Unraveling the Decision-making Process Interpretable Deep Learning IDS for Transportation Network Security

Rajit Nair
{"title":"Unraveling the Decision-making Process Interpretable Deep Learning IDS for Transportation Network Security","authors":"Rajit Nair","doi":"10.54216/jcim.120205","DOIUrl":null,"url":null,"abstract":"The growing ubiquity of IoT-enabled devices in recent years emphasizes the critical need to strengthen transportation network safety and dependability. Intrusion detection systems (IDS) are crucial in preventing attacks on transport networks that rely on the Internet of Things (IoT). However, understanding the rationale behind deep learning-based IDS models may be challenging because they do not explain their findings. We offer an interpretable deep learning system that may be used to improve transportation network safety using IoT. To develop naturally accessible explanations for IDS projections, we integrate deep learning models with the Shapley Additive Reasons (SHAP) approach. By adding weight to distinct elements of the input data needed to develop the model, we increase the readability of so-called black box processes. We use the ToN_IoT dataset, which provides statistics on the volume of network traffic created by IoT-enabled transport systems, to assess the success of our strategy. We use a tool called CICFlowMeter to create network flows and collect data. The regularity of the flows, as well as their correlation with specific assaults, has been documented, allowing us to train and evaluate the IDS model. The experiment findings show that our explainable deep learning system is extremely accurate at detecting and categorising intrusions in IoT-enabled transportation networks. By examining data using the SHAP approach, cybersecurity specialists may learn more about the IDS's decision-making process. This enables the development of robust solutions, which improves the overall security of the Internet of Things. Aside from simplifying IDS predictions, the proposed technique provides useful recommendations for strengthening the resilience of IoT-enabled transportation systems against cyberattacks. The usefulness of IDS in defending mission critical IoT infrastructure has been questioned by security experts in the Internet of Vehicles (IoV) industry. The IoV is the primary research object in this case. Deep learning algorithms' versatility in processing many forms of data has contributed to their growing prominence in the field of anomaly detection in intrusion detection systems. Although machine learning models may be highly useful, they frequently yield false positives, and the path they follow to their conclusions is not always obvious to humans. Cybersecurity experts who want to evaluate the performance of a system or design more secure solutions need to understand the thinking process behind an IDS's results. The SHAP approach is employed in our proposed framework to give greater insight into the decisions made by IDSs that depend on deep learning. As a result, IoT network security is strengthened, and more cyber-resilient systems are developed. We demonstrate the effectiveness of our technique by comparing it to other credible methods and utilising the ToN_IoT dataset. Our framework has the best success rate when compared to other frameworks, as evidenced by testing results showing an F1 score of 98.83 percent and an accuracy of 99.15 percent. These findings demonstrate that the architecture successfully resists a variety of destructive assaults on IoT networks. By integrating deep learning and methodologies with an emphasis on explainability, our approach significantly enhances network security in IoT use scenarios. The ability to assess and grasp IDS options provides the path for cybersecurity experts to design and construct more secure IoT systems.","PeriodicalId":169383,"journal":{"name":"Journal of Cybersecurity and Information Management","volume":"14 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"1900-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Journal of Cybersecurity and Information Management","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.54216/jcim.120205","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 0

Abstract

The growing ubiquity of IoT-enabled devices in recent years emphasizes the critical need to strengthen transportation network safety and dependability. Intrusion detection systems (IDS) are crucial in preventing attacks on transport networks that rely on the Internet of Things (IoT). However, understanding the rationale behind deep learning-based IDS models may be challenging because they do not explain their findings. We offer an interpretable deep learning system that may be used to improve transportation network safety using IoT. To develop naturally accessible explanations for IDS projections, we integrate deep learning models with the Shapley Additive Reasons (SHAP) approach. By adding weight to distinct elements of the input data needed to develop the model, we increase the readability of so-called black box processes. We use the ToN_IoT dataset, which provides statistics on the volume of network traffic created by IoT-enabled transport systems, to assess the success of our strategy. We use a tool called CICFlowMeter to create network flows and collect data. The regularity of the flows, as well as their correlation with specific assaults, has been documented, allowing us to train and evaluate the IDS model. The experiment findings show that our explainable deep learning system is extremely accurate at detecting and categorising intrusions in IoT-enabled transportation networks. By examining data using the SHAP approach, cybersecurity specialists may learn more about the IDS's decision-making process. This enables the development of robust solutions, which improves the overall security of the Internet of Things. Aside from simplifying IDS predictions, the proposed technique provides useful recommendations for strengthening the resilience of IoT-enabled transportation systems against cyberattacks. The usefulness of IDS in defending mission critical IoT infrastructure has been questioned by security experts in the Internet of Vehicles (IoV) industry. The IoV is the primary research object in this case. Deep learning algorithms' versatility in processing many forms of data has contributed to their growing prominence in the field of anomaly detection in intrusion detection systems. Although machine learning models may be highly useful, they frequently yield false positives, and the path they follow to their conclusions is not always obvious to humans. Cybersecurity experts who want to evaluate the performance of a system or design more secure solutions need to understand the thinking process behind an IDS's results. The SHAP approach is employed in our proposed framework to give greater insight into the decisions made by IDSs that depend on deep learning. As a result, IoT network security is strengthened, and more cyber-resilient systems are developed. We demonstrate the effectiveness of our technique by comparing it to other credible methods and utilising the ToN_IoT dataset. Our framework has the best success rate when compared to other frameworks, as evidenced by testing results showing an F1 score of 98.83 percent and an accuracy of 99.15 percent. These findings demonstrate that the architecture successfully resists a variety of destructive assaults on IoT networks. By integrating deep learning and methodologies with an emphasis on explainability, our approach significantly enhances network security in IoT use scenarios. The ability to assess and grasp IDS options provides the path for cybersecurity experts to design and construct more secure IoT systems.
交通网络安全决策过程的可解释深度学习IDS
近年来,物联网设备的日益普及强调了加强交通网络安全性和可靠性的迫切需要。入侵检测系统(IDS)对于防止对依赖物联网(IoT)的传输网络的攻击至关重要。然而,理解基于深度学习的IDS模型背后的基本原理可能具有挑战性,因为它们不能解释他们的发现。我们提供了一个可解释的深度学习系统,可用于通过物联网提高交通网络的安全性。为了开发IDS预测的自然解释,我们将深度学习模型与Shapley加性原因(SHAP)方法集成在一起。通过为开发模型所需的输入数据的不同元素添加权重,我们增加了所谓的黑盒过程的可读性。我们使用ToN_IoT数据集,该数据集提供了由支持物联网的传输系统创建的网络流量的统计数据,以评估我们战略的成功。我们使用一个名为CICFlowMeter的工具来创建网络流并收集数据。流量的规律性,以及它们与特定攻击的相关性,已经被记录下来,使我们能够训练和评估IDS模型。实验结果表明,我们的可解释深度学习系统在检测和分类物联网交通网络中的入侵方面非常准确。通过使用SHAP方法检查数据,网络安全专家可以更多地了解IDS的决策过程。这样可以开发健壮的解决方案,从而提高物联网的整体安全性。除了简化IDS预测之外,所提出的技术还为加强物联网运输系统抵御网络攻击的弹性提供了有用的建议。IDS在保护关键任务物联网基础设施方面的实用性受到了车联网(IoV)行业安全专家的质疑。在这种情况下,IoV是主要的研究对象。深度学习算法在处理多种形式数据方面的通用性使其在入侵检测系统中的异常检测领域日益突出。尽管机器学习模型可能非常有用,但它们经常产生误报,而且它们得出结论的路径对人类来说并不总是显而易见的。想要评估系统性能或设计更安全解决方案的网络安全专家需要了解IDS结果背后的思考过程。在我们提出的框架中采用了SHAP方法,以更深入地了解依赖深度学习的ids做出的决策。因此,物联网网络安全性得到加强,并开发出更多的网络弹性系统。我们通过将其与其他可信方法进行比较并利用ToN_IoT数据集来证明我们技术的有效性。与其他框架相比,我们的框架具有最好的成功率,测试结果显示F1得分为98.83%,准确率为99.15%。这些发现表明,该架构成功抵御了对物联网网络的各种破坏性攻击。通过整合深度学习和强调可解释性的方法,我们的方法显着提高了物联网使用场景中的网络安全性。评估和掌握IDS选项的能力为网络安全专家设计和构建更安全的物联网系统提供了途径。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
求助全文
约1分钟内获得全文 求助全文
来源期刊
CiteScore
0.70
自引率
0.00%
发文量
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术官方微信