An enhanced security scheme for query state inference in EPCglobal discovery services
Abdelmounaim Dahbi, Mazen G. Khair, Hussein Talaat Mouftah · 2014
The EPCglobal Network is a global network that provides trade partners with real-time and accurate data sharing capabilities. Discovery Services refer to a suite of network services performing the critical lookup function, which consists of querying a common repository in order to localize all information sources with relevant data. Given the high sensitivity of the exchanged data in the EPCglobal Network, it becomes crucial to secure Discovery Services. In this paper, we propose a probabilistic security scheme capable of detecting suspicious Discovery Services queries during transaction. The query is first converted into a vector of observed real values. These observed values are assumed to follow a Gaussian distribution both for safe and suspicious queries. Then, a classification algorithm computes a score for each state; i.e. safe and suspicious, and infers the state of the query. We conducted extensive experiments. The results show that, compared to a simple Gaussian model, our proposed scheme improves both the detection rate and the false alarm rate.