AntiConcealer: Reliable Detection of Adversary Concealed Behaviors in EdgeAI-Assisted IoT
- 6 August 2021
- journal article
- research article
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Internet of Things Journal
- Vol. 9 (22) , 22184-22193
Abstract
Internet of Things (IoT) is one of the rapidly developing technologies today that attract huge real-world applications. However, the reality is that IoT is easily vulnerable to numerous types of cyberattacks and anomalies. Detecting them is becoming increasingly challenging day by day due to limitations with IoT devices and threat intelligence. Particularly, one of the most challenging problems is to detect the existence of malicious adversaries that continuously adapt or conceal their behaviors in IoT to hide their actions and to make the IoT security protocol ineffective. In this article, we study this problem at the IoT device level that can be a great idea to avoid potential attacks. We present AntiConcealer , an edge-aided IoT framework, and propose an edge artificial intelligence-enabled approach (EdgeAI) for detecting adversary concealed behaviors in the IoT. We first develop an adversary behavior model and use this to identify mid-attack temporal patterns by learning the multivariate Hawkes process (MHP), a kind of point process as a random and finite series of events (e.g., behaviors) controlled by a probabilistic model. Naturally, learning MHP processed on EdgeAI reveals the influence of the concealed behaviors of adversaries in the IoT. These concealed behaviors are then grouped using a nonnegative weighted influence matrix. To observe the performance of the AntiConcealer framework through evaluation, we employ honeypots integrated with edge servers and verify the usability and reliability of adversary behavioral identification.Keywords
This publication has 25 references indexed in Scilit:
- Threat of Adversarial Attacks on Deep Learning in Computer Vision: A SurveyIEEE Access, 2018
- Adversarial Machine Learning in Malware Detection: Arms Race between Evasion Attack and Defense2017
- Botnets and Internet of Things SecurityComputer, 2017
- Randomized Prediction Games for Adversarial Machine LearningIEEE Transactions on Neural Networks and Learning Systems, 2016
- Identifying Attack Propagation Patterns in Honeypots Using Markov Chains Modeling and Complex Networks Analysis2016
- Beyond data2016
- Survey of Probabilistic Graphical Models2013
- A framework for attack patterns' discovery in honeynet dataDigital Investigation, 2008
- Bayesian Variable Selection in Linear RegressionJournal of the American Statistical Association, 1988
- On Lewis' simulation method for point processesIEEE Transactions on Information Theory, 1981