IDEAS home Printed from https://ideas.repec.org/a/gam/jftint/v15y2022i1p9-d1015181.html
   My bibliography  Save this article

HH-NIDS: Heterogeneous Hardware-Based Network Intrusion Detection Framework for IoT Security

Author

Listed:
  • Duc-Minh Ngo

    (Electrical and Electronic Engineering, University College Cork, T12 K8AF Cork, Ireland)

  • Dominic Lightbody

    (Electrical and Electronic Engineering, University College Cork, T12 K8AF Cork, Ireland)

  • Andriy Temko

    (Electrical and Electronic Engineering, University College Cork, T12 K8AF Cork, Ireland)

  • Cuong Pham-Quoc

    (Computer Science and Engineering, Ho Chi Minh City University of Technology (HCMUT), VNU-HCM, 268 Ly Thuong Kiet St., Dist. 10, Ho Chi Minh City 740050, Vietnam)

  • Ngoc-Thinh Tran

    (Computer Science and Engineering, Ho Chi Minh City University of Technology (HCMUT), VNU-HCM, 268 Ly Thuong Kiet St., Dist. 10, Ho Chi Minh City 740050, Vietnam)

  • Colin C. Murphy

    (Electrical and Electronic Engineering, University College Cork, T12 K8AF Cork, Ireland)

  • Emanuel Popovici

    (Electrical and Electronic Engineering, University College Cork, T12 K8AF Cork, Ireland)

Abstract

This study proposes a heterogeneous hardware-based framework for network intrusion detection using lightweight artificial neural network models. With the increase in the volume of exchanged data, IoT networks’ security has become a crucial issue. Anomaly-based intrusion detection systems (IDS) using machine learning have recently gained increased popularity due to their generation’s ability to detect unseen attacks. However, the deployment of anomaly-based AI-assisted IDS for IoT devices is computationally expensive. A high-performance and ultra-low power consumption anomaly-based IDS framework is proposed and evaluated in this paper. The framework has achieved the highest accuracy of 98.57% and 99.66% on the UNSW-NB15 and IoT-23 datasets, respectively. The inference engine on the MAX78000EVKIT AI-microcontroller is 11.3 times faster than the Intel Core i7-9750H 2.6 GHz and 21.3 times faster than NVIDIA GeForce GTX 1650 graphics cards, when the power drawn was 18mW. In addition, the pipelined design on the PYNQ-Z2 SoC FPGA board with the Xilinx Zynq xc7z020-1clg400c device is optimised to run at the on-chip frequency (100 MHz), which shows a speedup of 53.5 times compared to the MAX78000EVKIT.

Suggested Citation

  • Duc-Minh Ngo & Dominic Lightbody & Andriy Temko & Cuong Pham-Quoc & Ngoc-Thinh Tran & Colin C. Murphy & Emanuel Popovici, 2022. "HH-NIDS: Heterogeneous Hardware-Based Network Intrusion Detection Framework for IoT Security," Future Internet, MDPI, vol. 15(1), pages 1-20, December.
  • Handle: RePEc:gam:jftint:v:15:y:2022:i:1:p:9-:d:1015181
    as

    Download full text from publisher

    File URL: https://www.mdpi.com/1999-5903/15/1/9/pdf
    Download Restriction: no

    File URL: https://www.mdpi.com/1999-5903/15/1/9/
    Download Restriction: no
    ---><---

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:gam:jftint:v:15:y:2022:i:1:p:9-:d:1015181. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    We have no bibliographic references for this item. You can help adding them by using this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: MDPI Indexing Manager (email available below). General contact details of provider: https://www.mdpi.com .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.