Development of an Algorithm for Detecting Cyberattacks in Distributed Information Systems

Abstract

The proposed study is devoted to the development of an algorithm for detecting network attacks. The considered approach to detection of attacks is based on monitoring and the description of states of the behavior of data packets in networks of the Internet of things. The developed network attack detection subsystem demonstrates high efficiency in detecting unknown deviations in the process of data packet transmission. The proposed attack detection technology can be used to protect data packets in public IoT networks, where there is a high probability of new cyberattacks. The greatest efficiency of the developed algorithm is achieved in IoT systems, where the use of classes of certain network attacks is limited to online services and does not change significantly over time. This algorithm allows the use of programmed models of the normal behavior of network packets to detect possible cyberattacks.