arXiv:2602.11851cs.CRcs.AI2026-02

动态分配检测器,让边缘设备自动适应网络攻击。

Resource-Aware Deployment Optimization for Collaborative Intrusion Detection in Layered Networks

  • 根据资源和数据类型动态分配检测器,实现轻量部署。
  • 在边缘设备上运行,无需高计算开销,检测效率高。
  • 适合无人机等分布式系统,应对复杂攻击场景。

协同入侵检测系统(CIDS)被广泛采用以应对网络攻击,因其协作特性可在异构环境中灵活适应多样场景。随着无人机等分布式关键基础设施在民用与军用领域快速演进,亟需可灵活应对动态变化的CIDS架构。本文提出一种新型CIDS框架,支持在多种分布式环境中简便部署。该框架基于节点可用资源与数据类型,动态优化检测器分配,实现对新运行场景的快速适应,且计算开销极低。我们首先开展全面文献调研,提炼现有架构核心特征,并结合真实用例设计该框架。通过多个分布式数据集验证,涵盖不同攻击链与网络拓扑。特别地,引入一个基于真实攻击案例的公开数据集,模拟针对地面无人机、破坏关键基础设施的攻击。实验结果表明,所提框架能在分布式环境中实现自适应、高效的入侵检测,自动重构检测器配置,维持最优状态,所有实验均在边缘设备上完成,无需重型计算。

原文摘要 · Abstract (English)

Collaborative Intrusion Detection Systems (CIDS) are increasingly adopted to counter cyberattacks, as their collaborative nature enables them to adapt to diverse scenarios across heterogeneous environments. As distributed critical infrastructure operates in rapidly evolving environments, such as drones in both civil and military domains, there is a growing need for CIDS architectures that can flexibly accommodate these dynamic changes. In this study, we propose a novel CIDS framework designed for easy deployment across diverse distributed environments. The framework dynamically optimizes detector allocation per node based on available resources and data types, enabling rapid adaptation to new operational scenarios with minimal computational overhead. We first conducted a comprehensive literature review to identify key characteristics of existing CIDS architectures. Based on these insights and real-world use cases, we developed our CIDS framework, which we evaluated using several distributed datasets that feature different attack chains and network topologies. Notably, we introduce a public dataset based on a realistic cyberattack targeting a ground drone aimed at sabotaging critical infrastructure. Experimental results demonstrate that the proposed CIDS framework can achieve adaptive, efficient intrusion detection in distributed settings, automatically reconfiguring detectors to maintain an optimal configuration, without requiring heavy computation, since all experiments were conducted on edge devices.

入侵检测边缘计算动态部署无人机安全

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。