Where academic tradition
meets the exciting future

Distributed Internal Anomaly Detection System for Internet-of-Things

Nanda Kumar Thanigaivelan, Ethiopia Nigussie, Rajeev Kumar Kanth, Seppo Virtanen, Jouni Isoaho, Distributed Internal Anomaly Detection System for Internet-of-Things. In: Claudio E. Palazzi, Pietro Manzoni (Eds.), 2016 13th IEEE Annual Consumer Communications & Networking Conference (CCNC), 319–320, IEEE, 2016.

http://dx.doi.org/10.1109/CCNC.2016.7444797

Abstract:

We present overview of a distributed internal anomaly detection system for Internet-of-things. In the detection system, each node monitors its neighbors and if abnormal behavior is detected, the monitoring node will block the packets from the abnormally behaving node at the data link layer and reports to its parent node. The reporting propagates from child to parent nodes until it reaches the root. A novel control message, distress propagation object (DPO), is devised to report the anomaly to the subsequent parents and ultimately the edge-router. The DPO message is integrated to routing protocol for low-power and lossy networks (RPL). The system has configurable profile settings and it is able to learn and differentiate the nodes' normal and suspicious activities without a need for prior knowledge. It has different subsystems and operation phases at data link and network layers, which share a common repository in a node. The system uses network fingerprinting to be aware of changes in network topology and nodes' positions without any assistance from a positioning system.

BibTeX entry:

@INPROCEEDINGS{inpThNiKaViIs16a,
  title = {Distributed Internal Anomaly Detection System for Internet-of-Things},
  booktitle = {2016 13th IEEE Annual Consumer Communications & Networking Conference (CCNC)},
  author = {Thanigaivelan, Nanda Kumar and Nigussie, Ethiopia and Kanth, Rajeev Kumar and Virtanen, Seppo and Isoaho, Jouni},
  editor = {Palazzi, Claudio E. and Manzoni, Pietro},
  publisher = {IEEE},
  pages = {319–320},
  year = {2016},
}

Belongs to TUCS Research Unit(s): Communication Systems (ComSys)

Edit publication