TU Darmstadt / ULB / TUbiblio

IoT Dataset Generation Framework for Evaluating Anomaly Detection Mechanisms

Meyer-Berg, Andreas and Egert, Rolf and Böck, Leon and Mühlhäuser, Max (2020):
IoT Dataset Generation Framework for Evaluating Anomaly Detection Mechanisms.
ACM ICPS, 15th International Conference on Availability, Reliability and Security (ARES'20), virtual Conference, 25.-28.08., ISBN 978-1-4503-8833-7,
[Conference or Workshop Item]

Abstract

Machine learning based anomaly detection mechanisms are a promising tool to detect and protect networks from previously unknown attacks. The quality of those mechanisms strongly depends on the availability of large amounts of data for their training and evaluation. However, suitable datasets are scarce, as they are rarely shared by those who possess them. This impedes progress in the development and deployment of sophisticated machine learning mechanisms. This paper aims to accelerate this thwarted development process by introducing a network simulation framework for training-data generation and evaluation of data-driven mechanisms, like anomaly detection approaches. The framework enables training, testing, and evaluating data-driven approaches in a safe and extensible environment prior to their deployment in real-world systems. We showcase the capabilities of the framework in a case study. For this, a smart home network is modeled and simulated within the framework. The generated data is used to train an anomaly detection approach, which is then used to detect various anomalies introduced by attacks on the network. This ability to train and evaluate data-driven algorithms within the framework allows users to accelerate the otherwise time-consuming cycle of deploying, modifying, and re-training in live environments, which ultimately advances the development of novel anomaly detection approaches.

Item Type: Conference or Workshop Item
Erschienen: 2020
Creators: Meyer-Berg, Andreas and Egert, Rolf and Böck, Leon and Mühlhäuser, Max
Title: IoT Dataset Generation Framework for Evaluating Anomaly Detection Mechanisms
Language: English
Abstract:

Machine learning based anomaly detection mechanisms are a promising tool to detect and protect networks from previously unknown attacks. The quality of those mechanisms strongly depends on the availability of large amounts of data for their training and evaluation. However, suitable datasets are scarce, as they are rarely shared by those who possess them. This impedes progress in the development and deployment of sophisticated machine learning mechanisms. This paper aims to accelerate this thwarted development process by introducing a network simulation framework for training-data generation and evaluation of data-driven mechanisms, like anomaly detection approaches. The framework enables training, testing, and evaluating data-driven approaches in a safe and extensible environment prior to their deployment in real-world systems. We showcase the capabilities of the framework in a case study. For this, a smart home network is modeled and simulated within the framework. The generated data is used to train an anomaly detection approach, which is then used to detect various anomalies introduced by attacks on the network. This ability to train and evaluate data-driven algorithms within the framework allows users to accelerate the otherwise time-consuming cycle of deploying, modifying, and re-training in live environments, which ultimately advances the development of novel anomaly detection approaches.

Publisher: ACM ICPS
ISBN: 978-1-4503-8833-7
Divisions: 20 Department of Computer Science
20 Department of Computer Science > Telecooperation
Event Title: 15th International Conference on Availability, Reliability and Security (ARES'20)
Event Location: virtual Conference
Event Dates: 25.-28.08.
Date Deposited: 31 Aug 2020 11:11
Corresponding Links:
Export:
Suche nach Titel in: TUfind oder in Google
Send an inquiry Send an inquiry

Options (only for editors)
Show editorial Details Show editorial Details