A novel intelligent approach for man-in-the-middle attacks detection over internet of things environments based on message queuing telemetry transport
![Thumbnail](/dspace/bitstream/handle/2183/36388/Michelena_Alvaro_2024_A-novel-intelligent_approach_for_man_in_the_middle_attacks_detection.pdf.jpg?sequence=5&isAllowed=y)
Use este enlace para citar
http://hdl.handle.net/2183/36388
A non ser que se indique outra cousa, a licenza do ítem descríbese como Atribución-NoComercial 4.0 Internacional
Coleccións
- GI-LIDIA - Artigos [64]
- GI-CTC - Artigos [81]
Metadatos
Mostrar o rexistro completo do ítemTítulo
A novel intelligent approach for man-in-the-middle attacks detection over internet of things environments based on message queuing telemetry transportAutor(es)
Data
2024Cita bibliográfica
Michelena, A., Aveleira‐Mata, J., Jove, E., Bayón‐Gutiérrez, M., Novais, P., Romero, O. F., ... & Aláiz‐Moretón, H. (2024). A novel intelligent approach for man‐in‐the‐middle attacks detection over internet of things environments based on message queuing telemetry transport. Expert Systems, 41(2), e13263. https://doi.org/10.1111/exsy.13263
Resumo
[Abstract]: One of the most common attacks is man-in-the-middle (MitM) which, due to its complex behaviour, is difficult to detect by traditional cyber-attack detection systems. MitM attacks on internet of things systems take advantage of special features of the protocols and cause system disruptions, making them invisible to legitimate elements. In this work, an intrusion detection system (IDS), where intelligent models can be deployed, is the approach to detect this type of attack considering network alterations. Therefore, this paper presents a novel method to develop the intelligent model used by the IDS, being this method based on a hybrid process. The first stage of the process implements a feature extraction method, while the second one applies different supervised classification techniques, both over a message queuing telemetry transport (MQTT) dataset compiled by authors in previous works. The contribution shows excellent performance for any compared classification methods. Likewise, the best results are obtained using the method with the highest computational cost. Thanks to this, a functional IDS will be able to prevent MQTT attacks.
Palabras chave
Artificial neural networks
Cybersecurity
Decision trees
K-nearest-neighbours
Man-in-the-middle
Message queuing telemetry transport
Principal component analysis
Random forest
Cybersecurity
Decision trees
K-nearest-neighbours
Man-in-the-middle
Message queuing telemetry transport
Principal component analysis
Random forest
Versión do editor
Dereitos
Atribución-NoComercial 4.0 Internacional
ISSN
0266-4720
1468-0394
1468-0394