사물인터넷 환경에서 안전성과 신뢰성 향상을 위한 Dual-IDS 기법에 관한 연구
A Study on Dual-IDS Technique for Improving Safety and Reliability inInternet of Things
1
조회
0
다운로드
2
인용
0
참고문헌
키워드
초록
IoT can be connected through a single network not only objects which can be connected to existing internet but also objects which has communication capability. This IoT environment will be a huge change to the existing communication paradigm. However, the big security problem must be solved in order to develop further IoT. Security mechanisms reflecting these characteristics should be applied because devices participating in the IoT have low processing ability and low power. In addition, devices which perform abnormal behaviors between objects should be also detected. Therefore, in this paper, we proposed D-IDS technique for efficient detection of malicious attack nodes between devices participating in the IoT. The proposed technique performs the central detection and distribution detection to improve the performance of attack detection. The central detection monitors the entire network traffic at the boundary router using SVM technique and detects abnormal behavior. And the distribution detection combines RSSI value and reliability of node and detects Sybil attack node. The performance of attack detection against malicious nodes is improved through the attack detection process. The superiority of the proposed technique can be verified by experiments.
Abstract
IoT can be connected through a single network not only objects which can be connected to existing internet but also objects which has communication capability. This IoT environment will be a huge change to the existing communication paradigm. However, the big security problem must be solved in order to develop further IoT. Security mechanisms reflecting these characteristics should be applied because devices participating in the IoT have low processing ability and low power. In addition, devices which perform abnormal behaviors between objects should be also detected. Therefore, in this paper, we proposed D-IDS technique for efficient detection of malicious attack nodes between devices participating in the IoT. The proposed technique performs the central detection and distribution detection to improve the performance of attack detection. The central detection monitors the entire network traffic at the boundary router using SVM technique and detects abnormal behavior. And the distribution detection combines RSSI value and reliability of node and detects Sybil attack node. The performance of attack detection against malicious nodes is improved through the attack detection process. The superiority of the proposed technique can be verified by experiments.
참고문헌 (15)
- Shancang Li, "The internet of things: a survey", Springer Information Systems Frontiers, 17(2), pp.243~259 (2015)
- M. Hossain, "Towards an Analysis of Security Issues, Challenges, and Open Problems in the Internet of Things", 2015 IEEE World Congress on Services (2015)
- Okan CAN, "A Survey of Intrusion Detection Systems in Wireless Sensor Networks", 6th International Conference on Modeling, Simulation, and Applied Optimization (2015)
- Kasinathan, Prabhakaran, "Denial-of-Service detection in 6LoWPAN based internet of things", Wireless and Mobile Computing, Networking and Communications (WiMob), 2013 IEEE 9th International Conference on (2013), IEEE
- 최희식, "사물인터넷 보안 문제제기와 대안", (사)디지털산업정보학회 논문지, 11(1), pp.69~78 (2015), (사)디지털산업정보학회[DOI]
- Chen Jun, "Design of Complex Event-Processing IDS in Internet of Things", Sixth International Conference on Measuring Technology and Mechatronics Automation (2014), IEEE
- A. Anand, "An Overview on Intrusion Detection System and Types of Attacks It Can Detect Considering Different Protocols", International Journal of Advanced Re-search in Computer Science and Software Engineering, 2(8) (2012)
- M. Hossain, "A lightweight rewall for wireless sensor networks", Distributed Computing in Sensor Systems, pp.258~272 (2010)
- M. Livani, "A pca-based distributed approach for intrusion detection in wireless sensor networks", International Symposium on Computer Networks and Distributed Systems, pp.55~60 (2011), IEEE
- Raza, Shahid, "SVELTE: Real-time intrusion detection in the Internet of Things", Ad hoc networks, 11(8), pp.2661~2674 (2013)
- Q. M. Ashraf, "Autonomic schemes for threat mitigation in Internet of Things", Journal of Network and Computer Applications, 49, pp.112~127 (2015)
- J. Gubbi, "Internet of Things (IoT): A vision, architectural elements, and future directions", Future Generation Computer Systems, 29(7), pp.1645~1660 (2013)
- Kashinahan, Prabhakaran, "Denail-of-Service detection in 6LoWPAN based internet of things", Wireless and Mobile Computing, Networking and Communications (2013)
- Le, Anhtuan, "Specification-based IDS for securing RPL from topology attacks", Wirelees Days (WD), 2011 IFIP (2011), IEEE
- Jun, Chen, "Design of Complex Event Processing IDS in Internet of Things", Measuring Technology and Mechanronics Automation (ICMYMA), 2014 Sixth International Conference on (2014), IEEE