Intrusion detection system and its types in IoT-enabled devices
Ilemona S Atawodi, Zhaoxian Zhou · 2024
Rapid advancements in chip technology worldwide have greatly contributed to the rapid proliferation of billions of small, interconnected devices, collectively forming the Internet of Things (IoT). This surge in technological development has brought forth a unique set of challenges, with security and privacy standing out as major concerns. To address these issues, a key tool that has emerged in recent years to keep pace with IoT advancements is the intrusion detection systems (IDS). IDSs play an indispensable role in safeguarding the security of these devices against a wide array of potential threats. This chapter offers a comprehensive overview of IDS and their operation in the context of IoT-enabled devices. It begins by emphasizing the significance of IDS within the IoT landscape, delving into security threats that often afflict these devices, expanding the architecture of IDSs specific to this domain, and explaining their workflow. This chapter also introduces various types of IDS, including host-based IDSs (HIDSs), network-based IDSs (NIDSs), and hybrid IDSs. It explores the detection methods employed, covering signature-based detection, anomaly-based detection, and machine learning-based detection. In conclusion, the chapter addresses deployment constraints and discusses future trends in IoT IDS, providing a comprehensive perspective on the subject.