论文标题
物联网DOS和DDOS攻击检测使用Resnet
IoT DoS and DDoS Attack Detection using ResNet
论文作者
论文摘要
随着物联网(IoT)设备的快速增长,网络攻击的频率和强度都在增加。最近,拒绝服务(DOS)和分布式拒绝服务(DDOS)攻击是物联网网络中最常见的攻击。传统的安全解决方案(例如防火墙,入侵检测系统等)无法检测到复杂的DOS和DDOS攻击,因为大多数人都根据静态预定义的规则过滤正常和攻击流量。但是,当与基于人工智能(AI)的技术集成时,这些解决方案可能会变得可靠和有效。在过去的几年中,深度学习模型尤其是卷积神经网络在图像处理领域的出色表现,具有很高的意义。这些卷积神经网络(CNN)模型的潜力可用于通过将网络流量数据集转换为图像来有效地检测复杂的DOS和DDO。因此,在这项工作中,我们提出了一种方法,将网络流量数据转换为图像表格,并训练了最先进的CNN模型,即对转换的数据进行重新连接。所提出的方法在二进制分类时完成了99.99 \%的准确性,以检测DOS和DDOS。此外,所提出的方法达到了87 \%的平均精度,用于识别11种类型的DOS和DDOS攻击模式,与最先进的方法相比,该模式高9%。
The network attacks are increasing both in frequency and intensity with the rapid growth of internet of things (IoT) devices. Recently, denial of service (DoS) and distributed denial of service (DDoS) attacks are reported as the most frequent attacks in IoT networks. The traditional security solutions like firewalls, intrusion detection systems, etc., are unable to detect the complex DoS and DDoS attacks since most of them filter the normal and attack traffic based upon the static predefined rules. However, these solutions can become reliable and effective when integrated with artificial intelligence (AI) based techniques. During the last few years, deep learning models especially convolutional neural networks achieved high significance due to their outstanding performance in the image processing field. The potential of these convolutional neural network (CNN) models can be used to efficiently detect the complex DoS and DDoS by converting the network traffic dataset into images. Therefore, in this work, we proposed a methodology to convert the network traffic data into image form and trained a state-of-the-art CNN model, i.e., ResNet over the converted data. The proposed methodology accomplished 99.99\% accuracy for detecting the DoS and DDoS in case of binary classification. Furthermore, the proposed methodology achieved 87\% average precision for recognizing eleven types of DoS and DDoS attack patterns which is 9\% higher as compared to the state-of-the-art.