A-THENA用时间编码和网络增强,实现低延迟的物联网早期入侵检测。
A-THENA: Early Intrusion Detection for IoT with Time-Aware Hybrid Encoding and Network-Specific Augmentation

- 引入时间感知混合编码捕捉数据包时序特征
- 在三个数据集上准确率提升超6个百分点,误报几乎为零
- 可在树莓派上实时运行,适合边缘设备部署
物联网设备的普及大幅扩大了攻击面,使物联网生态系统极易受到复杂网络威胁。本文提出轻量级早期入侵检测系统A-THENA,通过改进时间感知编码技术,采用基于Transformer的架构并结合通用时间感知混合编码(THE),利用数据包时间戳有效捕获时序动态,以实现精准且早期的威胁识别。系统还引入网络特定增强(NA)管道,提升模型鲁棒性与泛化能力。在三个基准物联网入侵检测数据集(CICIoT23-WEB、MQTT-IoT-IDS2020、IoTID20)上评估,A-THENA在所有数据集平均表现优于最佳传统位置编码6.88个百分点、优于最强特征模型3.69个百分点、优于领先时间感知方法6.17个百分点、优于相关模型5.11个百分点,同时实现近乎零的误报和漏报。为验证实际可行性,系统部署于Raspberry Pi Zero 2 W,实现实时检测,仅需极低延迟与内存开销。结果表明A-THENA是敏捷、实用且高效的物联网安全解决方案。
原文摘要 · Abstract (English)
The proliferation of Internet of Things (IoT) devices has significantly expanded attack surfaces, making IoT ecosystems particularly susceptible to sophisticated cyber threats. To address this challenge, this work introduces A-THENA, a lightweight early intrusion detection system (EIDS) that significantly extends preliminary findings on time-aware encodings. A-THENA employs an advanced Transformer-based architecture augmented with a generalized Time-Aware Hybrid Encoding (THE), integrating packet timestamps to effectively capture temporal dynamics essential for accurate and early threat detection. The proposed system further employs a Network-Specific Augmentation (NA) pipeline, which enhances model robustness and generalization. We evaluate A-THENA on three benchmark IoT intrusion detection datasets-CICIoT23-WEB, MQTT-IoT-IDS2020, and IoTID20-where it consistently achieves strong performance. Averaged across all three datasets, it improves accuracy by 6.88 percentage points over the best-performing traditional positional encoding, 3.69 points over the strongest feature-based model, 6.17 points over the leading time-aware alternatives, and 5.11 points over related models, while achieving near-zero false alarms and false negatives. To assess real-world feasibility, we deploy A-THENA on the Raspberry Pi Zero 2 W, demonstrating its ability to perform real-time intrusion detection with minimal latency and memory usage. These results establish A-THENA as an agile, practical, and highly effective solution for securing IoT networks.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。