SACNN-IDS: A self-attention convolutional neural network for intrusion detection in industrial internet of things  

作　　者：Mimonah Al Qathrady Safi Ullah Mohammed S.Alshehri Jawad Ahmad Sultan Almakdi Samar M.Alqhtani Muazzam A.Khan Baraq Ghaleb 

机构地区：[1]Department of Information Systems,College of Computer Science and Information Systems,Najran University,Najran,Saudi Arabia [2]Department of Computer Science,Quaid-i-Azam University,Islamabad,Pakistan [3]Department of Computer Science,College of Computer Science and Information Systems,Najran University,Najran,Saudi Arabia [4]School of Computing,Engineering and the Built Environment,Edinburgh Napier University,Edinburgh,UK [5]ICESCO Chair Big Data Analytics and Edge Computing,Quaid-i-Azam University,Islamabad,Pakistan

出　　处：《CAAI Transactions on Intelligence Technology》2024年第6期1398-1411,共14页智能技术学报(英文)

基　　金：Deputy for Research and Innovation-Ministry of Education,Kingdom of Saudi Arabia,Grant/Award Number:NU/IFC/02/SERC/-/31;Institutional Funding Committee at Najran University,Kingdom of Saudi Arabia。

摘　　要：Industrial Internet of Things(IIoT)is a pervasive network of interlinked smart devices that provide a variety of intelligent computing services in industrial environments.Several IIoT nodes operate confidential data(such as medical,transportation,military,etc.)which are reachable targets for hostile intruders due to their openness and varied structure.Intrusion Detection Systems(IDS)based on Machine Learning(ML)and Deep Learning(DL)techniques have got significant attention.However,existing ML and DL-based IDS still face a number of obstacles that must be overcome.For instance,the existing DL approaches necessitate a substantial quantity of data for effective performance,which is not feasible to run on low-power and low-memory devices.Imbalanced and fewer data potentially lead to low performance on existing IDS.This paper proposes a self-attention convolutional neural network(SACNN)architecture for the detection of malicious activity in IIoT networks and an appropriate feature extraction method to extract the most significant features.The proposed architecture has a self-attention layer to calculate the input attention and convolutional neural network(CNN)layers to process the assigned attention features for prediction.The performance evaluation of the proposed SACNN architecture has been done with the Edge-IIoTset and X-IIoTID datasets.These datasets encompassed the behaviours of contemporary IIoT communication protocols,the operations of state-of-the-art devices,various attack types,and diverse attack scenarios.

关 键 词：convolutional neural network deep learning industrial internet of things intrusion detection self-attention 

分 类 号：TP3[自动化与计算机技术—计算机科学与技术]