Executive Summary
This paper introduces IDQS, a framework for early detection of Low-Rate Denial of Service (LDoS) attacks in IoT networks. IDQS uses a predictive neural network (RTP-QoS) to forecast network Quality of Service (QoS) and a Pairwise Decision Model (PDM) to identify attacks by analyzing discrepancies between predicted and actual QoS. Evaluated on public datasets, the system demonstrates high accuracy and efficiency, making it suitable for resource-constrained IoT environments.
Why It Matters
This document is crucial for defense and geopolitical analysts as it addresses the evolving threat of subtle, hard-to-detect cyberattacks (LDoS) against critical IoT infrastructure, which can have significant national security implications. The proposed solution offers a proactive defense mechanism against sophisticated adversaries targeting interconnected systems.
Key Takeaways
- IDQS provides a lightweight, proactive framework for early LDoS attack detection in IoT, outperforming traditional methods.
- The system leverages a predictive neural network (RTP-QoS) and a decision model (PDM) to identify subtle QoS degradations indicative of LDoS.
- IDQS demonstrates high detection accuracy (79-91%) and low inference time (0.28s), making it practical for real-time deployment in resource-constrained environments.
- The framework shifts detection from static classification to predictive discrepancy analysis, addressing a critical gap in current cybersecurity.
- LDoS attacks are a growing threat due to their low resource requirements and ability to evade conventional detection, posing risks to critical infrastructure.
- The research highlights the need for adaptive mechanisms to model dynamic network states and isolate anomalous signatures in real-time.
Strategic Relevance
The development of advanced, lightweight intrusion detection systems like IDQS is strategically important for securing critical infrastructure and military IoT deployments against sophisticated, low-signature cyberattacks. Its ability to operate in resource-constrained environments enhances resilience and operational continuity, directly impacting national security and defense capabilities in an increasingly interconnected battlespace.