为车联网设计分层检测系统,边端可独立识别攻击,云边协同提速响应。
A Scalable Hierarchical Intrusion Detection System for Internet of Vehicles
- 构建分层分类框架,边端与云端分工协作,各司其职。
- 在CIC-IoV2024数据集上实现高精度检测,边端可独立完成特定攻击识别。
- 采用Boruta特征选择降维,提升资源受限边端的处理效率。
由于车联网(IoV)具有动态性、移动性和无线数据传输特性,易遭受各类网络威胁,包括伪造、分布式拒绝服务(DDoS)攻击和恶意软件等。为保障IoV生态安全,入侵检测系统(IDS)通过持续监控和分析网络流量,在实时识别并缓解潜在威胁方面发挥关键作用。然而,现有研究多集中于中心化机器学习型IDS,未考虑IoV固有的分布式特性。此类中心化系统通常依赖云端处理,导致响应延迟较高;而边缘节点因资源有限,难以训练和部署复杂机器学习模型。为此,本文提出一种适用于IoV网络的高效分层分类框架。该框架允许不同层级的分类器分别训练与测试,使边缘节点可独立检测特定类型攻击,同时借助云端进行全面威胁分析与支持。针对边缘节点资源约束,采用Boruta特征选择方法降低数据维度,优化处理效率。基于最新发布的IoV安全数据集CIC-IoV2024评估所提框架,结果表明模型在保障车联网安全方面具备可行性和有效性。
原文摘要 · Abstract (English)
Due to its nature of dynamic, mobility, and wireless data transfer, the Internet of Vehicles (IoV) is prone to various cyber threats, ranging from spoofing and Distributed Denial of Services (DDoS) attacks to malware. To safeguard the IoV ecosystem from intrusions, malicious activities, policy violations, intrusion detection systems (IDS) play a critical role by continuously monitoring and analyzing network traffic to identify and mitigate potential threats in real-time. However, most existing research has focused on developing centralized, machine learning-based IDS systems for IoV without accounting for its inherently distributed nature. Due to intensive computing requirements, these centralized systems often rely on the cloud to detect cyber threats, increasing delay of system response. On the other hand, edge nodes typically lack the necessary resources to train and deploy complex machine learning algorithms. To address this issue, this paper proposes an effective hierarchical classification framework tailored for IoV networks. Hierarchical classification allows classifiers to be trained and tested at different levels, enabling edge nodes to detect specific types of attacks independently. With this approach, edge nodes can conduct targeted attack detection while leveraging cloud nodes for comprehensive threat analysis and support. Given the resource constraints of edge nodes, we have employed the Boruta feature selection method to reduce data dimensionality, optimizing processing efficiency. To evaluate our proposed framework, we utilize the latest IoV security dataset CIC-IoV2024, achieving promising results that demonstrate the feasibility and effectiveness of our models in securing IoV networks.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。