A multi-factor integration-based semi-supervised learning for address resolution protocol attack detection in SDIIoT
Nowadays, in the industrial Internet of things, address resolution protocol attacks are still rampant. Recently, the idea of applying the software-defined networking paradigm to industrial Internet of things is proposed by many scholars since this paradigm has the advantages of flexible deployment o...
Saved in:
| Main Authors: | , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
Wiley
2021-12-01
|
| Series: | International Journal of Distributed Sensor Networks |
| Online Access: | https://doi.org/10.1177/15501477211059940 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1849402873701466112 |
|---|---|
| author | Zhong Li Huimin Zhuang |
| author_facet | Zhong Li Huimin Zhuang |
| author_sort | Zhong Li |
| collection | DOAJ |
| description | Nowadays, in the industrial Internet of things, address resolution protocol attacks are still rampant. Recently, the idea of applying the software-defined networking paradigm to industrial Internet of things is proposed by many scholars since this paradigm has the advantages of flexible deployment of intelligent algorithms and global coordination capabilities. These advantages prompt us to propose a multi-factor integration-based semi-supervised learning address resolution protocol detection method deployed in software-defined networking, called MIS, to specially solve the problems of limited labeled training data and incomplete features extraction in the traditional address resolution protocol detection methods. In MIS method, we design a multi-factor integration-based feature extraction method and propose a semi-supervised learning framework with differential priority sampling. MIS considers the address resolution protocol attack features from different aspects to help the model make correct judgment. Meanwhile, the differential priority sampling enables the base learner in self-training to learn efficiently from the unlabeled samples with differences. We conduct experiments based on a real data set collected from a deepwater port and a simulated data set. The experiments show that MIS can achieve good performance in detecting address resolution protocol attacks with F1-measure, accuracy, and area under the curve of 97.28%, 99.41%, and 98.36% on average. Meanwhile, compared with fully supervised learning and other popular address resolution protocol detection methods, MIS also shows the best performance. |
| format | Article |
| id | doaj-art-941d6044f9324a73852d5085ff558d80 |
| institution | Kabale University |
| issn | 1550-1477 |
| language | English |
| publishDate | 2021-12-01 |
| publisher | Wiley |
| record_format | Article |
| series | International Journal of Distributed Sensor Networks |
| spelling | doaj-art-941d6044f9324a73852d5085ff558d802025-08-20T03:37:27ZengWileyInternational Journal of Distributed Sensor Networks1550-14772021-12-011710.1177/15501477211059940A multi-factor integration-based semi-supervised learning for address resolution protocol attack detection in SDIIoTZhong Li0Huimin Zhuang1The Key Laboratory of Embedded System and Service Computing Ministry of Education, Tongji University, Shanghai, ChinaCollege of Information Science and Technology, Donghua University, Shanghai, ChinaNowadays, in the industrial Internet of things, address resolution protocol attacks are still rampant. Recently, the idea of applying the software-defined networking paradigm to industrial Internet of things is proposed by many scholars since this paradigm has the advantages of flexible deployment of intelligent algorithms and global coordination capabilities. These advantages prompt us to propose a multi-factor integration-based semi-supervised learning address resolution protocol detection method deployed in software-defined networking, called MIS, to specially solve the problems of limited labeled training data and incomplete features extraction in the traditional address resolution protocol detection methods. In MIS method, we design a multi-factor integration-based feature extraction method and propose a semi-supervised learning framework with differential priority sampling. MIS considers the address resolution protocol attack features from different aspects to help the model make correct judgment. Meanwhile, the differential priority sampling enables the base learner in self-training to learn efficiently from the unlabeled samples with differences. We conduct experiments based on a real data set collected from a deepwater port and a simulated data set. The experiments show that MIS can achieve good performance in detecting address resolution protocol attacks with F1-measure, accuracy, and area under the curve of 97.28%, 99.41%, and 98.36% on average. Meanwhile, compared with fully supervised learning and other popular address resolution protocol detection methods, MIS also shows the best performance.https://doi.org/10.1177/15501477211059940 |
| spellingShingle | Zhong Li Huimin Zhuang A multi-factor integration-based semi-supervised learning for address resolution protocol attack detection in SDIIoT International Journal of Distributed Sensor Networks |
| title | A multi-factor integration-based semi-supervised learning for address resolution protocol attack detection in SDIIoT |
| title_full | A multi-factor integration-based semi-supervised learning for address resolution protocol attack detection in SDIIoT |
| title_fullStr | A multi-factor integration-based semi-supervised learning for address resolution protocol attack detection in SDIIoT |
| title_full_unstemmed | A multi-factor integration-based semi-supervised learning for address resolution protocol attack detection in SDIIoT |
| title_short | A multi-factor integration-based semi-supervised learning for address resolution protocol attack detection in SDIIoT |
| title_sort | multi factor integration based semi supervised learning for address resolution protocol attack detection in sdiiot |
| url | https://doi.org/10.1177/15501477211059940 |
| work_keys_str_mv | AT zhongli amultifactorintegrationbasedsemisupervisedlearningforaddressresolutionprotocolattackdetectioninsdiiot AT huiminzhuang amultifactorintegrationbasedsemisupervisedlearningforaddressresolutionprotocolattackdetectioninsdiiot AT zhongli multifactorintegrationbasedsemisupervisedlearningforaddressresolutionprotocolattackdetectioninsdiiot AT huiminzhuang multifactorintegrationbasedsemisupervisedlearningforaddressresolutionprotocolattackdetectioninsdiiot |