A Survey of Anomaly Detection Approaches in Internet of Things
نویسندگان
1 Faculty of Electronic and Computer Engineering, Malek Ashtar University of Technology, Tehran, Iran
2 Faculty of Computer Engineering, Sharif University of technology, Tehran, Iran
3 Department of Computer Engineering and Information Technology, Amirkabir University of Technology
doi
10.22042/isecure.2018.116976.408چکیده
Internet of Things is an ever-growing network of heterogeneous and constraint nodes which are connected to each other and the Internet. Security plays an important role in such networks. Experience has proved that encryption and authentication are not enough for the security of networks and an Intrusion Detection System is required to detect and to prevent attacks from malicious nodes. In this regard, Anomaly based Intrusion Detection Systems identify anomalous behavior of the network and consequently detect possible intrusion, unknown and stealth attacks. To this end, this paper analyses, evaluates and classifies anomaly detection approaches and systems specific to the Internet of Things. For this purpose, anomaly detection systems and approaches are analyzed in terms of engine architecture, application position, and detection method and in each point of view, approaches are investigated considering the associated classification.
