Anomaly Detection Systems Using IP Flows: A Review

2021 ◽  
pp. 1035-1049
Author(s):  
Rashmi Bhatia ◽  
Rohini Sharma ◽  
Ajay Guleria
Keyword(s):  
Anomaly Detection ◽  
Detection Systems ◽  
Ip Flows

scholarly journals BCEAD: A Blockchain-Empowered Ensemble Anomaly Detection for Wireless Sensor Network via Isolation Forest

2021 ◽  
Vol 2021 ◽  
pp. 1-10
Author(s):  
Xiong Yang ◽  
Yuling Chen ◽  
Xiaobin Qian ◽  
Tao Li ◽  
Xiao Lv
Keyword(s):  
Anomaly Detection ◽  
Block Structure ◽  
Detection Algorithm ◽  
Wireless Sensor ◽  
Detection Systems ◽  
Blockchain Technology ◽  
The Internet Of Things ◽  
Isolation Forest ◽  
Distributed Deployment ◽  
Internal Attacks

The distributed deployment of wireless sensor networks (WSNs) makes the network more convenient, but it also causes more hidden security hazards that are difficult to be solved. For example, the unprotected deployment of sensors makes distributed anomaly detection systems for WSNs more vulnerable to internal attacks, and the limited computing resources of WSNs hinder the construction of a trusted environment. In recent years, the widely observed blockchain technology has shown the potential to strengthen the security of the Internet of Things. Therefore, we propose a blockchain-based ensemble anomaly detection (BCEAD), which stores the model of a typical anomaly detection algorithm (isolated forest) in the blockchain for distributed anomaly detection in WSNs. By constructing a suitable block structure and consensus mechanism, the global model for detection can iteratively update to enhance detection performance. Moreover, the blockchain guarantees the trust environment of the network, making the detection algorithm resistant to internal attacks. Finally, compared with similar schemes, in terms of performance, cost, etc., the results prove that BCEAD performs better.

Detecting Intrusions in Cyber-Physical Systems of Smart Cities

2019 ◽  
pp. 74-102 ◽  
Author(s):  
Ismail Butun ◽  
Patrik Österberg
Keyword(s):  
Anomaly Detection ◽  
Smart Cities ◽  
Cyber Physical Systems ◽  
Security And Privacy ◽  
Security Vulnerabilities ◽  
Physical Systems ◽  
Detection Systems ◽  
Comprehensive Survey ◽  
Privacy Violation ◽  
Detection Schemes

Interfacing the smart cities with cyber-physical systems (CPSs) improves cyber infrastructures while introducing security vulnerabilities that may lead to severe problems such as system failure, privacy violation, and/or issues related to data integrity if security and privacy are not addressed properly. In order for the CPSs of smart cities to be designed with proactive intelligence against such vulnerabilities, anomaly detection approaches need to be employed. This chapter will provide a brief overview of the security vulnerabilities in CPSs of smart cities. Following a thorough discussion on the applicability of conventional anomaly detection schemes in CPSs of smart cities, possible adoption of distributed anomaly detection systems by CPSs of smart cities will be discussed along with a comprehensive survey of the state of the art. The chapter will discuss challenges in tailoring appropriate anomaly detection schemes for CPSs of smart cities and provide insights into future directions for the researchers working in this field.

On mitigating sampling-induced accuracy loss in traffic anomaly detection systems

2010 ◽  
Vol 40 (3) ◽  
pp. 4-16 ◽  
Author(s):  
Sardar Ali ◽  
Irfan Ul Haq ◽  
Sajjad Rizvi ◽  
Naurin Rasheed ◽  
Unum Sarfraz ◽  
...  
Keyword(s):  
Anomaly Detection ◽  
Detection Systems ◽  
Traffic Anomaly ◽  
Traffic Anomaly Detection

scholarly journals Improved Testing of AI-Based Anomaly Detection Systems Using Synthetic Surveillance Data

Proceedings ◽  
2020 ◽  
Vol 59 (1) ◽  
pp. 9
Author(s):  
Antoine Chevrot ◽  
Alexandre Vernotte ◽  
Pierre Bernabe ◽  
Aymeric Cretin ◽  
Fabien Peureux ◽  
...  
Keyword(s):  
Anomaly Detection ◽  
Cyber Security ◽  
Surveillance Data ◽  
Automatic Identification ◽  
Identification System ◽  
Surveillance Systems ◽  
Sea Transport ◽  
Detection Model ◽  
Detection Systems ◽  
Anomalous Data

Major transportation surveillance protocols have not been specified with cyber security in mind and therefore provide no encryption nor identification. These issues expose air and sea transport to false data injection attacks (FDIAs), in which an attacker modifies, blocks or emits fake surveillance messages to dupe controllers and surveillance systems. There has been growing interest in conducting research on machine learning-based anomaly detection systems that address these new threats. However, significant amounts of data are needed to achieve meaningful results with this type of model. Raw, genuine data can be obtained from existing databases but need to be preprocessed before being fed to a model. Acquiring anomalous data is another challenge: such data is much too scarce for both the Automatic Dependent Surveillance–Broadcast (ADS-B) and the Automatic Identification System (AIS). Crafting anomalous data by hand, which has been the sole method applied to date, is hardly suitable for broad detection model testing. This paper proposes an approach built upon existing libraries and ideas that offers ML researchers the necessary tools to facilitate the access and processing of genuine data as well as to automatically generate synthetic anomalous surveillance data to constitute broad, elaborated test datasets. We demonstrate the usability of the approach by discussing work in progress that includes the reproduction of related work, creation of relevant datasets and design of advanced anomaly detection models for both domains of application.

Sign in / Sign up

Export Citation Format

Share Document