cyber‐attacks can have severe consequences.…”

Maritime Autonomous Surface Ships: A Review of Cybersecurity Challenges, Countermeasures, and Future Perspectives

“…These techniques can identify patterns and deviations from normal behavior without needing labeled training data. Unsupervised learning models can adapt to new and evolving threats, providing a cost-effective solution for smaller operators aiming for high detection performance [72] [73]. Open-source ML frameworks and tools can be employed in the realm of low-budget yet practical solutions.…”