Intrusion Detection Systems for IoT
Hyunwoo Lee, Anand Mudgerikar, Ninghui Li, Elisa Bertino · 2022
This chapter focuses on techniques to detect attacks on internet of things (IoT) devices. It reviews intrusion detection systems (IDSes) proposed for IoT devices and categorizes the IDSes according to the research challenges they aim to address and their core techniques. The chapter also categorizes the IDSes based on the threats that they aim to prevent, such as routing attacks in IPv6 over low-power wireless personal area networks (6LoWPAN). It describes the IDSes concerning: from where the IDS collects logs to be analyzed (i.e. host-based or network-based); the type of architectures the IDS uses (i.e. centralized, decentralized, or distributed); and the type of detection mechanism that the IDS relies on (i.e. signature-based, anomaly-based, or hybrid). The IDSes that deal with complex attacks should enable the protection of IoT devices from advanced threats.