Abstract:Since its inception, the Internet has been rapidly evolving. With the advancement of science and technology and the explosive growth of the population, the demand for the Internet has been on the rise. Many applications in education, healthcare, entertainment, science, and more are being increasingly deployed based on the internet. Concurrently, malicious threats on the internet are on the rise as well. Distributed Denial of Service (DDoS) attacks are among the most common and dangerous threats on the internet today. The scale and complexity of DDoS attacks are constantly growing. Intrusion Detection Systems (IDS) have been deployed and have demonstrated their effectiveness in defense against those threats. In addition, the research of Machine Learning (ML) and Deep Learning (DL) in IDS has gained effective results and significant attention. However, one of the challenges when applying ML and DL techniques in intrusion detection is the identification of unknown attacks. These attacks, which are not encountered during the system’s training, can lead to misclassification with significant errors. In this research, we focused on addressing the issue of Unknown Attack Detection, combining two methods: Spatial Location Constraint Prototype Loss (SLCPL) and Fuzzy C-Means (FCM). With the proposed method, we achieved promising results compared to traditional methods. The proposed method demonstrates a very high accuracy of up to 99.8% with a low false positive rate for known attacks on the Intrusion Detection Evaluation Dataset (CICIDS2017) dataset. Particularly, the accuracy is also very high, reaching 99.7%, and the precision goes up to 99.9% for unknown DDoS attacks on the DDoS Evaluation Dataset (CICDDoS2019) dataset. The success of the proposed method is due to the combination of SLCPL, an advanced Open-Set Recognition (OSR) technique, and FCM, a traditional yet highly applicable clustering technique. This has yielded a novel method in the field of unknown attack detection. This further expands the trend of applying DL and ML techniques in the development of intrusion detection systems and cybersecurity. Finally, implementing the proposed method in real-world systems can enhance the security capabilities against increasingly complex threats on computer networks.

Detection Scheme of Impersonation Attack Based on Sarsa(Lambda) Algorithm in Fog Computing

Virtual Mac Spoofing Detection Through Deep Learning

FogSec: A secure and effective mutual authentication scheme for fog computing

Design of secure key management and user authentication scheme for fog computing services

A distributed ensemble design based intrusion detection system using fog computing to protect the internet of things networks

LAAKA: Lightweight Anonymous Authentication and Key Agreement Scheme for Secure Fog-driven IoT Systems

Enhancement of an IoT hybrid intrusion detection system based on fog-to-cloud computing

Securing the Fog Computing Environment and Enhancing Resource Allocation

M-RL: A mobility and impersonation-aware IDS for DDoS UDP flooding attacks in IoT-Fog networks

Intelligent Computing Collaboration for the Security of the Fog Internet of Things

A Fast and Scalable Authentication Scheme in IoT for Smart Living

A secure signature‐based access control and key management scheme for fog computing‐based IoT‐enabled big data applications

Anomaly Detection for IOT/Cloud-Based Model in Fog Computing Using Machine Learning

Detection of Information leakage in cloud

Toward a Real-Time TCP SYN Flood DDoS Mitigation Using Adaptive Neuro-Fuzzy Classifier and SDN Assistance in Fog Computing

Spoofing Attack Detection Using Machine Learning in Cross-Technology Communication

An explainable nature-inspired cyber attack detection system in Software-Defined IoT applications

A Novel Differential Game Model-Based Intrusion Response Strategy in Fog Computing

Genetic Algorithm based feature selection and Naïve Bayes for anomaly detection in fog computing environment

FIDS: Fuzzy Intrusion Detection System for simultaneous detection of DoS/DDoS attacks in Cloud computing

Unknown DDoS Attack Detection with Fuzzy C-Means Clustering and Spatial Location Constraint Prototype Loss