Abstract:The Internet of Things (IoT) offers unprecedented opportunities to access anything from anywhere and at any time. It is, therefore, not surprising that the IoT acts as a paramount infrastructure for most modern and envisaged systems, including but not limited to smart homes, e-health, and intelligent transportation systems. However, the prevalence of IoT networks and the important role they play in various critical aspects of our lives make them a target for various types of advanced cyberattacks: Dyn attack, BrickerBot, Sonic, Smart Deadbolts, and Silex are just a few examples. Motivated by the need to protect IoT networks, this paper proposes SEHIDS: Self Evolving Host-based Intrusion Detection System. The underlying approach of SEHIDS is to equip each IoT node with a simple Artificial Neural Networks (ANN) architecture and a lightweight mechanism through which an IoT device can train this architecture online and evolves it whenever its performance prediction is degraded. By this means, SEHIDS enables each node to generate the ANN architecture required to detect the threats it faces, which makes SEHIDS suitable for the heterogeneity and turbulence of traffic amongst nodes. Moreover, the gradual evolution of the SEHIDS architecture facilitates retaining it to its near-minimal configurations, which saves the resources required to compute, store, and manipulate the model's parameters and speeds up the convergence of the model to the zero-classification regions. It is noteworthy that SEHIDS specifies the evolving criteria based on the outcomes of the built-in model's loss function, which is, in turn, facilitates using SEHIDS to develop the two common types of IDS: signature-based and anomaly-based. Where in the signature-based IDS version, a supervised architecture (i.e., multilayer perceptron architecture) is used to classify different types of attacks, while in the anomaly-based IDS version, an unsupervised architecture (i.e., replicator neuronal network) is used to distinguish benign from malicious traffic. Comprehensive assessments for SEHIDS from different perspectives were conducted with three recent datasets containing a variety of cyberattacks targeting IoT networks: BoT-IoT, TON-IOT, and IoTID20. These results of assessments demonstrate that SEHIDS is able to make accurate predictions of 1 True Positive and is suitable for IoT networks with the order of small fractions of the resources of typical IoT devices.

HSESR: Hierarchical Software Execution State Representation for Ultra-Low-Latency Threat Alerting over Internet of Things

Edge-based IIoT Malware Detection for Mobile Devices with Offloading

HorusEye: A Realtime IoT Malicious Traffic Detection Framework using Programmable Switches

Machine Learning-Based IDS for Software-Defined 5G Network

Trusted Edge Computing System Based on Intelligent Risk Detection for Smart IoT

A Trusted Edge Computing System Based on Intelligent Risk Detection for Smart IoT

SeIoT: Detecting Anomalous Semantics in Smart Homes Via Knowledge Graph

Efficient Intrusion Detection Toward IoT Networks Using Cloud–edge Collaboration

A Collaborative Stealthy DDoS Detection Method Based on Reinforcement Learning at the Edge of Internet of Things

A Collaborative Stealthy DDoS Detection Method based on Reinforcement Learning at the Edge of the Internet of Things

SEHIDS: Self Evolving Host-Based Intrusion Detection System for IoT Networks

Empowering IoT security: an innovative handover-driven node selection approach to tackle conscious mobile eavesdropping

Enhancing Cybersecurity in IoT Networks: A Deep Learning Approach to Anomaly Detection

LIRAD: lightweight tree-based approaches on resource constrained IoT devices for attack detection

Leveraging Edge Learning and Game Theory for Intrusion Detection in Internet of Things

Designing Efficient Sinkhole Attack Detection Mechanism in Edge-Based IoT Deployment

System Statistics Learning-Based IoT Security: Feasibility and Suitability

Faster and Better: Detecting Vulnerabilities in Linux-based IoT Firmware with Optimized Reaching Definition Analysis

Secure multi-path routing for Internet of Things based on trust evaluation

Efficient Cyber Security Framework for IoT Using Machine Learning Algorithms

A hybrid approach using support vector machine rule-based system: detecting cyber threats in internet of things