Lightweight and Efficient Distributed Cooperative Intrusion Detection System for Intelligent Swarms

Zhaoyang Li, Zhiwei Zhang, Zehan Chen, Hao Duan, Hongjun Li, Baoquan Ren
{"title":"Lightweight and Efficient Distributed Cooperative Intrusion Detection System for Intelligent Swarms","authors":"Zhaoyang Li, Zhiwei Zhang, Zehan Chen, Hao Duan, Hongjun Li, Baoquan Ren","doi":"10.1109/NaNA56854.2022.00048","DOIUrl":null,"url":null,"abstract":"Intrusion Detection Systems (IDSs) have been wildly used in various environments to actively detect internal and external attacks with high accuracy. Unfortunately, the traditional IDSs cannot distinguish new or unknown attacks from abnormal behaviors effectively, and that makes them infeasible to protect the emerging dynamic open information systems. Subsequently, artificial intelligence (AI) algorithms are introduced into IDSs to support the recognization of unexplored malicious behaviors. However, most of the existing AI-driven IDSs are not able to be directly applied to intelligent swarm scenarios, which are typically employed to aggregate heterogeneous or homogeneous elements (e.g., autonomous vehicles, drones) to solve complex problems that the individual members cannot deal with, due to the characteristics of mobility and complexity of intelligent elements. Therefore, in this paper, we propose a lightweight and efficient distributed cooperative IDS (DCIDS) for intelligent swarms. On one hand, to efficiently detect the malicious behaviors among swarm elements, we design a collaborative detection model which utilizes multi-dimension features including the swarm elements' position, storage-computing resource consuming levels, network traffics, et al. On the other hand, to predict the movement trends and detect attacks of resource-limited swarm elements, we construct a concrete DCIDS scheme by employing the Kalyan Filter algorithm and Long Short Term Memory Network (LSTM) algorithm. Furthermore, our experimental results demonstrate that the proposed DCIDS scheme outperforms the previous IDS schemes on attack detection/classification accuracy and efficiency in intelligent swarm environments and also achieves an accuracy of 98.00%.","PeriodicalId":113743,"journal":{"name":"2022 International Conference on Networking and Network Applications (NaNA)","volume":"16 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2022-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"2022 International Conference on Networking and Network Applications (NaNA)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/NaNA56854.2022.00048","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 0

Abstract

Intrusion Detection Systems (IDSs) have been wildly used in various environments to actively detect internal and external attacks with high accuracy. Unfortunately, the traditional IDSs cannot distinguish new or unknown attacks from abnormal behaviors effectively, and that makes them infeasible to protect the emerging dynamic open information systems. Subsequently, artificial intelligence (AI) algorithms are introduced into IDSs to support the recognization of unexplored malicious behaviors. However, most of the existing AI-driven IDSs are not able to be directly applied to intelligent swarm scenarios, which are typically employed to aggregate heterogeneous or homogeneous elements (e.g., autonomous vehicles, drones) to solve complex problems that the individual members cannot deal with, due to the characteristics of mobility and complexity of intelligent elements. Therefore, in this paper, we propose a lightweight and efficient distributed cooperative IDS (DCIDS) for intelligent swarms. On one hand, to efficiently detect the malicious behaviors among swarm elements, we design a collaborative detection model which utilizes multi-dimension features including the swarm elements' position, storage-computing resource consuming levels, network traffics, et al. On the other hand, to predict the movement trends and detect attacks of resource-limited swarm elements, we construct a concrete DCIDS scheme by employing the Kalyan Filter algorithm and Long Short Term Memory Network (LSTM) algorithm. Furthermore, our experimental results demonstrate that the proposed DCIDS scheme outperforms the previous IDS schemes on attack detection/classification accuracy and efficiency in intelligent swarm environments and also achieves an accuracy of 98.00%.
面向智能蜂群的轻量级高效分布式协同入侵检测系统
入侵检测系统(ids)被广泛应用于各种环境中,以高精度的方式主动检测内部和外部攻击。然而,传统的入侵防御系统不能有效地将新的或未知的攻击与异常行为区分开来,这使得传统的入侵防御系统无法有效地保护新兴的动态开放信息系统。随后,人工智能(AI)算法被引入ids,以支持识别未被探索的恶意行为。然而,现有的大多数ai驱动的ids并不能直接应用于智能群体场景,由于智能元素的移动性和复杂性的特点,它们通常用于聚合异构或同质元素(如自动驾驶汽车、无人机),以解决单个成员无法处理的复杂问题。为此,本文提出了一种轻量级、高效的分布式协同入侵检测系统(DCIDS)。一方面,为了有效检测群元之间的恶意行为,设计了一种利用群元位置、存储计算资源消耗水平、网络流量等多维特征的协同检测模型;另一方面,为了预测资源有限的群体元素的运动趋势和检测攻击,我们采用Kalyan滤波算法和长短期记忆网络(LSTM)算法构建了一个具体的DCIDS方案。实验结果表明,在智能群环境下,DCIDS方案在攻击检测/分类准确率和效率上均优于现有的IDS方案,准确率达到98.00%。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
求助全文
约1分钟内获得全文 求助全文
来源期刊
自引率
0.00%
发文量
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术官方微信