Fault-tolerant AI-driven Intrusion Detection System for the Internet of Things

Medjek, Faiza; Tandjaoui, Djamel; Djedjig, Nabil; Romdhani, Imed

Abstract

Internet of Things (IoT) has emerged as a key component of all advanced critical infrastructures. However, with the challenging nature of IoT, new security breaches have been introduced, especially against the Routing Protocol for Low-power and Lossy Networks (RPL). Artificial-Intelligence-based technologies can be used to provide insights to deal with IoT’s security issues. In this paper, we describe the initial stages of developing, a new Intrusion Detection System using Machine Learning (ML) to detect routing attacks against RPL. We first simulate the routing attacks and capture the traffic for different topologies. We then process the traffic and generate large 2-class and multi-class datasets. We select a set of significant features for each attack, and we use this set to train different classifiers to make the IDS. The experiments with 5-fold cross-validation demonstrated that decision tree (DT), random forests (RF), and K-Nearest Neighbours (KNN) achieved good results of more than 99% value for accuracy, precision, recall, and F1-score metrics, and RF has achieved the lowest fitting time. On the other hand, Deep Learning (DL) model, MLP, Naïve Bayes (NB), and Logistic Regression (LR) have shown significantly lower performance.

Citation

Medjek, F., Tandjaoui, D., Djedjig, N., & Romdhani, I. (2021). Fault-tolerant AI-driven Intrusion Detection System for the Internet of Things. International Journal of Critical Infrastructure Protection, 34, Article 100436. https://doi.org/10.1016/j.ijcip.2021.100436

• Journal Article Type: Article
• Acceptance Date: Mar 30, 2021
• Online Publication Date: Apr 7, 2021
• Publication Date: 2021-09
• Deposit Date: May 12, 2021
• Journal: International Journal of Critical Infrastructure Protection
• Print ISSN: 1874-5482
• Publisher: Elsevier
• Peer Reviewed: Peer Reviewed
• Volume: 34
• Article Number: 100436
• DOI: https://doi.org/10.1016/j.ijcip.2021.100436
• Keywords: RPL security, IoT security, IDS, Machine Learning, Deep Learning, Critical infrastructure
• Public URL: http://researchrepository.napier.ac.uk/Output/2772062