Trust Based Intrusion Detection System to Detect Insider Attacks in IoT Systems

Abstract

IoT systems are vulnerable to various cyber attacks as they form a subset of the Internet. Insider attacks find more significance since many devices are configured to access the Internet without intrusion detection systems or firewalls in place. Current work focuses on three insider attacks, namely, blackhole attack, sinkhole attack and wormhole attack. A distributed trust based intrusion detection system is proposed to detect these attacks. The trust scores are compared with those existing in immutable distributed ledger and used to arrive at a decision to include or exclude a node.