EScope: Effective Event Validation for IoT Systems Based on State Correlation
Typical Internet of Things (IoT) systems are event-driven platforms, in which smart sensing devices sense or subscribe to events (device state changes), and react according to the preconfigured trigger-action logic, as known as, automation rules. "Events" are essential elements to perform...
Saved in:
| Main Authors: | , , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
Tsinghua University Press
2023-06-01
|
| Series: | Big Data Mining and Analytics |
| Subjects: | |
| Online Access: | https://www.sciopen.com/article/10.26599/BDMA.2022.9020034 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1832573220934385664 |
|---|---|
| author | Jian Mao Xiaohe Xu Qixiao Lin Liran Ma Jianwei Liu |
| author_facet | Jian Mao Xiaohe Xu Qixiao Lin Liran Ma Jianwei Liu |
| author_sort | Jian Mao |
| collection | DOAJ |
| description | Typical Internet of Things (IoT) systems are event-driven platforms, in which smart sensing devices sense or subscribe to events (device state changes), and react according to the preconfigured trigger-action logic, as known as, automation rules. "Events" are essential elements to perform automatic control in an IoT system. However, events are not always trustworthy. Sensing fake event notifications injected by attackers (called event spoofing attack) can trigger sensitive actions through automation rules without involving authorized users. Existing solutions verify events via "event fingerprints" extracted by surrounding sensors. However, if a system has homogeneous sensors that have strong correlations among them, traditional threshold-based methods may cause information redundancy and noise amplification, consequently, decreasing the checking accuracy. Aiming at this, in this paper, we propose "EScope" , an effective event validation approach to check the authenticity of system events based on device state correlation. EScope selects informative and representative sensors using an Neural-Network-based (NN-based) sensor selection component and extracts a verification sensor set for event validation. We evaluate our approach using an existing dataset provided by Peeves. The experiment results demonstrate that EScope achieves an average 67% sensor amount reduction on 22 events compared with the existing work, and increases the event spoofing detection accuracy. |
| format | Article |
| id | doaj-art-708fc90e5a98465eb3890c2d954955d4 |
| institution | Kabale University |
| issn | 2096-0654 |
| language | English |
| publishDate | 2023-06-01 |
| publisher | Tsinghua University Press |
| record_format | Article |
| series | Big Data Mining and Analytics |
| spelling | doaj-art-708fc90e5a98465eb3890c2d954955d42025-02-02T05:26:53ZengTsinghua University PressBig Data Mining and Analytics2096-06542023-06-016221823310.26599/BDMA.2022.9020034EScope: Effective Event Validation for IoT Systems Based on State CorrelationJian Mao0Xiaohe Xu1Qixiao Lin2Liran Ma3Jianwei Liu4School of Cyber Science and Technology, Beihang University, Beijing 100191, ChinaSchool of Cyber Science and Technology, Beihang University, Beijing 100191, ChinaSchool of Cyber Science and Technology, Beihang University, Beijing 100191, ChinaDepartment of Computer Science, Texas Christian University, Fort Worth, TX 76129, USASchool of Cyber Science and Technology, Beihang University, Beijing 100191, ChinaTypical Internet of Things (IoT) systems are event-driven platforms, in which smart sensing devices sense or subscribe to events (device state changes), and react according to the preconfigured trigger-action logic, as known as, automation rules. "Events" are essential elements to perform automatic control in an IoT system. However, events are not always trustworthy. Sensing fake event notifications injected by attackers (called event spoofing attack) can trigger sensitive actions through automation rules without involving authorized users. Existing solutions verify events via "event fingerprints" extracted by surrounding sensors. However, if a system has homogeneous sensors that have strong correlations among them, traditional threshold-based methods may cause information redundancy and noise amplification, consequently, decreasing the checking accuracy. Aiming at this, in this paper, we propose "EScope" , an effective event validation approach to check the authenticity of system events based on device state correlation. EScope selects informative and representative sensors using an Neural-Network-based (NN-based) sensor selection component and extracts a verification sensor set for event validation. We evaluate our approach using an existing dataset provided by Peeves. The experiment results demonstrate that EScope achieves an average 67% sensor amount reduction on 22 events compared with the existing work, and increases the event spoofing detection accuracy.https://www.sciopen.com/article/10.26599/BDMA.2022.9020034internet of things (iot)event spoofingevent fingerprintcorrelation analysis |
| spellingShingle | Jian Mao Xiaohe Xu Qixiao Lin Liran Ma Jianwei Liu EScope: Effective Event Validation for IoT Systems Based on State Correlation Big Data Mining and Analytics internet of things (iot) event spoofing event fingerprint correlation analysis |
| title | EScope: Effective Event Validation for IoT Systems Based on State Correlation |
| title_full | EScope: Effective Event Validation for IoT Systems Based on State Correlation |
| title_fullStr | EScope: Effective Event Validation for IoT Systems Based on State Correlation |
| title_full_unstemmed | EScope: Effective Event Validation for IoT Systems Based on State Correlation |
| title_short | EScope: Effective Event Validation for IoT Systems Based on State Correlation |
| title_sort | escope effective event validation for iot systems based on state correlation |
| topic | internet of things (iot) event spoofing event fingerprint correlation analysis |
| url | https://www.sciopen.com/article/10.26599/BDMA.2022.9020034 |
| work_keys_str_mv | AT jianmao escopeeffectiveeventvalidationforiotsystemsbasedonstatecorrelation AT xiaohexu escopeeffectiveeventvalidationforiotsystemsbasedonstatecorrelation AT qixiaolin escopeeffectiveeventvalidationforiotsystemsbasedonstatecorrelation AT liranma escopeeffectiveeventvalidationforiotsystemsbasedonstatecorrelation AT jianweiliu escopeeffectiveeventvalidationforiotsystemsbasedonstatecorrelation |