Industrial IoT intrusion detection via evolutionary cost-sensitive learning and fog computing
Publication Name
IEEE Internet of Things Journal
Abstract
Cyber-attacks and intrusions have become the major obstacles to the adoption of the Industrial Internet of Things (IIoT) in critical industries. Imbalanced data distribution is a common problem in IIoT environments that negatively influence machine learning-based intrusion detection systems. To address this issue, we introduce EvolCostDeep, a hybrid model of stacked auto-encoders (SAE) and convolutional neural networks (CNNs) with a new cost-dependent loss function. The loss function aims to optimize the model’s parameters, where the costs are determined using an evolutionary algorithm. The combination of evolutionary algorithms and deep learning on Big data hinders the scalability of IIoT intrusion detection systems. In this regard, a fog computing-enabled framework, called DeepIDSFog, is designed at the data level, where the master node shares the EvolCostDeep model with worker nodes. In each fog worker node, the EvolCostDeep is parallelized through one task-level and two model-level mechanisms. After aggregating detection outputs from worker nodes to the master, the result is passed to the cloud platform for mitigating attacks. A series of experiments are conducted on the ToN-IoT and UNSW-NB15 datasets to evaluate the performance of EvolCostDeep and DeepIDSFog. The results show that our frameworks can effectively handle both class imbalance problem and scalability of big IIoT traffic data compared with the other models. The averaged values of the EvolCostDeep for recall, precision, and F1-Score on the datasets are of 93.3%, 97.6%, and 95.2%, respectively, which are higher that the compared methods. Also, the DeepIDSFog provides an average speedup of 38.7x over other comparing models.
Open Access Status
This publication is not available as open access