Deep learning-based anomaly detection for edge-layer devices

This thesis work proposes a novel DL-based anomaly detection framework for IoT environments, employing higher-capacity embedded devices as a first line of defense for the IoT edge layer. In the proposed framework, embedded devices implement the DL anomaly detection engine at the network gateway and adapt to potential attacks by retraining on incoming network traffic. In order to test the feasibility of this framework, two neural network models, trained on variations of the CICIDS 2018 Intrusion Detection Data Set, are deployed and tested on the Raspberry Pi 4. Model performance metrics, including fit and evaluation time across various batch and data sizes, are compared alongside those of identical models running on higher-capacity devices. Device resource metrics of CPU and Memory usage are monitored for comparison across model variations, batch and data sizes.The potential benefit of retraining models at the edge is evaluated by comparing performance of models executing consistent retraining.

Grantor dc:publisher

University of Tennessee at Chattanooga

Author dc:creator

• Hunter, Jonathan

Contributors dc:contributor

• Kandah, Farah
• Ward, Michael; Skjellum, Anthony; Reising, Donald R.
• College of Engineering and Computer Science

• Internet of things
• Intrusion detection systems (Computer science)
• Machine learning
• Neural networks (Computer science)

Licence

• http://rightsstatements.org/vocab/InC/1.0/

Language dc:language

English, eng

Repository record dc:identifier

https://scholar.utc.edu/theses/740

OAI identifier oai:identifier

oai:scholar.utc.edu:theses-1910