Please use this identifier to cite or link to this item:
Title: A graph neural network method for distributed anomaly detection in IoT
Authors: Protogerou, Aikaterini
Papadopoulos, Stavros
Drosou, Anastasios
Tzovaras, Dimitrios
Refanidis, Ioannis
Type: Article
Subjects: FRASCATI::Natural sciences::Computer and information sciences
Keywords: IoT cybersecurity
graph inherent anomaly detection framework
graph neural networks
DDoS attack detection
Decentralized detection
Synergistic detection
Multi-agent detection
Issue Date: 2021
Publisher: Springer Nature
Source: Evolving Systems
Volume: 12
First Page: 19
Last Page: 36
Abstract: Recent IoT proliferation has undeniably affected the way organizational activities and business procedures take place within several IoT domains such as smart manufacturing, food supply chain, intelligent transportation systems, medical care infrastructures etc. The number of the interconnected edge devices has dramatically increased, creating a huge volume of transferred data susceptible to leakage, modification or disruption, ultimately affecting the security level, robustness and QoS of the attacked IoT ecosystem. In an attempt to prevent or mitigate network abnormalities while accommodating the cohesiveness among the involved entities, modeling their interrelations and incorporating their structural, content and temporal attributes, graph-based anomaly detection solutions have been repeatedly adopted. In this article we propose, a multi-agent system, with each agent implementing a Graph Neural Network, in order to exploit the collaborative and cooperative nature of intelligent agents for anomaly detection. To this end, against the propagating nature of cyber-attacks such as the Distributed Denial-of-Service (DDoS), we propose a distributed detection scheme, which aims to monitor efficiently the entire network infrastructure. To fulfill this task, we consider employing monitors on active network nodes such as IoT devices, SDN forwarders, Fog Nodes, achieving localization of anomaly detection, distribution of allocated resources such as the bandwidth and power consumption and higher accuracy results. In order to facilitate the training, testing and evaluation activities of the Graph Neural Network algorithm, we create simulated datasets of network flows of various normal and abnormal distributions, out of which we extract essential structural and content features to be passed to neighbouring agents.
ISSN: 1868-6478
Electronic ISSN: 1868-6486
Other Identifiers: 10.1007/s12530-020-09347-0
Appears in Collections:Department of Applied Informatics

Files in This Item:
File Description SizeFormat 
Evolving_Systems_postprint.pdf1,72 MBAdobe PDFView/Open

Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.