D2Gen: A Decentralized Device Genome Based Integrity Verification Mechanism for Collaborative Intrusion Detection Systems

【Author】 Makhdoom, Imran; Hayawi, Kadhim; Kaosar, Mohammed; Mathew, Sujith Samuel; Ho, Pin-Han

【Source】IEEE ACCESS

【影响因子】3.476

【Abstract】Collaborative Intrusion Detection Systems are considered an effective defense mechanism for large, intricate, and multilayered Industrial Internet of Things against many cyberattacks. However, while a Collaborative Intrusion Detection System successfully detects and prevents various attacks, it is possible that an inside attacker performs a malicious act and compromises an Intrusion Detection System node. A compromised node can inflict considerable damage on the whole collaborative network. For instance, when a malicious node gives a false alert of an attack, the other nodes will unnecessarily increase their security and close all of their services, thus, degrading the system's performance. On the contrary, if the spurious node approves malicious traffic into the system, the other nodes would also be compromised. Therefore, to detect a compromised node in the network, this article introduces a device integrity check mechanism based on "Digital Genome." In medical science, a genome refers to a set that contains all of the information needed to build and maintain an organism. Based on the same concept, the digital genome is computed over a device's vital hardware, software, and other components. Hence, if an attacker makes any change in a node's hardware and software components, the digital genome will change, and the compromised node will be easily detected. It is envisaged that the proposed integrity attestation protocol can be used in diverse Internet of Things and other information technology applications to ensure the legitimate operation of end devices. This study also proffers a comprehensive security and performance analysis of the proposed framework.

【Keywords】Protocols; Intrusion detection; Codes; Collaboration; Logic gates; Hardware; Genomics; Insider attacks; integrity check; collaborative intrusion detection system; device genome; device security; blockchain; Internet of Things

【发表时间】2021

【收录时间】2022-01-02

【文献类型】

【主题类别】

--