Protedge: A few-shot ensemble learning approach to software-defined networking-assisted edge security

Date

2020-10-01

Author

Demirpolat, Ahmed
Sarica, Alper Kaan
Angın, Pelin

Metadata

Show full item record

This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

Item Usage Stats

446
views

0
downloads

The rise of the Internet of Things (IoT) paradigm has had a significant impact on our lives through many use cases including smart farming, smart homes, and smart healthcare among others. Due to the capacity-constrained nature of many IoT devices, edge computing has become a significant aid for IoT, replacing cloud computing to support the extremely low latency requirements. With the number of smart devices growing exponentially, the large attack surface created by these devices is concerning. Software-defined networking (SDN) based architectures come to the rescue of edge-assisted IoT environments to achieve enhanced security, and they strongly rely on intelligent decision-making capabilities to act upon the high volume of traffic they control. Machine learning-based intelligence is already utilized by these systems with successful results when abundant training data are available; however, most algorithms fail in the lack of sufficient training data. In this article, we propose Protedge, an SDN-based intelligent security architecture for edge-assisted IoT networks, which utilizes a few-shot learning classifier, namely prototypical networks, for highly accurate detection of intrusions. We evaluate the performance of the proposed model with the Bot-IoT data set consisting of real-world IoT network flows, as well as an SDN data set modeling an edge-assisted IoT environment and the UNSW-NB15 data set, and show that the proposed model achieves significantly better performance than state-of-the-art models in the absence of large amounts of sample attacks. The proposed architecture is promising to achieve intelligent security in future's ubiquitous edge-enabled IoT with its low processing overhead and high intrusion detection accuracy.

Subject Keywords

As-a-service, Svm, Attack, Things, Internet, Iot, Intrusion detection

URI

https://hdl.handle.net/11511/56154

Journal

TRANSACTIONS ON EMERGING TELECOMMUNICATIONS TECHNOLOGIES

DOI

https://doi.org/10.1002/ett.4138

Collections

Department of Computer Engineering, Article

Suggestions

OpenMETU
Core

ARTEMIS: An intrusion detection system for mqtt attacks in internet of things Ciklabakkal, Ege; Dönmez, Ataberk; Erdemir, Mert; Suren, Emre; YILMAZ, MUSTAFA TUĞRUL; Angın, Pelin (2019-10-01) The Internet of Things (IoT) is now being used increasingly in transportation, healthcare, agriculture, smart home and city systems. IoT devices, the number of which is expected to reach 25 billion all over the world by 2021, are required to be deployed very fast, taking into account commercial pressures. This results in a very important layer, i.e. security, being either completely neglected or having significant shortcomings. Since IoT has a heterogeneous structure, there is a need for intrusion detection...
An intelligent security architecture for sdn-assisted iot networks Demirpolat, Ahmed; Angın, Pelin; Department of Computer Engineering (2021-1-26) The rise of the Internet of Things (IoT) paradigm in the past decade has had a significant impact on all aspects of our lives through the many use cases it has made possible, including smart farming, smart homes, and remote healthcare services, among many others. While the number of smart devices and utilization scenarios aimed at supporting them grow exponentially, the large attack surface created by the interconnectivity of millions of these devices is a concerning aspect that needs to be addressed with i...
Internet of Measurement Things: Toward an Architectural Framework for the Calibration Industry Nikoo, Mahdi Saeedi; Kaya, Muhammed Çağrı; Schwartz, Michael L.; Oğuztüzün, Mehmet Halit S. (2019-01-01) Many improvements have been realized in various domains, whether commercial or societal, through the use of the Internet of Things (IoT) vision, since the introduction of the IoT concept some two decades ago. Nowadays, the benefits that IoT technologies promise are becoming highly attractive for the industrial domain, in particular. There is no doubt that manufacturing of products, processing of big data produced in the production phases and gathering of customer behavior profiles, increases the efficiency ...
Explainable Security in SDN-Based IoT Networks Sarica, Alper Kaan; Angın, Pelin (2020-12-01) The significant advances in wireless networks in the past decade have made a variety of Internet of Things (IoT) use cases possible, greatly facilitating many operations in our daily lives. IoT is only expected to grow with 5G and beyond networks, which will primarily rely on software-defined networking (SDN) and network functions virtualization for achieving the promised quality of service. The prevalence of IoT and the large attack surface that it has created calls for SDN-based intelligent security solut...
Smart Residence Management System RMS with Personalized Comfort Ay, Meral Başak; Gökalp, Ebru; Eren, Pekin Erhan; Tanyer, Ali Murat (2016-10-31) The built environment is undergoing a significant evolution, enabled by the Internet of Things (IoT) concept. IoT offers some far-reaching opportunities with the help of cloud computing to exploit technological advances for the benefit of the users, society, and the environment. Technological advances in IoT makes it easier to monitor and manage environments around us. Also, increasing control over lighting/daylighting amount, fresh air ventilation rate, temperature, noise level and humidity level increase ...

Citation Formats

A. Demirpolat, A. K. Sarica, and P. Angın, “Protedge: A few-shot ensemble learning approach to software-defined networking-assisted edge security,” TRANSACTIONS ON EMERGING TELECOMMUNICATIONS TECHNOLOGIES, pp. 0–0, 2020, Accessed: 00, 2020. [Online]. Available: https://hdl.handle.net/11511/56154.