Search

Modern vehicles are increasingly getting connected within the vehicles, with other systems, leading to more concerns about security. Controller area network (CAN) has become a de-facto standard for connecting internal vehicles' components. However, it lacks security features. Conventional security mechanisms fail to protect in-vehicle networks from attacks, requiring the development of an effective intrusion detection system (IDS). This work develops an IDS for in-vehicle networks called IDS-IVN based on a compact representation of location invariant and time-variant traffic features using deep learning. The IDS-IVN uses convolutional neural and long–short-term memory networks as encoder/decoder functions of autoencoder networks to extract features from raw data and classify them using latent space representation into intrusive and non-intrusive classes. A benchmark real-time ROAD dataset is used to demonstrate the IDS-IVN's performance compared to the existing methods. IDS-IVN reports 99% accuracy with a 0.32% low false-positive rate for detecting intrusions. [ABSTRACT FROM AUTHOR]

In this paper, we show a deep learning model for bot detection, named as DeBot, for industrial network traffic. DeBot uses a novel Cascade Forward Back Propagation Neural Network (CFBPNN) model with a subset of features using the Correlation-based Feature Selection (CFS) technique. A time series-based Nonlinear Auto-regressive Network with eXogenous inputs (NARX) technique analyzes the factors having a higher impact on the target variable and predict the behavioral pattern. To the best of our knowledge, we pioneer the use of optimal feature selection and integration with the cascading model of deep learning in bot detection of IIoTs. We conduct a thorough set of experiments on five popular bot datasets: NF-UNSW-NB15, NF-ToN-IoT, NF-BoT-IoT, NF-CSE-CIC-IDS2018, and ToN-IoT-Windows. We compare CFBPNN with other existing neural network models. We observe that CFBPNN in DeBot shows 100% accuracy in all the datasets with subset evaluation and obtains optimum F1-score and zero precision. [Display omitted] • We address the multi-layered network model with IIoT features to enable bot attack detection. • Our DeBot model evaluates the subset with optimal features with high impact on attack class and predict the risk factor. • We pioneer the implementation of time series-based Nonlinear Auto-Regressive eXogenous (NARX) model to predict the risk in the specified time gap. • We introduce a new cascading model with recurrent feature to preserve the relationship between input and output variables. [ABSTRACT FROM AUTHOR]

In this paper, we develop a feature extraction model using the amalgamation of machine and deep learning techniques for Industrial Internet of Thing (IIoT). We train the model with the most effective feature set evaluated using machine learning algorithms and deep learning feature extraction methods. We test these features with deep learning based network models for validation. We consider error metrics and accuracy as the major factors for combining the machine learning and deep learning techniques. The error rates are analysed using mean square error which show low error rate for the subset than the model tested for full dataset. Further, mean square error, accuracy rate and false values are analysed to test the performance of the proposed model. The comparative analysis with IIoT dataset and existing methods show that our approach is 25% better than the others. [Display omitted] • We address the multi-dimensional problem of the IIoT features to make an adequate feature extraction method. • We use machine learning classifier and wrapper subset evaluation technique with Naive-Bayes and meta bagging methods for feature selection. Deep learning auto encoders are implemented as a part of dimensionality reduction techniques and provides a amalgamation for the appropriateness of the features. We verify them with Principal Component Analysis (PCA) and ranking. Thus, only relevant features are extracted for analysis. • We create network models for analysing detection using deep learning Feed forward neural network and Elman Back propagation techniques for classification and detection with various training methods. [ABSTRACT FROM AUTHOR]

This paper proposes an intelligent system, called IDGADS, for detecting algorithmically generated domains in the early stages based on easy and automatic computable features of real domain name system (DNS) traffic quickly without investing time in reverse engineering and/or log monitoring or dependency on external information like WHOIS/DNS response. IDGADS is a supervised deep learning model, trained over 17M domains from the reputed sources. It is implemented in Python and served as a service over the cloud for free testing of the public in the form of a web app. IDGADS is capable of detecting malicious domains up to 99% accuracy. Till 17-April-2020, 1160963 domains have been tested, and it has detected 817069 DGA-generated domains by the users of different countries. Since IDGADS is developed to check DNS queries only, thus it can be installed as the first line of defence in security stack for validating DNS queries before sending to DNS server. [Display omitted] • An intelligent deep learning system for detecting algorithmically generated domains. • Extracted intrinsic features from domain names without any human intervention. • Proposed system as first line of defence system for analyzing real domain names as a web service. [ABSTRACT FROM AUTHOR]