Abstract:Threat situation awareness is one of the new major technologies to avoid network attacks and ensure equipment security. Facing the current IoT network architecture which is characterized by end equipments’ complex services, huge traffic and computing marginalization, real time threat situation awareness based on network traffic can effectively warn and clean latent threat. However, the existing threat situation awareness methods are mostly unitary and dependent on the central node for collection, detection and cleaning. First, it takes too much bandwidth and is not suitable for high-speed scenes. Second, the transmission of traffic or log leads to poor privacy and risk of leakage. Most of all, the perception time is too long, which leads to the performance degradation. This paper proposes a threat situation awareness architecture based on IoT edge and network traffic. Firstly, this paper designs an edge computing device SIE based on CPU and FPGA, the FPGA pipeline is used to analyze the traffic and summarize it in real time. A fast threat situation detection method deployed on SIE’s CPU is proposed which uses flow entropy algorithm to generate situation information. Secondly, this paper introduces the threat situation understanding method based on machine learning. It improves the AdaBoost algorithm and uses uploaded situation information to judge the threat in the traffic. Finally, the method obtains the defensive measure according to the threat intelligence. It can issue the SIE for situation projection and completes threat situation awareness closed loop. Experimental results on KDD99, UNSW-NB15 show that under the premise of ensuring the normal business of IoT equipment and the second level early warning ability, the proposed method can still show good performance under the recognition recall rate, success rate of cleaning threat and other indicators.

An Edge-Driven Security Framework for Intelligent Internet of Things

Architecture, Challenges and Applications of Edge Computing

Edge Computing Security: State of the Art and Challenges

A User-centric Security Solution for Internet of Things and Edge Convergence

A Security Framework to Protect Edge Supported Software Defined Internet of Things Infrastructure.

Toward Data Security in Edge Intelligent IIoT

The Review of IoT Security Framework Based on Mobile Edge Computing

A Trusted Edge Computing System Based on Intelligent Risk Detection for Smart IoT

Framework and Security Threats on Internet of Things and Survey of Corresponding Strategies

Trusted Edge Computing System Based on Intelligent Risk Detection for Smart IoT

Multidimensional Behavioral Profiling of Internet-of-things in Edge Networks.

A Security Framework for the Internet of Things in the Future Internet Architecture

Leveraging Edge Learning and Game Theory for Intrusion Detection in Internet of Things

New Security State Awareness Model for IoT Devices with Edge Intelligence

Security of Intelligent Edge Computing: a Survey

Artificial Intelligence for Securing IoT Services in Edge Computing: A Survey

EdgeKeeper: a Trusted Edge Computing Framework for Ubiquitous Power Internet of Things

A Survey of Security Architectures for Edge Computing-Based IoT

Secure IoT Edge: Threat Situation Awareness Based on Network Traffic

SecIoT: a security framework for the Internet of Things

Edge Security: Challenges and Issues