Service Attacks Research Articles

Multi-Server user Authentication Scheme for Privacy Preservation with Fuzzy Commitment

The integration of artificial intelligence technology with a scalable Internet of Things (IoT) platform facilitates diverse smart communication services, allowing remote users to access services from anywhere at any time. The multi-server environment within IoT introduces a flexible security service model, enabling users to interact with any server through a single registration. To ensure secure and privacy preservation services for resources, an authentication scheme is essential. Zhao et al. recently introduced a user authentication scheme for the multi-server environment, utilizing passwords and smart cards, claiming resilience against well-known attacks. This paper conducts cryptanalysis on Zhao et al.'s scheme, focusing on denial of service and privacy attacks, revealing a lack of user-friendliness. Subsequently, we propose a new multi-server user authentication scheme for privacy preservation with fuzzy commitment over the IoT environment, addressing the shortcomings of Zhao et al.'s scheme. Formal security verification of the proposed scheme is conducted using the ProVerif simulation tool. Through both formal and informal security analyses, we demonstrate that the proposed scheme is resilient against various known attacks and those identified in Zhao et al.'s scheme.

Advanced machine learning approach for DoS attack resilience in internet of vehicles security

Recent years have witnessed security as a great concern in vehicular networks (VANET). Particularly, Denial of Service (DoS) and Distributed Denial of Service (DDoS) attacks can jeopardize the network by broadcasting a storm of packets. Correspondingly, the network resources are jammed with malicious traffic. In this connection, the existing research presented various techniques to cope with DoS and DDoS attacks. Different from those traditional approaches, this study proposes an Intelligent Intrusion Detection System (IDS) by leveraging Machine Learning (ML). The proposed IDS utilizes a publicly available dataset on the application layer for mitigating DDoS attacks. The designed ML-based IDS relies on combining both the Random Projection (RP) and Randomized Matrix Factorization (RMF) methods to achieve the best results for enhancing the detection capabilities of the IDS. This amalgamation enhances the system's detection capabilities by extracting and analyzing meaningful features from network traffic data. Experimental validation of our approach involves a comprehensive evaluation of various ML models, including Extra Tree Classifier (ETC), Logistic Regression (LR), and Random Forest (RF). Remarkably, the combined accuracy of these models yields an average system accuracy of 0.98, surpassing existing methods. Unlike conventional approaches, our proposed IDS excels in efficiency and exhibits notable performance in detecting DoS and DDoS attacks in VANET. This proficiency ensures the integrity and safety of vehicle communications. Thus, our research substantially contributes to the vehicular network security field. The presented findings establish a foundation for future advancements in securing connected vehicles.

A context-aware on-board intrusion detection system for smart vehicles

Modern vehicles are becoming more appealing to potential intruders due to two primary reasons. Firstly, they are now equipped with various connectivity features like WiFi, Bluetooth, and cellular connections, e.g., LTE and 5G, which expose them to external networks. Secondly, the growing complexity of on-board software increases the potential attack surface. In this article, we introduce CAHOOTv2, a context-sensitive intrusion detection system (IDS), aiming at enhancing the vehicle’s security and protect against potential intrusions. CAHOOTv2 leverages the vehicle’s sensors data, such as the amount of steering, the acceleration and brake inputs, to analyze driver habits and collect environmental information. To demonstrate the validity of the algorithm, we collected driving data from both an artificial intelligence (AI) and 39 humans. We include the AI driver to demonstrate that CAHOOTv2 is able to detect intrusions when the driver is both a human or an AI. The dataset is obtained using a modified version of the MetaDrive simulator, taking into account the presence of an intruder capable of performing the following types of intrusions: denial of service, replay, spoofing, additive and selective attacks. The sensors present in the vehicle are a numerical representation of the environment. The amount of steering, the acceleration and brake inputs given by the driver are based on the environmental situation. The intruder’s input often contradicts the driver’s wishes. CAHOOTv2 uses vehicle sensors to detect this contradiction. We perform several experiments that show the benefits of hyperparameter optimization. Indeed, we use a hyperparameter tuning paradigm to increase detection accuracy combining randomized and exhaustive search of hyperparameters. As a concluding remark, the results of CAHOOTv2 show great promise in detecting intrusions effectively.

Multi-Pattern GPU Accelerated Collision-Less Rabin-Karp for NIDS

In the domain of network communication, network intrusion detection systems (NIDS) play a crucial role in maintaining security by identifying potential threats. NIDS relies on packet inspection, often using rule-based databases to scan for malicious patterns. However, the expanding scale of internet connections hampers the rate of packet inspection. To address this, some systems employ GPU accelerated pattern matching algorithms. Yet, this approach is susceptible to denial of service (DOS) attacks, inducing hashing collisions and slowing inspection. This research introduces a GPU-optimized variation of the Rabin-Karp algorithm, achieving scalability on GPUs while resisting DOS attacks. Our open-source solution (https://github.com/AnasAbbas1/NIDS) combines six polynomial hashing functions, eliminating the need for false-positive validation. This leads to a substantial improvement in inspection speed and accuracy. The proposed system ensures minimal packet misclassification rates, solidifying its role as a robust tool for real-time network security.

Windowed Hamming Distance-Based Intrusion Detection for the CAN Bus

The use of a Controller Area Network (CAN) bus in the automotive industry for connecting electronic control units (ECUs) poses security vulnerabilities due to the lack of built-in security features. Intrusion Detection Systems (IDSs) have emerged as a practical solution for safeguarding the CAN bus. However, developing an effective IDS for in-vehicle CAN buses encounters challenges in achieving high precision for detecting attacks and meeting real-time requirements with limited computational resources. To address these challenges, we propose a novel method for anomaly detection on CAN data using windowed Hamming distance. Our approach utilizes sliding windows and Hamming distance to extract features from time series data. By creating benchmark windows that span at least one cycle of data, we compare newly generated windows with recorded benchmarks using the Hamming distance to identify abnormal CAN messages. During the experimental phase, we conduct extensive testing on both the public car-hack dataset and a proprietary dataset. The experimental results indicate that our method achieves an impressive accuracy of up to 99.67% in detecting Denial of Service (DoS) attacks and an accuracy of 98.66% for fuzzing attacks. In terms of two types of spoofing attacks, our method achieves detection accuracies of 99.48% and 99.61%, respectively, significantly outperforming the methods relying solely on the Hamming distance. Furthermore, in terms of detection time, our method significantly reduces the time consumption by nearly 20-fold compared to the approach using deep convolutional neural networks (DCNN), decreasing it from 6.7 ms to 0.37 ms.

Prescribed time formation synchronous tracking of unmanned aerial vehicles with denial of service attacks

This paper addresses the issue of robust prescribed time synchronous tracking control of unmanned aerial vehicles (UAVs) formation with denial of service attacks. A novel prescribed time synchronous tracking control scheme is proposed within a denial of service attack conversion mechanism. Firstly, on account of the UAV formation in the presence of aerodynamic damping and denial of service attacks, a formation cooperative control model is established under a second-order system. Secondly, to perform formation synchronous tracking within a settling time, a time-varying auxiliary function on account of synchronous state errors is designed for the convergence of prescribed time tracking. The control parameters are designed using a key eigenvalue scaling technique under the effect of denial of service attacks on network topology. The proposed scheme is also extended to UAV formation with a detailed-balanced graph. Finally, simulation results are presented to demonstrate the effectiveness of the proposed strategy.

Defeating Denial of Service Backdoor Attacks

Denial of Service (DoS) backdoor attacks are a significant threat to computer systems. Backdoor attacks involve the installation of unauthorized software on a target system, which is then used to launch various attacks against other systems. In this paper, we explore several techniques that can be used to defeat DoS backdoor attacks, including access control, encryption, network monitoring, patch management, incident response planning, and employee education. Denial of Service (DoS) and Backdoor attacks are common types of cyber-attacks that can cause severe damage to computer systems and networks. DoS attacks aim to disrupt the availability of a system by overwhelming it with traffic or exploiting vulnerabilities, while Backdoor attacks provide attackers with unauthorized access to a system. This paper proposes a framework for defeating both types of attacks by implementing security measures at multiple levels, including the application layer, network layer, and host layer. The proposed framework involves techniques such as traffic filtering, load balancing, network segmentation, access control, and anomaly detection. At the application layer, the framework proposes implementing security measures such as input validation, error handling, and resource allocation to prevent DoS attacks. At the network layer, the framework recommends deploying firewalls, routers, and intrusion detection systems to filter traffic and detect anomalies. At the host layer, the framework proposes implementing security measures such as operating system hardening, patch management, and antivirus software to prevent Backdoor attacks. The proposed framework aims to provide a comprehensive approach to defeating DoS and Backdoor attacks by combining multiple security measures to provide a layered defense. By implementing the proposed framework, organizations can enhance the security of their computer systems and networks and prevent these types of attacks from causing damage.

Framework for Detecting Distributed Denial of Services Attack in Cloud Environment

Framework for Detecting Distributed Denial of Services Attack in Cloud Environment

Attack-resilient fault detection for interconnected systems under DoS attack

In light of the expanding cyber-space applications, the imperative consideration of cyber-attack ramifications on system security is evident. This paper presents a resilient dynamic event-triggered fault detection scheme for a class of nonlinear interconnected systems subjected to denial of service (DoS) attacks. To counteract multifaceted threats, the co-design challenge involving switched-type fault detection filters and a resilient dynamic event-triggered transmission mechanism is addressed. In the design phase of the filters, the frequency information of the signal is considered comprehensively and linear solvable conditions ensuring desired augment system performance are delineated. Through a series of comparative simulation experiments, the findings support the conclusion that the proposed attack-tolerant fault detection mechanism not only conserves network resources but also demonstrates superior detection capabilities for specific frequency fault signals.

Rap-Densenet Framework for Network Attack Detection and Classification

Cybersecurity is becoming increasingly important with the rise in Internet usage. The two most frequent cyberattacks that can seriously harm a website or a server and render them inaccessible to other customers are denial of service (DoS) and distributed denial of service (DDoS) attacks. These attacks are so common and take many different forms, it is difficult to identify and respond to them with previous methods. Furthermore, computational complexity, inconsistency, and irrelevant data are problems for traditional intrusion detection methods. As a result, a powerful deep learning-based technique is applied in this study for the identification and categorisation of DoS and DDoS attacks. Refined Attention Pyramid Network (RAPNet)-based feature extraction is used in this proposed framework to extract features from the input data. Then, Binary Pigeon Optimisation Algorithm (BPOA) is used to determine the best features. After choosing optimal characteristics, Densenet201-based deep learning is deployed to categorise the assaults in Bot-IoT, CICIDS2017, and CICIDS2019 datasets. Furthermore, the Conditional Generative Adversarial Network (CGAN) is used to provide extra data samples for minority classes to address the issue of imbalanced data. The findings show that the proposed model can precisely identify and categorise DoS and DDoS assaults in comparison to the existing intrusion detection approaches with 99.43%, 99.26%, and 99.38% accuracy for CICIDS2019, CICIDS2017, and BoT-IoT correspondingly.

Binary observation‐based identification for finite impulse response systems under denial of service attacks

SummaryThis article considers the parameter identification problem for the finite impulse response system based on binary observations under denial of service attacks. First, in addition to designing the identification algorithm for the unknown parameter, and its convergence is verified, simultaneously obtaining the asymptotic normality. Then, based on the convergence speed of the identification algorithm and the covariance matrix of the estimation error, the optimal attack strategy problem is transformed into an optimization problem with constraints, then the optimal solution is given. Furthermore, a defense strategy with dual time‐scale input design method is proposed and its effectiveness is demonstrated. Finally, numerical simulations are applied to evidence the correctness of the raised method.

Classifying IP Spoofing Requests Using Heuristic Fuzzy Computer Network Approach

Distributed Denial of Service (DoS) Attack This represents a serious problem for Internet communications. This problem is exacerbated if an attacker tampers with the data. Source IP address. Attackers can easily change the source IP address leads to unauthorized access to network resources. Many solutions are available. Please identify this issue in your research community. In this paper, we proposed a detection method that takes data flow into account. Metric. An attacker can change any field in the IP, so expect a packet hop count field. In this article, he will introduce one. A Heuristic Fuzzy Logic Approach to Spoofing Detection package. Effective implementation of fuzzy rules the two member functions HC and PTT are the Receive IP header. The classification of forged packets is as follows: Identify changes up close Hop count and packet transmission time due to fuzzy Membership function using fuzzy triangles Membership features.

Overview of Distributed Denial of Service (DDoS) attack types and mitigation methods

In the evolving landscape of cyber threats, Distributed Denial of Service (DDoS) attacks pose a significant challenge to internet security. This research provides a comprehensive overview of various DDoS attack types and explores the efficacy of current mitigation strategies and categorizes DDoS attacks based on their methods and targets, highlighting their unique characteristics and impacts. The study delves into a range of mitigation methods, from traditional network-based approaches to recent advancements in artificial intelligence, assessing their strengths and limitations. Key findings indicate a dynamic interplay between the evolving complexity of DDoS attacks and the advancement of mitigation techniques. The research identifies gaps in current strategies and suggests areas for further development, emphasizing the need for adaptive, multi-layered defense mechanisms. This scientific article aims to provide cybersecurity professionals with a nuanced understanding of DDoS threats and a critical evaluation of the mitigation methods, guiding effective strategies to combat these evolving cyber risks.

An AI-Enabled Blockchain Algorithm: A Novel Approach to Counteract Blockchain Network Security Attacks

INTRODUCTION: In this research, we present a novel method for strengthening the security of blockchain networks through the use of AI-driven technology. Blockchain has emerged as a game-changing technology across industries, but its security flaws, particularly in relation to Sybil and Distributed Denial of Service (DDoS) attacks, are a major cause for worry. To defend the blockchain from these sophisticated attacks, our research centres on creating a strong security solution that combines networks of Long Short-Term Memory (LSTM) and Self-Organizing Maps (SOM).
 OBJECTIVES: The main goal of this project is to create and test an AI-driven blockchain algorithm that enhances blockchain security by utilising LSTM and SOM networks. These are the objectives that the research hopes to achieve: In order to assess the shortcomings and weaknesses of existing blockchain security mechanisms. The goal is to create a new approach that uses LSTM sequence learning and SOM pattern recognition to anticipate and stop security breaches. In order to see how well this integrated strategy works in a simulated blockchain setting against different types of security risks.
 METHODS: The methods used in our study are based on social network analysis. A combination of support vector machines (SOM) for pattern recognition and long short-term memory (LSTM) networks for learning and event sequence prediction using historical data constitutes the methodology. The steps involved in conducting research are: The current state of blockchain security mechanisms is examined in detail. Creating a virtual blockchain and incorporating the SOM+LSTM algorithm.
 Putting the algorithm through its paces in order to see how well it detects and defends against different security risks.
 RESULTS: Significant enhancements to blockchain network security are the primary outcomes of this study. Important results consist of: Using the SOM+LSTM technique, we were able to increase the detection rates of possible security risks, such as Sybil and DDoS attacks. Enhanced reaction times when compared to conventional security techniques for attack prediction and prevention. Demonstrated ability of the algorithm to adapt and learn from new patterns of attacks, assuring long-term sustainability.
 CONCLUSION: This paper's findings highlight the efficacy of enhancing blockchain security through the integration of artificial intelligence technologies such as LSTM and SOM networks. In addition to improving blockchain technology's detection and forecasting capabilities, the SOM+LSTM algorithm helps advance the platform toward greater security and reliability. This study provides a solid answer to the increasing worries about cyber dangers in the modern era and opens the door to more sophisticated AI uses in blockchain security.

Energy-Management Strategy of Battery Energy Storage Systems in DC Microgrids: A Distributed Fuzzy Output Consensus Control Considering Multiple Cyber Attacks

Distributed renewable sources are one of the most promising contributors for DC microgrids to reduce carbon emission and fuel consumption. Although the battery energy storage system (BESS) is widely applied to compensate the power imbalance between distributed generators (DGs) and loads, the impacts of disturbances, DGs, constant power loads (CPLs) and cyber attacks on this system are not simultaneously considered. Based on this, a distributed fuzzy output consensus control strategy is proposed to realize accurate current sharing and operate normally in the presence of denial of service (DoS) attacks and false data injection (FDI) attacks. Firstly, the whole model of the BESS in DC microgrids embedded into disturbance items, DGs, CPLs and resistive loads, is firstly built. This model could be further transformed into standard linear heterogeneous multi-agent systems with disturbance, which lays the foundation for the following control strategy. Then the model of FDI and DoS attacks are built. Meanwhile, the fuzzy logic controller (FLC) is applied to reduce the burden of communication among batteries. Based on these, a distributed output consensus fuzzy control is proposed to realize accurate current sharing among batteries. Moreover, the system under the proposed control in different cases is analyzed. Finally, the feasibility of the proposed control strategy is verified by numerical simulation results and experiment results.

Switching‐like event‐triggered tracking control for UAH/UGV systems under external disturbance and DoS attacks

AbstractIn this article, by considering the existence of unavailable state, external disturbance, and denial of service (DoS) attacks, an anti‐disturbance trajectory tracking controller is proposed for the air‐ground system composed of unmanned autonomous helicopter (UAH) and unmanned ground vehicle (UGV). Initially, by combining the advantages of conventional event‐triggered scheme (ETS) and memory ETS, a switching‐like event‐triggered mechanism is put forward, which can induce less data transmissions without reducing control performance, and effectively restrain the DoS attacks. Second, by dividing the DoS attacks into active intervals and sleep ones, the concept of acknowledgement character technology (ACK) is presented to define the suitable types of time intervals. Third, a switching‐like dynamic ETS is introduced for the sleep intervals of DoS attacks while the ETS with fixed triggered‐threshold is exploited for the active intervals. Fourth, based on the occurrence of DoS attacks, a switching‐like observer and a normal one are respectively proposed to estimate the UGV state, the UAH state, the reference input of the UGV, and the disturbance of the UAH, which are further utilized to design the tracking controller. Fifth, an augmented closed‐loop system consisting of observation errors and tracking error is established and its stability is analyzed by using Lyapunov stability theory. Then, a sufficient condition on co‐designing the parameters of switching‐like ETS, observers, and tracking controller is presented in terms of linear matrix inequalities (LMI). Finally, the validity and superiority of the proposed control scheme are verified by resorting to simulations and comparisons.

Energy efficiency in 5G systems: A systematic literature review

To ensure Energy Efficiency (EE) and better Quality of service (QoS), it is necessary to analyze the energy saving possibilities for low resource utilization in the current networks caused by rigorous QoS requirements and implementing EE approach in the planned model for performance improvement. Distributed Denial of Service (DDoS) attacks aim to exhaust the network’s processing and communication capacity by saturating it with packets and generating malicious traffic. There are numerous advantages that make Digital Twin (DT) and Intrusion Detection technique (ID) an effective remedy for a range of (fifth generation) 5G problems. A DDoS attack must be immediately detected and stopped before a legitimate user can access the target of the attacker for the 5G network to provide an efficient energy service. Although they clearly show promise in assisting with the creation and implementation of the challenging 5G environment, Digital Twins is still a relatively new technology for 5G networks but will increase EE. In this research, a thorough examination of the materials was carried out to identify the most cutting-edge DT and ID methods. The purpose of this study was to comprehend the problems with Energy Efficiency, the need for DT, and the methods for dealing with large-scale attack by DDoS on Energy Efficient networks. Only 94 of the 1555 articles produced by the procedure were determined to be relevant using inclusion and exclusion criteria. The outcome demonstrates that in 5G networks, DT, and its fundamental approaches, like QoS and DDoS attack mitigation, can be used to regulate the network’s Energy Efficiency. Numerous practical applications focusing on 5G Systems use their own principles. The effectiveness of these strategies was evaluated using several assessment criteria, including DT, Intrusion Detection, QoS, Energy Efficiency, and 5G Systems. Each study issue is thoroughly explained, along with typical methods, advantages, disadvantages, and performance metrics. Energy economy, network reliability, privacy, and cost reduction are all considerably increased by the implementation of intrusion detection technology in 5G systems. The decision is supported by the technology’s demonstrated efficacy, scalability, real-time detection capacities, low error level, and personalized learning attributes, all of which contribute to the long-term viability of 5G networks as an entire system.

Nonlinear Controller-Based Mitigation of Adverse Effects of Cyber-Attacks on the DC Microgrid System

Cyber-attacks have adverse impacts on DC microgrid systems. Existing literature shows plenty of attack detection methods but lacks appropriate mitigation and prevention approaches for cyber-attacks in DC microgrids. To overcome this limitation, this paper proposes a novel solution based on a nonlinear controller to mitigate the adverse effects of various cyber-attacks, such as distributed denial of service attacks and false data injection attacks, on various components of a DC microgrid system consisting of a photovoltaic power source, a permanent magnet synchronous generator-based variable speed wind generator, a fuel cell, battery energy storage, and loads. To demonstrate the effectiveness of the proposed solution, single and repetitive cyber-attacks on specific components of the microgrid have been considered. An index-based quantitative improvement analysis for the proposed control method has been made. Extensive simulations have been performed by the MATLAB/Simulink V9 software. Simulation results demonstrate the effectiveness of the proposed nonlinear controller-based method in mitigating the adverse effects of cyber-attacks. Moreover, the performance of the proposed method is better than that of the proportional-integral controller. Due to the simplicity of the proposed solution, it can easily be implemented in real practice.

A Comparative Review on DDoS Attack Detection Using Machine Learning Techniques

The rapid growth of the internet and the increasing reliance on digital infrastructures have posed significant challenges to cybersecurity. Among the other variants of attacks, Distributed Denial of Service (DDoS) attacks have emerged as one of the most destructive and common threats. These attacks disrupt or slow down network services by overwhelming the network infrastructure with a massive volume of malicious traffic. To effectively identify and mitigate DDoS attacks, machine learning techniques have been extensively employed in intrusion detection systems. Machine learning approaches offer the advantage of automating the detection process by learning patterns and characteristics of DDoS attacks from historical data. Researchers have explored various machine learning algorithms such as K-Nearest Neighbours (KNN), Support Vector Machine (SVM), Random Forest (RF), and Naïve Bayes to classify and detect DDoS attacks. These algorithms leverage features extracted from network traffic data, including packet size, packet delay patterns, and traffic behaviour, to differentiate between normal and malicious traffic.

End-to-end security enabled intelligent remote IoT monitoring system

Introduction: Internet of things (IoT) compose of million of devices connected together over the internet. IoT plays a vital role now a days and especially in future, the most of the monitoring and data collection. The data should be secure while collection and as well in the process of transferring till the destination whether Service Organization Control (SOC) or to cloud for storage. In this paper, a secure IoT based intelligent monitoring system is proposed.Methods: An intelligent IoT station that interacts via cellular connection to relay data to the cloud is constructed using the Waspmote platform. The algorithm is injected to automatically filter and only keep the new data for transfer to avoid redundancy. The advanced encryption standard (AES) 256-bit method is enabled for onboard data encryption and then the generated cipher text is transmitted. The encrypted data is then stored over the cloud to ensure privacy. Moreover, the mobile application (mApp) is developed to be installed on handheld devices for calling the secure data from the cloud, decrypting it, and displaying it as per user input, whether real-time or historical.Results and Discussion: The encryption algortihm helps in securing the proposed monitoring system from brute force, man in the middle, phishing, spoofing, and denial of service (DoS) attacks. The results of the real testbed experimentation demonstrate the complexity evaluation and reliability of IoT monitoring systems with end-to-end data security in terms of encryption algorithm delay and data rate, respectively.