Immune-based Internet of Things distributed intrusion detection method and system

Abstract

The invention discloses an immunity based IoT distributed invasion detection method. The method comprises the following steps that an integral immunity based IoT distributed invasion detection model is constructed, local sub-models and a central sub-model are constructed, the local sub-models train a new memory detector, the central sub-model receives and packages a new vaccine including the memory detector, global vaccination is carried out, and invasion detection for the IoT is realized. The invention also discloses an immunity based IoT distributed invasion detection system which comprises an integral model module, a local sub-model module and a central sub-model module; the local sub-model module comprises an initialization module, an autologous conversion module, an antigen conversion module and a memory detector generation module; and the central sub-model module comprises a vaccine reception module, a vaccine packaging module and a vaccination module. According to the system and method, a distributed cooperation mechanism is used to improve the capability of detecting global invasion of the IoT.

Description

technical field [0001] The invention relates to the field of information security of the Internet of Things, in particular to an immune-based distributed intrusion detection method and system of the Internet of Things. Background technique [0002] As the Internet of Things continues to be popularized and applied, more and more sensing nodes will be exposed to unmanned monitoring environments, and the security threats they face will become increasingly prominent. Attackers with ulterior motives are also trying to use vulnerable sensing nodes to attack the Internet of Things. IoT security issues have become a hot topic for researchers. The Internet of Things faces not only traditional attacks such as replay attacks and denial of service attacks, but also unique attacks such as cloning attacks, copying attacks, impersonation attacks, and interference attacks. Foreign scholars have described an attack on an Internet of Things system that remotely controls electric furnaces, wh...

AI Technical Summary

Problems solved by technology

[0004] The network anomaly detection method based on the principle of artificial immunity described in Chinese Patent Publication No. CN101478534 first collects training antigen data, then learns the artificial immune system, and finally detects network anomalies; the method described in CN1777119 first obtains the host audit Detecting data sources of data and network packet data and formatting its characteristics, then generating a detector set, and finally performing anomaly detection through the detector set; a method based on artificial immunity put into a dynamic network described in Chinese Patent Publication No. CN101299691B The grid intrusion detection method firstly obtains a mature detector, and then under the coordination of the artificial immune mechanism, dynamically handles the intrusion detection problem in the grid environment. In the above three patents, it is difficult to realize the method of learning first and then detecting. To adapt to the complex network situation and the need for fast and real-time detection in high-speed networks, the wireless sensor network environment faced by the Internet of Things is ever-changing. If the detection measures of the traditional static intrusion detection technology remain unchanged, it cannot adapt to the Changes in the networking environment

Images