Ad Hoc Networks最新文献

Modern automobiles are increasing the demand for automotive Ethernet as a high-bandwidth and flexible in-vehicle network technology. However, since Ethernet does not have native support for authentication or encryption, intrusion detection systems (IDSs) are becoming an attractive security mechanism to detect malicious activities that may affect Ethernet-based communication in cars. This paper proposes a novel multi-stage deep learning-based intrusion detection system to detect and classify cyberattacks in automotive Ethernet networks. The first stage uses a Random Forest classifier to detect cyberattacks quickly. The second stage, on the other hand, uses a Pruned Convolutional Neural Network that minimizes false positive rates while classifying different types of cyberattacks. We evaluate our proposed IDS using two publicly available automotive Ethernet intrusion datasets. The experimental results show that our proposed solution detects cyberattacks with a similar detection rate and a faster detection time compared to other state-of-the-art baseline automotive Ethernet IDSs.

A wireless multihop network (WMN) is set of wirelessly connected nodes without an aid of centralized infrastructure that can forward any packets via intermediate nodes by a multihop fashion. In the WMN, there are still some issues that need to be resolved, like due to any source node may choose an uncertainty path to send their packets through the multihop fashion and this leads to the performance of network capacity can degrade drastically. To solve this problem, in this research, we propose two novel path selection algorithms called SNR-based learning path selection (NLPS) algorithm and SINR-based learning path selection (INLPS) algorithm, which are incorporated with the deep reinforcement learning (DRL) to select the best multihop path from any source node to a destination node with highest end-to-end (E2E) throughput. Besides that, a factor graph (FG) approach and a nested lattice code (NLC) representation are used to reduce the computation time. According to the numerical studies with the NLC is applied, our simulation results reveal that the proposed NLPS and INLPS algorithms can improve the overall average network capacity up to 3.1 times and 10.5 times compared to FG, respectively. However, the overall average computation time are highly increased for NLPS and INLPS, i.e., about 0.627 s and 1.221 s, respectively compared to FG, which is about 0.006 s. In other words, both NLPS and INLPS algorithms can achieve high network capacity and moderate computation time.

The rapid expansion of Internet of Things (IoT) devices presents unique challenges in ensuring the security and privacy of interconnected systems. As cyberattacks become more frequent, developing an effective and scalable Intrusion Detection System (IDS) based on Federated Learning (FL) for IoT becomes increasingly complex. Current methodologies struggle to balance spatial and temporal feature extraction, especially when dealing with dynamic and evolving cyber threats. The lack of diversity in datasets used for FL-based IDS evaluations further impedes progress. There is also a noticeable tradeoff between performance and scalability, particularly as the number of edge devices in communication increases. To address these challenges, this article introduces a horizontal FL model that combines Convolutional Neural Networks (CNN) and Bidirectional Long-Term Short Memory (BiLSTM) for effective intrusion detection. This hybrid approach aims to overcome the limitations of existing methods and enhance the effectiveness of intrusion detection in the context of FL for IoT. Specifically, CNN is used for spatial feature extraction, enabling the model to identify local patterns indicative of potential intrusions, while the BiLSTM component captures temporal dependencies and learns sequential patterns within the data. The proposed IDS follows a zero-trust model by keeping the data on local edge devices and sharing only the learned weights with the centralized FL server. The FL server then aggregates updates from various sources to optimize the accuracy of the global learning model. Experimental results using CICIDS2017 and Edge-IIoTset demonstrate the effectiveness of the proposed approach over centralized and federated deep learning-based IDS.

With the development of sixth-generation (6G) wireless communication technology, billions of vehicles will access the network in the future, and the number of vehicle applications and user data will also increase dramatically. Traditional cloud computing faces serious problems of latency and energy consumption in handling massive data. Mobile edge computing (MEC) has emerged to dramatically improve computing efficiency and reduce energy consumption by placing computing servers at network edge locations close to vehicles. However, the service range of MEC servers is limited and cannot fully satisfy user requirements. In addition, the task offloading process has security risks. The current research focuses on how to reduce the energy consumption and latency overhead of task offloading and neglects the economic cost or data transmission security of vehicles. To solve the above problems, we propose a cooperative security offloading (CSO) scheme for auxiliary vehicles and MEC servers. Firstly, we propose a dynamic pricing mechanism for computing resources by considering the credibility of MEC servers and auxiliary vehicles, the urgency of the task, and the number of users competing for auxiliary vehicles. Secondly, to prevent malicious MEC servers and eavesdroppers from attacking, we employ homomorphic encryption to protect user privacy. Meanwhile, efficient and secure computing services are achieved by optimizing user selection decisions, offloading decisions, and resource allocation decisions. Finally, the optimal decisions are obtained by the dueling DQN-based resource allocation and pricing strategy (DDRP) and the cost-minimizing security offloading (CMSO) algorithm, which minimizes the economic cost of users while maximizing security. Simulation results show that, compared with some existing schemes, the CSO scheme effectively reduces the economic cost of users while ensuring the security of data transmission.

Special security techniques, such as intrusion detection mechanisms, are indispensable in modern computer systems. With the emergence of the Internet of Things they have become even more important. It is important to detect and identify the attack in a category so that countermeasures specific to the threat category can be resolved. However, most existing multiclass detection approaches have some weaknesses, mainly related to detecting specific categories of attacks and problems with false positives. This article addresses this research problem and advances state-of-the-art, bringing contributions to a two-stage detection architecture called DNNET-Ensemble, combining binary and multiclass detection. While the benign traffic can be quickly released on the first detection, the intrusive traffic can be subjected to a robust analysis approach without causing delay issues. Additionally, we propose the DNNET binary approach for the binary detection level, which can provide more accurate and faster binary detection. We present the proposal of a federated strategy to train the neural model of the DNNET method without sending data to the cloud, thus preserving the privacy of local data. The proposed Hybrid Attribute Selection strategy can find an optimal subset of attributes through a wrapper method with a lower training cost due to pre-selection using a filter method. Furthermore, the proposed Soft-SMOTE improvement allows operating with a balanced dataset with a minor training time increase, even in scenarios where there are a large number of classes with a large imbalance among them. Results obtained from experiments on renowned intrusion datasets and laboratory experiments demonstrate that the approach can achieve superior detection rates and false positive performance compared to other state-of-the-art approaches.

In general, wireless sensors operate with a limited energy source, and energy efficiency is a critical design issue. In order to extend the operation time of wireless sensors, there have been many energy efficiency neighbor discovery protocols designed for wireless sensor networks (WSNs) such as Quorum-based, prime-number-based, and block-design-based protocols. Among them, the block-design-based approach was known to be more effective solutions for neighbor discovery in terms of the worst-case discovery latency for a given duty cycle. However, the original block- design-based approach is only applicable to a sensor network where all sensors have the same duty cycle. In order to expand a block-design-based neighbor discovery solution to asymmetric WSNs, we introduce a new neighbor discovery protocol (NDP) that combines two block-design-based schedules to produce a new set of discovery schedules for asymmetric WSNs. Furthermore, by using the Kronecker product method, we prove that any pair of neighboring sensors in the proposed protocol has at least one common active slot within a length of their discovery cycle. Furthermore, the results of the simulation study show that the proposed method is better than representative NDPs (such as Quorum, U-Connect, Disco, SearchLight, Hedis, and Todis) in terms of discovery latency and energy efficiency.

With the rise of smart city applications, the accessibility of users’ location data by smart devices has increased significantly. However, this poses a privacy concern as attackers can deduce personal information from the raw location data. In this paper, we propose a framework to collect user location data while ensuring local differential privacy (LDP) in the last-mile delivery system of Unmanned Aerial Vehicles (UAVs) within an edge computing environment. Firstly, we obtain the user location distribution Quad-tree by employing a region partitioning method based on Quad-tree retrieval in the specified data collection area. Next, the user location matrix is retrieved from the obtained Quad-tree, and we perturb the user location data using an LDP perturbation scheme on the location matrix. Finally, the collected data is aggregated using blockchain to evaluate the utility of the dataset from various regions. Furthermore, to validate the effectiveness of our framework in a real-world scenario, we conduct extensive simulations using datasets from multiple cities with varying urban densities and mobility patterns. These simulations not only demonstrate the scalability of our approach but also showcase its adaptability to different urban environments and delivery demands. Finally, our research opens new avenues for future work, including the exploration of more sophisticated LDP mechanisms that can offer higher levels of privacy without significantly compromising the quality of service. Additionally, the integration of emerging technologies such as 5G and beyond in the edge computing environment could further enhance the efficiency and reliability of UAV-based delivery systems, while also offering new challenges and opportunities for privacy-preserving data collection and analysis.

Priority-based energy scheduling is proposed, whereby the data utility of measured user information in smart meters, including the priority and power demand of power consumers and the maximum power supply of power suppliers, is leveraged to ensure that in the case of limited power resources within islanded microgrids, energy is allocated to power consumers in the order of high to low priority. Nonetheless, in terms of data utility, most existing strategies only consider high-priority power consumers, neglecting the priority of power suppliers and low-priority power consumers, thus damaging the fairness of low-priority consumers and the interests of power suppliers, to the detriment of these groups. Moreover, smart meters are vulnerable to data integrity attacks, which may result in the manipulation of measured user information during the forwarding process, thereby disrupting normal priority-based energy scheduling. Therefore, focusing on data utility without considering data security is insufficient. Researchers have extensively investigated how to secure smart meters within advanced metering infrastructure (AMI), primarily employing cryptography-based methods to encrypt user information in measured meters and decrypt it at the microgrid central controller (MGCC), thereby protecting the data confidentiality of user information during the forwarding process and preventing data tampering. However, the prevailing cryptographic methods used to secure smart meters are extremely complex, and make smart meters and local controllers on the forwarding path unable to obtain any user information in which embedded consumers’ priority and cannot leverage the data utility of priority to forward information accordingly. In other words, existing models cannot simultaneously achieve data confidentiality and data utility during the forwarding process. To solve these issues, this study investigates a Lightweight_PAEKS-based energy scheduling model considering priority in microgrid (LPESCP). As a lightweight solution, the LPESCP comprehensively considers data confidentiality and data utility, as well as the priority and fairness of all users, to ensure the security of smart meters and optimize energy scheduling. In particular, the data utility problem is solved by using an optimization model that aims to maximize the global satisfaction degree of all users in terms of priority and fairness. The Lightweight_PAEKS and Paillier encryption scheme are used so that nodes on the forwarding path can successfully match priority-related keyword and forward information in order of the keyword corresponding emergency coefficient indicating the urgency levels of information, ensuring data utility, while do not know the specific keyword, emergency coefficient and other information, ensuring data confidentiality. To verify the effectiveness of the LPESCP, experiments are conducted for three cases generated based on random numbers. The results sh