The popularity of Wi-Fi networks coupled with the intrinsic vulnerability of wireless interfaces has promoted the investigation and proposal of traffic analysis and anomaly detection algorithms targeted to that application. We propose a scalable and modular algorithm architecture to set up a lightweight classifier, able to detect malicious frames with high reliability, allowing a simple implementation and suitable for real-time operations. We compare two design alternatives, based on either an optimized neuro-fuzzy classifier or a k-Nearest Neighbor classifier wrapped into a genetic optimization procedure. Both designs exploit a dissimilarity measure able to handle both numerical and non-numerical features. Scalability and modularity are obtained by considering an array of binary classifiers tuned to identify one specific attack against any other type of traffic. We exploit the Aegean Wi-Fi Intrusion Detection (AWID) dataset to assess the accuracy of the proposed algorithm, finding up to twelve out of the fourteen attack classes of the dataset can be identified with high reliability based just on the inspection of a single frame, provided the right features are observed.
Frame-by-frame Wi-Fi attack detection algorithm with scalable and modular machine-learning design / Rizzi, Antonello; Granato, Giuseppe; Baiocchi, Andrea. - In: APPLIED SOFT COMPUTING. - ISSN 1568-4946. - 91:(2020), pp. 1-15. [10.1016/j.asoc.2020.106188]
Frame-by-frame Wi-Fi attack detection algorithm with scalable and modular machine-learning design
Antonello Rizzi;Giuseppe Granato;Andrea Baiocchi
2020
Abstract
The popularity of Wi-Fi networks coupled with the intrinsic vulnerability of wireless interfaces has promoted the investigation and proposal of traffic analysis and anomaly detection algorithms targeted to that application. We propose a scalable and modular algorithm architecture to set up a lightweight classifier, able to detect malicious frames with high reliability, allowing a simple implementation and suitable for real-time operations. We compare two design alternatives, based on either an optimized neuro-fuzzy classifier or a k-Nearest Neighbor classifier wrapped into a genetic optimization procedure. Both designs exploit a dissimilarity measure able to handle both numerical and non-numerical features. Scalability and modularity are obtained by considering an array of binary classifiers tuned to identify one specific attack against any other type of traffic. We exploit the Aegean Wi-Fi Intrusion Detection (AWID) dataset to assess the accuracy of the proposed algorithm, finding up to twelve out of the fourteen attack classes of the dataset can be identified with high reliability based just on the inspection of a single frame, provided the right features are observed.File | Dimensione | Formato | |
---|---|---|---|
Rizzi_Frame-by-frame_2020.pdf
solo gestori archivio
Tipologia:
Versione editoriale (versione pubblicata con il layout dell'editore)
Licenza:
Tutti i diritti riservati (All rights reserved)
Dimensione
783.91 kB
Formato
Adobe PDF
|
783.91 kB | Adobe PDF | Contatta l'autore |
I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.