Lightweight, Trust-Managing, and Privacy-Preserving Collaborative Intrusion Detection for Internet of Things
Source abstract
Abstract
This research introduces a comprehensive collaborative intrusion detection system (CIDS) framework aimed at bolstering the security of Internet of Things (IoT) environments by synergistically integrating lightweight architecture, trust management, and privacy-preserving mechanisms. The proposed hierarchical architecture spans edge, fog, and cloud layers, ensuring efficient and scalable collaborative intrusion detection. Trustworthiness is established through the incorporation of distributed ledger technology (DLT), leveraging blockchain frameworks to enhance the reliability and transparency of communication among IoT devices. Furthermore, the research adopts federated learning (FL) techniques to address privacy concerns, allowing devices to collaboratively learn from decentralized data sources while preserving individual data privacy. Validation of the proposed approach is conducted using the CICIoT2023 dataset, demonstrating its effectiveness in enhancing the security posture of IoT ecosystems. This research contributes to the advancement of secure and resilient IoT infrastructures, addressing the imperative need for lightweight, trust-managing, and privacy-preserving solutions in the face of evolving cybersecurity challenges. According to our experiments, the proposed model achieved an average accuracy of 97.65%, precision of 97.65%, recall of 100%, and F1-score of 98.81% when detecting various attacks on IoT systems with heterogeneous devices and networks. The system is a lightweight system when compared with traditional intrusion detection that uses centralized learning in terms of network latency and memory consumption. The proposed system shows trust and can keep private data in an IoT environment.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Privacy-Preserving Technologies in Data · Network Security and Intrusion Detection · Internet Traffic Analysis and Secure E-voting
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of Computer Science and Systems Engineering, Wrocław University of Science and Technology, 50-370 Wrocław, Poland
School of Computing, Telkom University, Bandung 40257, Indonesia
References (39)
Show source-provided references
1. Internet of Things (IoT) Security Intelligence: A Comprehensive Overview, Machine Learning Solutions and Research Directions10.1007/s11036-022-01937-3 ↗
2. Ensemble averaging deep neural network for botnet detection in heterogeneous Internet of Things devices10.1038/s41598-024-54438-6 ↗
3. A fog-based collaborative intrusion detection framework for smart grid10.1002/nem.2107 ↗
4. de Souza, C.A., Westphall, C.B., Machado, R.B., Loffi, L., Westphall, C.M., and Geronimo, G.A. (2022). Intrusion detection and prevention in fog based IoT environments: A systematic literature review. Comput. Netw., 214.10.1016/j.comnet.2022.109154 ↗
5. Wardana, A.A., Kołaczek, G., and Sukarno, P. (2022). Intelligent Information and Database Systems, Springer.
6. AutoTrust: A privacy-enhanced trust-based intrusion detection approach for internet of smart things10.1016/j.future.2022.07.026 ↗
7. Surveying Trust-Based Collaborative Intrusion Detection: State-of-the-Art, Challenges and Future Directions10.1109/COMST.2021.3139052 ↗
8. Alli, A.A., and Alam, M.M. (2020). The fog cloud of things: A survey on concepts, architecture, standards, tools, and applications. Internet Things, 9.10.1016/j.iot.2020.100177 ↗
9. Gkogkos, G., Patsonakis, C., Drosou, A., and Tzovaras, D. (2023). A DLT-based framework for secure IoT infrastructure in smart communities. Technol. Soc., 74.10.1016/j.techsoc.2023.102329 ↗
10. A survey on federated learning for resource-constrained IoT devices10.1109/JIOT.2021.3095077 ↗
11. Sarhan, M., Lo, W.W., Layeghy, S., and Portmann, M. (2022). HBFL: A hierarchical blockchain-based federated learning framework for collaborative IoT intrusion detection. Comput. Electr. Eng., 103.10.1016/j.compeleceng.2022.108379 ↗
12. Ashraf, E., Areed, N.F.F., Salem, H., Abdelhay, E.H., and Farouk, A. (2022). FIDChain: Federated Intrusion Detection System for Blockchain-Enabled IoT Healthcare Applications. Healthcare, 10.10.3390/healthcare10061110 ↗
13. CGAN-Based Collaborative Intrusion Detection for UAV Networks: A Blockchain-Empowered Distributed Federated Learning Approach10.1109/JIOT.2022.3200121 ↗
14. Federated Intrusion Detection in Blockchain-Based Smart Transportation Systems10.1109/TITS.2021.3119968 ↗
15. Privacy-Preserved Cyberattack Detection in Industrial Edge of Things (IEoT): A Blockchain-Orchestrated Federated Learning Approach10.1109/TII.2022.3167663 ↗
16. Neto, E.C.P., Dadkhah, S., Ferreira, R., Zohourian, A., Lu, R., and Ghorbani, A.A. (2023). CICIoT2023: A Real-Time Dataset and Benchmark for Large-Scale Attacks in IoT Environment. Sensors, 23.10.20944/preprints202305.0443.v1 ↗
17. Toward Enhanced Attack Detection and Explanation in Intrusion Detection System-Based IoT Environment Data10.1109/ACCESS.2023.3336678 ↗
18. A survey of coordinated attacks and collaborative intrusion detection10.1016/j.cose.2009.06.008 ↗
19. Marchetti, M., Messori, M., and Colajanni, M. (2009). Information Security, Proceedings of the 12th International Conference, ISC 2009, Pisa, Italy, 7–9 September 2009, Springer.
20. Data fusion approach for collaborative anomaly intrusion detection in blockchain-based systems10.1109/JIOT.2021.3053842 ↗
21. Shetty, T., Negi, S., Kulshrestha, A., Choudhary, S., Ramani, S., and Karuppiah, M. (2022). Blockchain Technology for Emerging Applications, Academic Press.
22. Blockchain-Enabled Intrusion Detection and Prevention System of APTs within Zero Trust Architecture10.1109/ACCESS.2022.3200165 ↗
23. Subathra, G., Antonidoss, A., and Singh, B.K. (2022). Decentralized Consensus Blockchain and IPFS-Based Data Aggregation for Efficient Data Storage Scheme. Secur. Commun. Netw., 2022.10.1155/2022/3167958 ↗
24. IFCIoT: Integrated Fog Cloud IoT: A novel architectural paradigm for the future Internet of Things10.1109/MCE.2017.2684981 ↗
25. Roy, S., Li, J., and Bai, Y. (2022). A Two-layer Fog-Cloud Intrusion Detection Model for IoT Networks. Internet Things, 19.10.1016/j.iot.2022.100557 ↗
26. Nilsson, A., Smith, S., Ulm, G., Gustavsson, E., and Jirstrand, M. (2018, January 10). A Performance Evaluation of Federated Learning Algorithms. Proceedings of the Second Workshop on Distributed Infrastructures for Deep Learning, Rennes, France.10.1145/3286490.3286559 ↗
27. Federated Learning: Challenges, Methods, and Future Directions
28. Deep learning10.1038/nature14539 ↗
29. Aggarwal, C.C. (2018). Neural Networks and Deep Learning, Springer.10.1007/978-3-319-94463-0 ↗
30. Federated learning on non-IID data: A survey10.1016/j.neucom.2021.07.098 ↗
31. Intrusion Detection Systems: A State-of-the-Art Taxonomy and Survey10.1007/s13369-022-07412-1 ↗
32. Interoperability in Blockchain: A Survey10.1109/TKDE.2023.3275220 ↗
33. Hazra, A., Rana, P., Adhikari, M., and Amgoth, T. (2023). Fog computing for next-generation Internet of Things: Fundamental, state-of-the-art and research challenges. Comput. Sci. Rev., 48.10.1016/j.cosrev.2023.100549 ↗
34. New approach of multi-path reliable transmission for marginal wireless sensor network10.1007/s11276-019-02216-y ↗
35. Resource optimizing federated learning for use with IoT: A systematic review10.1016/j.jpdc.2023.01.006 ↗
36. A measurement study of correlations of Internet flow characteristics10.1016/j.comnet.2005.02.008 ↗
37. Sathish, K., Hamdi, M., Chinthaginjala, R., Pau, G., Ksibi, A., Anbazhagan, R., Abbas, M., and Usman, M. (2023). Reliable Data Transmission in Underwater Wireless Sensor Networks Using a Cluster-Based Routing Protocol Endorsed by Member Nodes. Electronics, 12.10.3390/electronics12061287 ↗
38. Lee, J.Y., Lee, W., Kim, H., and Kim, H. (2020). Adaptive TCP Transmission Adjustment for UAV Network Infrastructure. Appl. Sci., 10.10.3390/app10031161 ↗
39. Internet traffic measurement and analysis in a high speed network environment: Workload and flow characteristics10.1109/JCN.2000.6596720 ↗