Skip to search boxSkip to navigationSkip to main content

An unsupervised approach for the detection of zero‐day distributed denial of service attacks in Internet of Things networks

  • Monika Roopak
    ,
  • Simon Parkinson
    ,
  • Gui Yun Tian
    ,
  • Yachao Ran
    ,
  • Saad Khan
    ,
  • Balasubramaniyan Chandrasekaran
  • University of Huddersfield
    ,
  • Newcastle University
    ,
  • Florida Polytechnic University
Research Output:
Contribution to journal
Article
 Peer-review

Open access

Abstract

The authors introduce an unsupervised Intrusion Detection System designed to detect zero-day distributed denial of service (DDoS) attacks in Internet of Things (IoT) networks. This system can identify anomalies without needing prior knowledge or training on attack information. Zero-day attacks exploit previously unknown vulnerabilities, making them hard to detect with traditional deep learning and machine learning systems that require pre-labelled data. Labelling data is also a time-consuming task for security experts. Therefore, unsupervised methods are necessary to detect these new threats. The authors focus on DDoS attacks, which have recently caused significant financial and service disruptions for many organisations. As IoT networks grow, these attacks become more sophisticated and harmful. The proposed approach detects zero-day DDoS attacks by using random projection to reduce data dimensionality and an ensemble model combining K-means, Gaussian mixture model, and one-class SVM with a hard voting technique for classification. The method was evaluated using the CIC-DDoS2019 dataset and achieved an accuracy of 94.55%, outperforming other state-of-the-art unsupervised learning methods.

Publication Information

Output type

Research Output:
Contribution to journal
Article
 Peer-review

Original language

English

Pages from-to (Number of pages)

Pages 513-527 (15 pages)

Journal (Volume, Issue Number)

IET Networks (Volume 13, Issue 5-6)

Publication milestones

  • Accepted/In press - 03/09/2024
  • Published - 08/10/2024

Publication status

Published - 08/10/2024

ISSN

2047-4954

Publication IDs

  • handle.net: 10547/626391
  • Scopus: 85205900207

Access to documents

Publication metrics

Metrics

Download statistics
Download count
6

PlumX, opens in new tab

Captures
38
Mentions
1
21