Denial of service attack detection and mitigation for internet of things using looking-back-enabled machine learning techniques

• Published in: Computers & electrical engineering Vol. 98; p. 107716
• Main Authors: Mihoub, Alaeddine, Fredj, Ouissem Ben, Cheikhrouhou, Omar, Derhab, Abdelouahid, Krichen, Moez
• Format: Journal Article
• Language: English
• Published: Amsterdam Elsevier Ltd 01-03-2022; Elsevier BV
• Subjects: Classifiers; Cybersecurity; DDoS; Denial of service attacks; DoS; Evaluation; Internet of Things; IoT; Looking-Back method; Machine Learning; Security management; DoS; Cybersecurity; DDoS; Machine Learning; Looking-Back method; IoT
• ISSN: 0045-7906; 1879-0755
• DOI: 10.1016/j.compeleceng.2022.107716

IoT (Internet of Things) systems are still facing a great number of attacks due to their integration in several areas of life. The most-reported attacks against IoT systems are "Denial of Service" (DoS) and "Distributed Denial of Service" (DDoS) attacks. In this paper, we investigate DoS/DDoS attacks detection for IoT using machine learning techniques. We propose a new architecture composed of two components: DoS/DDoS detection and DoS/DDoS mitigation. The detection component provides fine-granularity detection, as it identifies the specific type of attack, and the packet type used in the attack. In this way, it is possible to apply the corresponding mitigation countermeasure on specific packet types. The proposed DoS/DDoS detection component is a multi-class classifier that adopts the "Looking-Back" concept, and is evaluated on the Bot-IoT dataset. Evaluation results show promising results as a Looking-Back-enabled Random Forest classifier achieves an accuracy of 99.81%.