Scalable machine learning-based intrusion detection system for IoT-enabled smart cities

• Main Authors: Rahman, Md. Arafatur, Asyhari, A. Taufiq, Leong, L. S., Satrya, G. B., Tao, M. Hai, Mohamad Fadli, Zolkipli
• Format: Article
• Language: English; English
• Published: Elsevier Ltd 2020
• Subjects: QA76 Computer software; TA Engineering (General). Civil engineering (General); TK Electrical engineering. Electronics Nuclear engineering
• Online Access: http://umpir.ump.edu.my/id/eprint/28942/1/Scalable%20machine%20learning-based%20intrusion%20detection%20system%20for%20IoT_FULL.pdf; http://umpir.ump.edu.my/id/eprint/28942/2/Scalable%20machine%20learning-based%20intrusion%20detection%20system%20for%20IoT.pdf; http://umpir.ump.edu.my/id/eprint/28942/; https://doi.org/10.1016/j.scs.2020.102324; https://doi.org/10.1016/j.scs.2020.102324
• Institution: Universiti Malaysia Pahang

Given a scale expansion of Internet of Things for sustainable resource management in smart cities, proper design of an intrusion detection system (IDS) is critical to safeguard the future network infrastructure from intruders. With the growth of connected things, the most-widely used centralized (cloud-based) IDS often suffers from high latency and network overhead, thereby resulting in unresponsiveness to attacks and slow detection of malicious users. In this paper, we address the limitation of centralized IDS for resource-constrained devices by proposing two methods, namely semi-distributed and distributed, that combine well-performing feature extraction and selection and exploit potential fog-edge coordinated analytics. In order to distribute the computational tasks, we individually develop parallel machine-learning models corresponding to a partitioned attack dataset. In the semi-distributed case, the parallel models, running on the edge side, are applied for side-by-side feature selections, which are then followed by a single multi-layer perceptron classification running on the fog side. In the distributed case, the parallel models individually perform both the feature selection and multi-layer perceptron classification after which the outputs are combined by a coordinating edge or fog for final decision making. Based on the comparative study of existing works, the numerical results demonstrate the promise of the proposed methods, giving a comparable detection accuracy to the superior centralized IDS as well as exemplify their inherent trade-offs between the accuracy and building time performance.