Abstract | Due to various limitations, such as limited power supply, the lack of storage capability and processing power, Internet of Things-based smart home networks have become vulnerable to various cyber-security attacks including Distributed Denial of Service (DDoS) attacks. These attacks are a malicious attempt to exhaust and overwhelm the target system resources, which has significant impact on the operation of smart home net- works. This paper proposes a novel, efficient and lightweight DDoS attack detection scheme in smart home networks, which employs artificial neural networks (ANN) to classify smart home networks traffic into DDoS attacks or normal traffic. The proposed solution is evaluated on four datasets, namely, IoT-23, DS2OS, NUSW-NB15GT and CICDDOS2019. Experiments were conducted on two types of ANN models, i.e., Multilayered Perceptron (MLP) and LongShort-Term Memory (LSTM), which achieved 99.78% and 99.98% accuracy, respectively. |
---|
References | References [1] Yasir Mehmood, Farhan Ahmad, Ibrar Yaqoob, Asma Adnane, Muhammad Imran, and Sghaier Guizani. Internet-of-Things-Based Smart Cities: Recent Advances and Challenges. IEEE Communications Magazine, pages 16–24, 2017. doi:10.1109/MCOM.2017.1600514. [2] Cisco. Cisco Annual Internet Report (2018–2023) White Paper. Cisco, March 2020. Accessed on 09/06/2022. [3] Marwane Zekri, Said El Kafhali, Noureddine Aboutabit, and Youssef Saadi. Ddos attack detection using machine learning techniques in cloud computing environments. In 2017 3rd international conference of cloud computing technologies and applications (CloudTech), pages. 1–7. IEEE, 2017. [4] Eirini Anthi, Lowri Williams, Małgorzata Słowin´ska, George Theodorakopoulos, and Pete Burnap. A super- vised intrusion detection system for smart home iot de- vices. IEEE Internet of Things Journal, 6(5):9042–9053, 2019. [5] Mahmudul Hasan, Md Milon Islam, Md Ishrak Islam Zarif, and MMA Hashem. Attack and anomaly detec- tion in iot sensors in iot sites using machine learning ap- proaches. Internet of Things, 7:100059, 2019. [6] Dragan Perakovic´, Marko Perisˇa, and Ivan Cvitic´. Anal- ysis of the iot impact on volume of ddos attacks. XXXIII Simpozijum o novim tehnologijama u posˇtanskom i telekomunikacionom saobrac´aju–PosTel, 2015:295–304, 2015. [7] Akshat Gaurav, B. B. Gupta, Ching-Hsien Hsu, Shingo Yamaguchi, and Kwok Tai Chui. Fog layer-based ddos attack detection approach for internet-of-things (iots) de- vices. In 2021 IEEE International Conference on Con- sumer Electronics (ICCE), 2021. [8] Neungsoo Park and Hyung Keun Ahn. Multi-layer rnn- based shortterm photovoltaic power forecasting using iot dataset. In 2019 AEIT International Annual Conference (AEIT), pages 1–5, 2019. [9] Muhammad Asad, Muhammad Asim, Talha Javed, Mirza O Beg, Hasan Mujtaba, and Sohail Abbas. Deep- detect detection of distributed denial of service attacks using deep learning. The Computer Journal, 63(7):983– 994, 2020. [10] Gabriel Chukwunonso Amaizu, Cosmas Ifeanyi Nwakanma, Sanjay Bhardwaj, JM Lee, and Dong- Seong Kim. Composite and efficient ddos attack detection framework for b5g networks. Computer Networks, 188:107871, 2021. [11] Abdullah Emir Cil, Kazim Yildiz, and Ali Buldu. Detec- tion of ddos attacks with feed forward based deep neu- ral network model. Expert Systems with Applications, 169:114520, 2021. [12] Markus Ring, Sarah Wunderlich, Deniz Scheuring, Di- eter Landes, and Andreas Hotho. A survey of network- based intrusion detection data sets. Computers & Secu- rity, 86:147–167, 2019. [13] Mohammad M Shurman, Rami M Khrais, Abdulrah- man A Yateem, et al. Dos and ddos attack detection using deep learning and ids. Int. Arab J. Inf. Technol., 17(4A):655–661, 2020. [14] M Revathy, S Kamalakkannan, and P Kavitha. Machine learning based prediction of dropout students from the ed- ucation university using smote. In 2022 4th International Conference on Smart Systems and Inventive Technology (ICSSIT), pages 1750–1758. IEEE, 2022. [15] N. Abdalgawad, A. Sajun, Y. Kaddoura, I. A. Zualkernan, and F. Aloul. Generative deep learning to detect cyberat- tacks for the iot-23 dataset. IEEE Access, 10, Dec 2021. doi:10.1109/ACCESS.2021.3140015. [16] Nour Moustafa and Jill Slay. UNSW-NB15: a compre- hensive data set for network intrusion detection systems (UNSW-NB15 network data set). In Military Commu- nications and Information Systems Conference (MilCIS), pages 1–6, 2015. [17] FX Aubet and MO Pahl. DS2OS traffic traces: IoT traffic traces gathered in a the DS2OS IoT environment, 2018. Available Online: https://www.kaggle.com/datasets/francoisxa/ds2ostraffictraces (Accessed: 07/06/2022). [18] Shail Saharan and Vishal Gupta. Prevention of Dr- DoS Amplification Attacks by Penalizing the Attackers in SDN Environment. In International Conference on Ad- vanced Information Networking and Applications, pages 684–696. Springer, 2022. [19] Shaleeza Sohail, Zongwen Fan, Xin Gu, and Fariza Sab- rina. Explainable and optimally configured artificial neu- ral networks for attack detection in smart homes. arXiv preprint arXiv:2205.08043, 2022. [20] Ashfaq Ahmad Najar and S Manohar Naik. Ddos attack detection using mlp and random forest algorithms. Inter- national Journal of Information Technology, pages 1–11, 2022. |
---|