CREBAD：基于芯片辐射的物联网设备异常检测方案

倪明涛; 赵波; 吴福生; 樊佩茹

doi:10.7544/issn1000-1239.2018.20180067

CREBAD：基于芯片辐射的物联网设备异常检测方案

倪明涛^1,2,3,
赵波^1,2,
吴福生^1,2,
樊佩茹^1,2

¹(武汉大学国家网络安全学院武汉 430072)
²(空天信息安全与可信计算教育部重点实验室(武汉大学) 武汉 430072)
³(乐山师范学院计算机科学学院四川乐山 614000) (nmt@whu.edu.cn)

基金项目: 国家“八六三”高技术研究发展计划基金项目(2015AA016002);国家“九七三”重点基础研究发展计划基金项目(2014CB340600，2014CB340601)

详细信息

中图分类号: TP309
计量
- 文章访问数: 1398
- HTML全文浏览量: 3
- PDF下载量: 501
出版历程
- 发布日期: 2018-06-30

CREBAD: Chip Radio Emission Based Anomaly Detection Scheme of IoT Devices

Ni Mingtao^1,2,3,
Zhao Bo^1,2,
Wu Fusheng^1,2,
Fan Peiru^1,2

¹(School of Cyber Science and Engineering, Wuhan University, Wuhan 430072)
²(Key Laboratory of Aerospace Information Security and Trusted Computing (Wuhan University), Ministry of Education, Wuhan 430072)
³(School of Computer Science, Leshan Normal University, Leshan, Sichuan 614000)

摘要

摘要: 随着物联网的飞速发展，物联网设备的安全问题受到了广泛的关注.物联网设备的软硬件特性导致其极易遭受各类攻击.对物联网设备的异常检测成为近年的热点，传统的基于入侵检测、流量分析等防护方式无法适用于物联网设备的软硬件环境.针对这一问题，提出了基于芯片辐射的异常检测方案，以物联网设备在工作时向外辐射的电磁波信号作为检测依据，采用遗传算法和近似熵理论对原始信号进行特征提取和选择后，利用一类支持向量机对正常行为产生的辐射信号进行训练.该方案具有无侵入的特性，无需对原有系统进行任何软硬件改造，适用于现有物联网设备.最后的实验结果表明：与其他常用的异常检测方案相比，该方案能够更有效地检测物联网设备的异常行为，具有较高的准确性和较低的误报率.
- 异常检测 /
- 物联网设备 /
- 无线电辐射 /
- 一类支持向量机 /
- 聚类
Abstract: with the rapid development of the Internet of things (IoT), IoT security issues have received widespread attention. The hardware and software features of IoT devices make them extremely vulnerable to all types of attacks. Anomaly detection of IoT devices has become a hot spot in recent years. The traditional protection methods based on intrusion detection and traffic analysis can not adapt to the hardware and software environment of IoT devices. In order to solve this problem, an anomaly detection scheme based on chip radiation is proposed. By using the electromagnetic wave signals of IoT devices radiating outwards during operation as detection basis, the original signals are extracted and selected by genetic algorithm and approximate entropy. Finally, the signal of normal behavior radiation is trained using a one-class support vector machine algorithm. The program has non-invasive features, without the need for any transformation of the original system hardware and software, applying to the existing IoT devices. The final experimental results show that compared with other commonly used anomaly detection schemes, this scheme can detect the abnormal behavior of IoT devices more effectively, with higher accuracy and lower false alarm rate.
- anomaly detection /
- IoT device /
- radio emission /
- one-class SVM /
- clustering

HTML全文

参考文献(0)

施引文献(8)

期刊类型引用(7)

1.	崔竞松，张童桐，郭迟，郭文飞. 基于时延特征的网络设备异常检测. 计算机科学. 2023(03): 371-379 . 百度学术
2.	李雄伟，刘俊延，张阳，陈开颜，刘林云. 基于SAE-OCSVM的伪芯片检测研究. 湖南大学学报(自然科学版). 2022(02): 117-124 . 百度学术
3.	徐俊梅. 基于物联网的移动网络交互行为异常检测. 辽东学院学报(自然科学版). 2021(01): 34-38 . 百度学术
4.	陈璐，孙亚杰，张立强，陈云. 物联网环境下基于DICE的设备度量方案. 信息网络安全. 2020(04): 21-30 . 百度学术
5.	徐伟，李佟鸿. 基于浮动域值法的物联网安全协方差盲检测. 计算机仿真. 2020(03): 440-444+457 . 百度学术
6.	李力恒，孙志勇. 基于数据挖掘技术的可穿戴医疗设备异常自动监测研究. 自动化与仪器仪表. 2020(05): 17-20 . 百度学术
7.	马峻岩，张颖，李易，王瑾，张特. HA2：层次化的物联网感知设备固件异常分析技术. 计算机工程与应用. 2019(22): 60-68+179 . 百度学术