Computational intelligence-enabled cybersecurity for the Internet of Things

The computational intelligence (CI) based technologies play key roles in campaigning cybersecurity challenges in complex systems such as the Internet of Things (IoT), cyber-physical-systems (CPS), etc. The current IoT is facing increasingly security issues, such as vulnerabilities of IoT systems, malware detection, data security concerns, personal and public physical safety risk, privacy issues, data storage management following the exponential growth of IoT devices. This work aims at investigating the applicability of computational intelligence techniques in cybersecurity for IoT, including CI-enabled cybersecurity and privacy solutions, cyber defense technologies, intrusion detection techniques, and data security in IoT. This paper also attempts to provide new research directions and trends for the increasingly IoT security issues using computational intelligence technologies

The security challenges in the IoT enabled cyber-physical systems and opportunities for evolutionary computing & other computational intelligence

Internet of Things (IoT) has given rise to the fourth industrial revolution (Industrie 4.0), and it brings great benefits by connecting people, processes and data. However, cybersecurity has become a critical challenge in the IoT enabled cyber physical systems, from connected supply chain, Big Data produced by huge amount of IoT devices, to industry control systems. Evolutionary computation combining with other computational intelligence will play an important role for cybersecurity, such as artificial immune mechanism for IoT security architecture, data mining/fusion in IoT enabled cyber physical systems, and data driven cybersecurity. This paper provides an overview of security challenges in IoT enabled cyber-physical systems and what evolutionary computation and other computational intelligence technology could contribute for the challenges. The overview could provide clues and guidance for research in IoT security with computational intelligence

Cyber security research frameworks for coevolutionary network defense

Cyber security is increasingly a challenge for organizations everywhere. Defense systems that require less expert knowledge and can adapt quickly to threats are strongly needed to combat the rise of cyber attacks. Computational intelligence techniques can be used to rapidly explore potential solutions while searching in a way that is unaffected by human bias. Several architectures have been created for developing and testing systems used in network security, but most are meant to provide a platform for running cyber security experiments as opposed to automating experiment processes. In the first paper, we propose a framework termed Distributed Cyber Security Automation Framework for Experiments (DCAFE) that enables experiment automation and control in a distributed environment. Predictive analysis of adversaries is another thorny issue in cyber security. Game theory can be used to mathematically analyze adversary models, but its scalability limitations restrict its use. Computational game theory allows us to scale classical game theory to larger, more complex systems. In the second paper, we propose a framework termed Coevolutionary Agent-based Network Defense Lightweight Event System (CANDLES) that can coevolve attacker and defender agent strategies and capabilities and evaluate potential solutions with a custom network defense simulation. The third paper is a continuation of the CANDLES project in which we rewrote key parts of the framework. Attackers and defenders have been redesigned to evolve pure strategy, and a new network security simulation is devised which specifies network architecture and adds a temporal aspect. We also add a hill climber algorithm to evaluate the search space and justify the use of a coevolutionary algorithm --Abstract, page iv

Hybrid Intrusion Detection Model for Enhancing the Security and Reducing the Computational Cost

Artificial Intelligence (AI) is becoming essential technology in Cybersecurity. It represents a revolution in detecting and analyzing intrusions based on predictive models and classification methods. Various recent studies discussed the applications of artificial intelligence in Intrusion Detection Systems to improve the accuracy of the classifiers in detecting cyber-attacks but ignored the computational cost of running the algorithm which is considered a crucial factor of the model evaluation. The aim of this paper is to solve this security issue by using dimensionality reduction techniques and machine learning algorithms. To raise their effectiveness and thus enhance network security, a hybrid classifier with high accuracy and low computational cost is proposed. It combines Decision Tree (DT) and Linear Regression (LR) techniques with AdaBoost technique to build a powerful model for detecting cyber-attacks. The hybrid model included 5 stages, (i) selecting and analyzing the dataset, (ii) pre-processing it, (iii) reducing the dimensions using the Principal Component Analysis (PCA), (iv) classifying stage and (v) evaluating the model using the dataset UNSW-NB15. The model has been compared with several state-of-the-art algorithms. The results have shown that the proposed hybrid model achieved a high accuracy (99%) and the runtime was significantly reduced by half using PCA principle