论文标题
机器学习支持的物联网安全:在高级持续威胁下的开放问题和挑战
Machine Learning-Enabled IoT Security: Open Issues and Challenges Under Advanced Persistent Threats
论文作者
论文摘要
尽管具有技术优势,但由于无线介质中的脆弱性,物联网(IoT)具有网络弱点。基于机器学习(ML)的方法被广泛用于具有有希望的性能的物联网网络中的网络威胁。高级持续威胁(APT)对于妥协的网络而言是突出的,这对于长期和有害的特征至关重要。但是,由于正常流量的比例极小,因此很难采用基于ML的方法来识别适当的攻击以获得有前途的检测性能。由于缺乏所有类型的APT攻击的公共数据集,因此有限的调查可以完全研究IoT网络中的APT攻击。在全面的评论文章中,在网络攻击检测中桥接了最新的网络攻击检测中的最新技术。本调查文章回顾了物联网网络中的安全挑战,并提出了众所周知的攻击,APT攻击和物联网系统中的威胁模型。同时,针对物联网网络总结了基于签名的基于签名,基于异常和混合入侵检测系统。本文重点介绍了有关针对网络入侵的常用方法以及检测到的攻击类型的数量的统计见解。最后,为将来的研究提出了公共网络入侵和APT攻击的开放问题和挑战。
Despite its technological benefits, Internet of Things (IoT) has cyber weaknesses due to the vulnerabilities in the wireless medium. Machine learning (ML)-based methods are widely used against cyber threats in IoT networks with promising performance. Advanced persistent threat (APT) is prominent for cybercriminals to compromise networks, and it is crucial to long-term and harmful characteristics. However, it is difficult to apply ML-based approaches to identify APT attacks to obtain a promising detection performance due to an extremely small percentage among normal traffic. There are limited surveys to fully investigate APT attacks in IoT networks due to the lack of public datasets with all types of APT attacks. It is worth to bridge the state-of-the-art in network attack detection with APT attack detection in a comprehensive review article. This survey article reviews the security challenges in IoT networks and presents the well-known attacks, APT attacks, and threat models in IoT systems. Meanwhile, signature-based, anomaly-based, and hybrid intrusion detection systems are summarized for IoT networks. The article highlights statistical insights regarding frequently applied ML-based methods against network intrusion alongside the number of attacks types detected. Finally, open issues and challenges for common network intrusion and APT attacks are presented for future research.