journal article·2022-07-30Open access

IIoT Malware Detection Using Edge Computing and Deep Learning for Cybersecurity in Smart Factories

Ho-myung Kim, Kyung-ho Lee

Applied Sciences· Volume 12· Issue 15

Abstract

The smart factory environment has been transformed into an Industrial Internet of Things (IIoT) environment, which is an interconnected and open approach. This has made smart manufacturing plants vulnerable to cyberattacks that can directly lead to physical damage. Most cyberattacks targeting smart factories are carried out using malware. Thus, a solution that efficiently detects malware by monitoring and analyzing network traffic for malware attacks in smart factory IIoT environments is critical. However, achieving accurate real-time malware detection in such environments is difficult. To solve this problem, this study proposes an edge computing-based malware detection system that efficiently detects various cyberattacks (malware) by distributing vast amounts of smart factory IIoT traffic information to edge servers for deep learning processing. The proposed malware detection system consists of three layers (edge device, edge, and cloud layers) and utilizes four meaningful functions (model training and testing, model deployment, model inference, and training data transmission) for edge-based deep learning. In experiments conducted on the Malimg dataset, the proposed malware detection system incorporating a convolutional neural network with image visualization technology achieved an overall classification accuracy of 98.93%, precision of 98.93%, recall of 98.93%, and F1-score of 98.92%.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: Advanced Malware Detection Techniques · Network Security and Intrusion Detection · IoT and Edge/Fog Computing

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

School of Cybersecurity, Korea University, Seoul 02481, Korea

References (100+)

Show source-provided references
1. Hussain, Z., Akhunzada, A., Iqbal, J., Bibi, I., and Gani, A. (2021). Secure IIoT-enabled industry 4.0. Sustainability, 13.10.3390/su132212384 ↗
2. IMIDS: An Intelligent Intrusion Detection System against Cyber Threats in IoT10.3390/electronics11040524 ↗
3. Zorić, P., Musa, M., and Mijo Kuljanić, T. (2021, January 6–7). Smart Factory Environment: Review of Security Threats and Risks. Proceedings of the International Conference on Future Access Enablers of Ubiquitous and Intelligent Infrastructures, FABULOUS 2021, Virtual Event.10.1007/978-3-030-78459-1_15 ↗
4. Convergence of Blockchain and Edge Computing for Secure and Scalable IIoT Critical Infrastructures in Industry 4.010.1109/JIOT.2020.3025916 ↗
5. Dorobantu, O.G., and Halunga, S. (2020, January 5–6). Security threats in IoT. Proceedings of the 2020 International Symposium on Electronics and Telecommunications (ISETC), Timisoara, Romania.
6. IIoT Cybersecurity Risk Modeling for SCADA Systems10.1109/JIOT.2018.2822842 ↗
7. A Survey of IoT-Enabled Cyberattacks: Assessing Attack Paths to Critical Infrastructures and Services10.1109/COMST.2018.2855563 ↗
8. A Guide to Securing Industrial Control Networks: Integrating IT and OT Systems10.1109/MIAS.2019.2943630 ↗
9. Physical layer security for industrial wireless control systems: Basics and future directions10.1109/MIE.2018.2874385 ↗
10. Lee, K.T. (2022, May 20). Smart Factory Industrial R & D Strategy. Open Standards and ICT Association, Korea Internet Conference. Available online: http://past.krnet.or.kr/board/include/download.php?no=1924&db=dprogram&fileno=2.
11. Internet of Things and Edge Cloud Computing Roadmap for Manufacturing10.1109/MCC.2016.91 ↗
12. Learning-Based Energy-Efficient Resource Management by Heterogeneous RF/VLC for Ultra-Reliable Low-Latency Industrial IoT Networks10.1109/TII.2019.2933867 ↗
13. AI-Enhanced Offloading in Edge Computing: When Machine Learning Meets Industrial IoT10.1109/MNET.001.1800510 ↗
14. (2022, May 20). GE Report. Everything you Need Know About Industrial Internet of Things. GE. Available online: https://www.gereports.kr/everything-you-need-know-about-industrial-internet-of-things/.
15. Wu, Y., Huang, H., Wang, C.X., and Pan, Y. (2019). 5G-Enabled Internet of Things, CRC Press.10.1201/9780429199820 ↗
16. Zhang, J., Chen, H., Gong, L., Cao, J., and Gu, Z. (2019, January 23–25). The Current Research of IoT Security. Proceedings of the 2019 IEEE Fourth International Conference on Data Science in Cyberspace (DSC), Hangzhou, China.10.1109/DSC.2019.00059 ↗
17. pAElla: Edge AI-Based Real-Time Malware Detection in Data Centers10.1109/JIOT.2020.2986702 ↗
18. Deep Learning with Edge Computing: A Review10.1109/JPROC.2019.2921977 ↗
19. Learning IoT in Edge: Deep Learning for the Internet of Things with Edge Computing10.1109/MNET.2018.1700202 ↗
20. LightLog: A lightweight temporal convolutional network for log anomaly detection on the edge10.1016/j.comnet.2021.108616 ↗
21. Assessing IT availability risks in smart factory networks
22. Davis, J. (2022, May 20). Cybersecurity for Manufacturers: Securing the Digitized and Connected Factory; MForesight, Computing Community Consortium. Available online: https://cra.org/ccc/wp-content/uploads/sites/2/2017/10/MForesight-Cybersecurity-Report.pdf.
23. Security of smart manufacturing systems10.1016/j.jmsy.2018.04.007 ↗
24. Burke, R., Mussomeli, A., Laaper, S., Hartigan, M., and Sniderman, B. (2017). The Smart Factory, Deloitte University Press.
25. FTP Software (2022, May 20). 5 Ways to Mitigate Cybersecurity Risks in Smart Manufacturing. Available online: https://www.fpt-software.com/5-ways-to-mitigate-cybersecurity-risks-in-smart-manufacturing/.
26. The European Union Agency for Cybersecurity (2018). Good Practices for Security of Internet of Things in the Context of Smart Manufacturing, ENISA. Available online: https://www.enisa.europa.eu/publications/good-practices-for-security-of-iot.
27. Dhirani, L.L., Newe, T., and Armstrong, E. (2021). Industrial IoT, Cyber Threats, and Standards Landscape: Evaluation and Roadmap. Sensors, 21.10.3390/s21113901 ↗
28. KISA (2020). Security Model for Smart Factory, Korea Internet & Security Agency. Available online: https://www.kisa.or.kr/post/fileDownload?menuSeq=2060205&postSeq=11&attachSeq=2&lang_type=KO.
29. A Survey on the Edge Computing for the Internet of Things10.1109/ACCESS.2017.2778504 ↗
30. Lu, Y., Morris, K., and Frechette, S. (2022, May 20). Current Standards Landscape for Smart Manufacturing Systems; NISTIR-8107; NIST, Available online: https://nvlpubs.nist.gov/nistpubs/ir/2016/NIST.IR.8107.pdf.10.6028/NIST.IR.8107 ↗
31. Paharia, B., and Bhushan, K. (2020). A comprehensive review of distributed denial of service (DDoS) attacks in fog computing environment. Handbook of Computer Networks and Cyber Security, Springer.10.1007/978-3-030-22277-2_20 ↗
32. Security in fog computing: A novel technique to tackle an impersonation attack10.1109/ACCESS.2018.2884672 ↗
33. Rajendran, G., Nivash, R.S.R., Parthy, P.P., and Balamurugan, S. (2019, January 1–3). Modern security threats in the Internet of Things (IoT): Attacks and Countermeasures. Proceedings of the 2019 International Carnahan Conference on Security Technology (ICCST), Chennai, India.10.1109/CCST.2019.8888399 ↗
34. A survey of man in the middle attacks10.1109/COMST.2016.2548426 ↗
35. Abbas, N., Asim, M., Tariq, N., Baker, T., and Abbas, S. (2019). A Mechanism for Securing IoT-enabled Applications at the Fog Layer. J. Sens. Actuator Netw., 8.10.3390/jsan8010016 ↗
36. A New Malware Classification Framework Based on Deep Learning Algorithms10.1109/ACCESS.2021.3089586 ↗
37. Pedreira, V., Barros, D., and Pinto, P. (2021). A Review of Attacks, Vulnerabilities, and Defenses in Industry 4.0 with New Challenges on Data Sovereignty Ahead. Sensors, 21.10.3390/s21155189 ↗
38. Bakić, B., Milić, M., Antović, I., Savić, D., and Stojanović, T. 10 years since Stuxnet: What have we learned from this mysterious computer software worm? In Proceedings of the 2021 25th International Conference on Information Technology (IT), Zabljak, Montenegro, 16–20 February 2021.10.1109/IT51528.2021.9390103 ↗
39. Side-Channel Attacks in a Real Scenario10.26599/TST.2018.9010047 ↗
40. A Reliable Trust Computing Mechanism Based on Multisource Feedback and Fog Computing in Social Sensor Cloud10.1109/JIOT.2020.2981005 ↗
41. Khalid, A., Zainal, A., Maarof, M.A., and Ghaleb, F.A. (2021, January 29–31). Advanced Persistent Threat Detection: A Survey. Proceedings of the 2021 3rd International Cyber Resilience Conference (CRC), Langkawi Island, Malaysia.10.1109/CRC50527.2021.9392626 ↗
42. Javed, S.H., Ahmad, M.B., Asif, M., Almotiri, S.H., Masood, K., and Ghamdi, M.A.A. (2022). An Intelligent System to Detect Advanced Persistent Threats in Industrial Internet of Things (I-IoT). Electronics, 11.10.3390/electronics11050742 ↗
43. Attribution Classification Method of APT Malware in IoT Using Machine Learning Techniques
44. Bilge, L., and Dumitras, T. (2012, January 16–18). Before We Knew It: An Empirical Study of Zero-Day Attacks in the Real World. Proceedings of the 2012 ACM conference on Computer and Communications Security, Raleigh, NC, USA.10.1145/2382196.2382284 ↗
45. LSTM-Based Analysis of Industrial IoT Equipment10.1109/ACCESS.2018.2825538 ↗
46. Baracaldo, N., Chen, B., Ludwig, H., Safavi, A., and Zhang, R. (2018, January 2–7). Detecting Poisoning Attacks on Machine Learning in IoT Environments. Proceedings of the 2018 IEEE International Congress on Internet of Things (ICIOT), San Francisco, CA, USA.10.1109/ICIOT.2018.00015 ↗
47. Papernot, N., McDaniel, P., Goodfellow, I., Jha, S., Celik, Z.B., and Swami, A. (2017, January 2–6). Practical Black-Box Attacks against Machine Learning. Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security, Abu Dhabi, United Arab Emirates.10.1145/3052973.3053009 ↗
48. Alam, M.N., Sarma, D., Lima, F.F., Saha, I., Ulfath, R.E., and Hossain, S. (2020, January 20–22). Phishing attacks detection using machine learning approach. Proceedings of the 2020 Third International Conference on Smart Systems and Inventive Technology (ICSSIT), Tirunelveli, India.10.1109/ICSSIT48917.2020.9214225 ↗
49. (2022, May 20). Trend Micro. What Is Phishing? Trend Micro. Available online: https://www.trendmicro.com/en_us/what-is/phishing.html.
50. Hernandez, G., Arias, O., Buentello, D., and Jin, Y. (2014). Smart Nest Thermostat: A Smart Spy in Your Home, Black Hat USA.
51. Mrabet, H., Belguith, S., Alhomoud, A., and Jemai, A. (2020). A Survey of IoT Security Based on a Layered Architecture of Sensing and Data Analysis. Sensors, 20.10.3390/s20133625 ↗
52. Jang, J., Kim, Y., and Park, J. (2022, May 20). Current Status of Cyber Attacks and Response System in Smart Factory Environment. IITP Weekly Technology Trends. Available online: https://www.itfind.or.kr/publication/regular/weeklytrend/weekly/view.do?boardParam1=8265&boardParam2=8265.
53. Kisielius, J. (2022, May 20). Breaking Down the SolarWinds Supply Chain Attack. Available online: https://spycloud.com/solarwinds-attack-breakdown/.
54. The effect of the Colonial Pipeline shutdown on gasoline prices10.1016/j.econlet.2021.110122 ↗
55. Nguyen, L. (2022, January 23–26). Cybersecurity and Defending Critical Infrastructure. Proceedings of the Harvard Model Congress 2022, Boston, MA, USA.
56. Hajda, J., Jakuszewski, R., and Ogonowski, S. (2021). Security Challenges in Industry 4.0 PLC Systems. Appl. Sci., 11.10.3390/app11219785 ↗
57. Oueslati, N.E., Mrabet, H., Jemai, A., and Alhomoud, A. (2019, January 20–22). Comparative Study of the Common Cyber-physical Attacks in Industry 4.0. Proceedings of the 2019 International Conference on Internet of Things, Embedded Systems and Communications (IINTEC), Tunis, Tunisia.10.1109/IINTEC48298.2019.9112097 ↗
58. Proling and classifying the behavior of malicious codes10.1016/j.jss.2014.10.031 ↗
59. A novel kernel SVM algorithm with game theory for network intrusion detection
60. RDTIDS: Rules and decision tree-based intrusion detection system for internet-of-things networks10.3390/fi12030044 ↗
61. Roll forward validation based decision tree classification for detecting data integrity attacks in industrial internet of things10.3233/JIFS-169946 ↗
62. Design of cognitive fog computing for intrusion detection in Internet of Things10.1109/JCN.2018.000041 ↗
63. A new learning approach to malware classification using discriminative feature extraction10.1109/ACCESS.2019.2892500 ↗
64. Attack and anomaly detection in IoT sensors in IoT sites using machine learning approaches10.1016/j.iot.2019.100059 ↗
65. AI-Based Two-Stage Intrusion Detection for Software Defined IoT Networks10.1109/JIOT.2018.2883344 ↗
66. NBC-MAIDS: Naïve Bayesian classification technique in multi-agent system-enriched IDS for securing IoT against DDoS attacks10.1007/s11227-018-2413-7 ↗
67. Hodo, E., Bellekens, X., Hamilton, A., Dubouilh, P.L., Iorkyase, E., Tachtatzis, C., and Atkinson, R. (2016, January 11–13). Threat analysis of IoT networks Using Artificial Neural Network Intrusion Detection System. Proceedings of the 2016 International Symposium on Networks, Computers and Communications (ISNCC), Yasmine Hammamet, Tunisia.10.1109/ISNCC.2016.7746067 ↗
68. Kulkarni, R., and Venayagamoorthy, G. (2009, January 14–19). Neural network based secure media access control protocol for wireless sensor networks. Proceedings of the 2009 International Joint Conference on Neural Networks(IJCNN), Atlanta, GA, USA.10.1109/IJCNN.2009.5179075 ↗
69. Automated malware recognition method based on local neighborhood binary pattern10.1007/s11042-020-09376-6 ↗
70. Kan, Z., Wang, H., Xu, G., Guo, Y., and Chen, X. (2018, January 23–27). Towards Light-Weight Deep Learning Based Malware Detection. Proceedings of the 2018 IEEE 42nd Annual Computer Software and Applications Conference (COMPSAC), Tokyo, Japan.10.1109/COMPSAC.2018.00092 ↗
71. Raff, E., Barker, J., Sylvester, J., Brandon, R., Catanzaro, B., and Nicholas, C. (2017). Malware Detection by Eating a Whole EXE. Comput. Sci.
72. Identification of malicious activities in industrial internet of things based on deep learning models
73. Deep learning10.1038/nature14539 ↗
74. Nataraj, L. (2015). A Signal Processing Approach to Malware Analysis, University of California.
75. Nataraja, L., Jacobb, G., and Manjunatha, B. (2010). Detecting Packed Executables Based on Raw Binary Data, University of California. Technical Report.
76. Nataraj, L., Yegneswaran, V., Porras, P., and Zhang, J. (2011, January 21). A comparative assessment of malware classication using binary texture analysis and dynamic analysis. Proceedings of the 4th ACM workshop on Security and artificial intelligence, New York, NY, USA.10.1145/2046684.2046689 ↗
77. Nataraj, L., Kirat, D., Manjunath, B.S., and Vigna, G. (2013, January 9–13). Sarvam: Search and retrieVAL of malware. Proceedings of the Annual Computer Security Applications Conference (ACSAC) Workshop on Next Generation Malware Attacks and Defense (NGMAD), New Orleans, LA, USA.
78. Nguyen, X.H., Nguyen, X.D., Huynh, H.H., and Le, K.H. (2022). Realguard: A Lightweight Network Intrusion Detection System for IoT Gateways. Sensors, 22.10.3390/s22020432 ↗
79. Mal-Detect An intelligent visualization approach for malware detection
80. Althubiti, S.A., Jones, E.M., and Roy, K. (2018, January 21–23). LSTM for Anomaly-Based Network Intrusion Detection. Proceedings of the 2018 28th International Telecommunication Networks and Applications Conference (ITNAC), Sydney, NSW, Australia.10.1109/ATNAC.2018.8615300 ↗
81. Leveraging LSTM Networks for Attack Detection in Fog-to-Things Communications10.1109/MCOM.2018.1701270 ↗
82. LSTM Learning with Bayesian and Gaussian Processing for Anomaly Detection in Industrial IoT10.1109/TII.2019.2952917 ↗
83. Image-based malware classification using ensemble of CNN architectures (IMCEC)10.1016/j.cose.2020.101748 ↗
84. Jo, W., Kim, S., Lee, C., and Shon, T. (2020). Packet Preprocessing in CNN-Based Network Intrusion Detection System. Electronics, 9.10.3390/electronics9071151 ↗
85. A novel malware detection and family classification scheme for IoT based on DEAM and densenet
86. Data augmentation based malware detection using convolutional neural networks10.7717/peerj-cs.346 ↗
87. Yang, H., Chengy, L., and Chuahz, M.C. (2019, January 10–12). Deep-Learning-Based Network Intrusion Detection for SCADA Systems. Proceedings of the 2019 IEEE Conference on Communications and Network Security (CNS), Washington, DC, USA.10.1109/CNS.2019.8802785 ↗
88. SafeMan: A unified framework to manage cybersecurity and safety in manufacturing industry10.1002/spe.2879 ↗
89. Deep Learning: The Frontier for Distributed Attack Detection in Fog-to-Things Computing10.1109/MCOM.2018.1700332 ↗
90. AI4SAFE-IoT: An AI-powered secure architecture for edge layer of Internet of thing10.1007/s00521-020-04772-3 ↗
91. Alshahrani, H.M. (2021). Coll-iot: A collaborative intruder detection system for internet of things devices. Electronics, 10.10.3390/electronics10070848 ↗
92. Edge Computing: Vision and Challenges10.1109/JIOT.2016.2579198 ↗
93. Edge Learning for Surveillance Video Uploading Sharing in Public Transport Systems10.1109/TITS.2020.3008420 ↗
94. A survey on mobile edge computing: The communication perspective10.1109/COMST.2017.2745201 ↗
95. The Asimov Institute (2022, May 20). The Neural Network Zoo. Available online: https://www.asimovinstitute.org/neural-network-zoo/.
96. Akarsh, S., Simran, K., Poornachandran, P., Menon, V.K., and Soman, K.P. (2019, January 15–16). Deep Learning Framework and Visualization for Malware Classification. Proceedings of the 2019 5th International Conference on Advanced Computing & Communication Systems (ICACCS), Coimbatore, India.10.1109/ICACCS.2019.8728471 ↗
97. IMCFN: Image-based malware classification using fine-tuned convolutional neural network architecture10.1016/j.comnet.2020.107138 ↗
98. Image Based Malware Classification with Multimodal Deep Learning
99. Robust intelligent malware detection using deep learning10.1109/ACCESS.2019.2906934 ↗
100. Zhong, F., Chen, Z., Xu, M., Zhang, G., Yu, D., and Cheng, X. (2022). Malware-on-the-Brain: Illuminating Malware Byte Codes with Images for Malware Classification. IEEE Trans. Comput.10.1109/TC.2022.3160357 ↗