Open Set Dandelion Network for IoT Intrusion Detection
As IoT devices become widely, it is crucial to protect them from malicious intrusions. However, the data scarcity of IoT limits the applicability of traditional intrusion detection methods, which are highly data-dependent. To address this, in this paper we propose the Open-Set Dandelion Network (OSDN) based on unsupervised heterogeneous domain adaptation in an open-set manner. The OSDN model performs intrusion knowledge transfer from the knowledge-rich source network intrusion domain to facilitate more accurate intrusion detection for the data-scarce target IoT intrusion domain. Under the open-set setting, it can also detect newly-emerged target domain intrusions that are not observed in the source domain. To achieve this, the OSDN model forms the source domain into a dandelion-like feature space in which each intrusion category is compactly grouped and different intrusion categories are separated, i.e., simultaneously emphasising inter-category separability and intra-category compactness. The dandelion-based target membership mechanism then forms the target dandelion. Then, the dandelion angular separation mechanism achieves better inter-category separability, and the dandelion embedding alignment mechanism further aligns both dandelions in a finer manner. To promote intra-category compactness, the discriminating sampled dandelion mechanism is used. Assisted by the intrusion classifier trained using both known and generated unknown intrusion knowledge, a semantic dandelion correction mechanism emphasises easily-confused categories and guides better inter-category separability. Holistically, these mechanisms form the OSDN model that effectively performs intrusion knowledge transfer to benefit IoT intrusion detection. Comprehensive experiments on several intrusion datasets verify the effectiveness of the OSDN model, outperforming three state-of-the-art baseline methods by 16.9%.
Code (0)
등록된 구현이 없습니다.
Tasks
Domain AdaptationIntrusion DetectionTransfer LearningSimilar Papers 제목 키워드 기반
Evaluating the Robustness of Time Series Anomaly and Intrusion Detection Methods against Adversarial Attacks
Time series anomaly and intrusion detection are extensively studied in statistics, economics, and computer science. Over the years, numerous methods have been proposed for time series anomaly and intrusion detection usin…
Intrusion DetectionTime SeriesTime Series AnalysisDandelionNet: Domain Composition with Instance Adaptive Classification for Domain Generalization
Domain generalization (DG) attempts to learn a model on source domains that can well generalize to unseen but different domains. The multiple source domains are innately different in distribution but intrinsically re…
Domain AdaptationDomain GeneralizationT-DFNN: An Incremental Learning Algorithm for Intrusion Detection Systems
Machine learning has recently become a popular algorithm in building reliable intrusion detection systems (IDSs). However, most of the models are static and trained using datasets containing all targeted intrusions. If n…
Incremental LearningIntrusion DetectionTowards Resilient Intrusion Detection in CubeSats: Challenges, TinyML Solutions, and Future Directions
CubeSats have revolutionized access to space by providing affordable and accessible platforms for research and education. However, their reliance on Commercial Off-The-Shelf (COTS) components and open-source software has…
Intrusion DetectionAnomaly DetectionDetecting Unknown Attacks in IoT Environments: An Open Set Classifier for Enhanced Network Intrusion Detection
The widespread integration of Internet of Things (IoT) devices across all facets of life has ushered in an era of interconnectedness, creating new avenues for cybersecurity challenges and underscoring the need for robust…
Intrusion DetectionNetwork Intrusion DetectionOpen Set Learning