Skip to Main Content
 

Global Search Box

 
 
 
 

Files

File List


30554.pdf (3.34 MB)

ETD Abstract Container

Abstract Header

Toward a Hardware-assisted Online Intrusion Detection System Based on Deep Learning Algorithms for Resource-Limited Embedded Systems

Al Rawashdeh, Khaled
http://orcid.org/0000-0002-3041-8876
http://rave.ohiolink.edu/etdc/view?acc_num=ucin1535464571843315

Abstract Details

2018, PhD, University of Cincinnati, Engineering and Applied Science: Computer Science and Engineering.
Real-time designs of deep learning algorithms are challenged by two less frequently addressed issues. The first is data inefficiency, i.e., the model requires several epochs of trial and error to converge which makes it impractical to be applied to real-time applications. The second is the high precision computation load of the deep learning algorithms needed to achieve high accuracy during training and inference. To address the first issue, we propose a compressed training model for the contrastive divergence algorithm (CD) in the Deep Belief Network (DBN). The goal is to dynamically adjust the training vector according to the feedback from the free energy and the reconstruction error, which allows for better generalization. Furthermore, based on the previous compressed algorithm and to reduce the saturation of the Tanh and the Sigmoid activation functions, we propose a fast activation function, namely the Adaptive Linear Function (ALF). The ALF increases the convergence speed and accuracy of online training and inference using the Deep Belief Network (DBN). To address the second issue, we propose a Hybrid-Stochastic-Dynamic-Fixed-Point (HSDFP) method, which provides a training environment with high reduction in calculation, area, and power in FPGA. Cyber-Physical Systems (CPS) have become increasingly connected in recent years in what is known as the IoT (Internet of Things). As a result, the window for attacks available for hackers and adversaries has been greatly increased. The majority of the techniques currently available for detecting attacks use signature detection by checking against a database of known attacks. More work is needed to improve detection of zero-day attacks. It is not feasible to generate a profile for large systems such as large networks to detect misuse or anomalies. Exploring deep learning for security detection is a valid approach because deep learning algorithms can extract features from raw data. Deep learning has shown high detection rates in image recognition because it is able to extract new features from gray pixels. Features that are not already known can be learned by deep learning algorithms that mimic the learning mechanism of the human brain. The ability of the deep learning algorithms to learn unknown features from the incoming data will increase self-learning. We apply our model to the task of online anomaly detection using FPGA. Our framework enables the DBN structure to detect attacks online. Thus, the network can collect an efficient number of training samples and avoid overfitting. We show that our proposed method (1) converges faster than the state-of-the-art deep learning methods, (2) uses FPGA implementation to achieve accelerated inference speed of .008ms and a high power efficiency of 37 G-ops/s/W compared to CPU, GPU, and 16-bit fixed-point arithmetic (3) uses FPGA to also achieve minimal degradation in accuracy of 95\%, 95.4\%, and 97.9\% on the benchmark datasets MNIST, NSLKDD, and Kyoto, respectively. In addition, in order to reduce the cross-correlation in the stochastic computation, we propose a memory based cross-correlation reduction method for ransomware detection approach in hardware that achieves power efficiency of 39.9 G-ops/s/W.
Carla Purdy, Ph.D. (Committee Chair)
Raj Bhatnagar, Ph.D. (Committee Member)
Bilal Gonen (Committee Member)
Ali Minai, Ph.D. (Committee Member)
Philip Wilsey, Ph.D. (Committee Member)
144 p.
Computer Engineering
Deep Learning; Anomaly Detection; Artificial Intelligence; FPGA; Intrusion Detection; Embedded System

Recommended Citations

Citations

  • Al Rawashdeh, K. (2018). Toward a Hardware-assisted Online Intrusion Detection System Based on Deep Learning Algorithms for Resource-Limited Embedded Systems [Doctoral dissertation, University of Cincinnati]. OhioLINK Electronic Theses and Dissertations Center. http://rave.ohiolink.edu/etdc/view?acc_num=ucin1535464571843315

    APA Style (7th edition)

  • Al Rawashdeh, Khaled. Toward a Hardware-assisted Online Intrusion Detection System Based on Deep Learning Algorithms for Resource-Limited Embedded Systems. 2018. University of Cincinnati, Doctoral dissertation. OhioLINK Electronic Theses and Dissertations Center, http://rave.ohiolink.edu/etdc/view?acc_num=ucin1535464571843315.

    MLA Style (8th edition)

  • Al Rawashdeh, Khaled. "Toward a Hardware-assisted Online Intrusion Detection System Based on Deep Learning Algorithms for Resource-Limited Embedded Systems." Doctoral dissertation, University of Cincinnati, 2018. http://rave.ohiolink.edu/etdc/view?acc_num=ucin1535464571843315

    Chicago Manual of Style (17th edition)

ucin1535464571843315
813
© 2018, some rights reserved.Creative Commons License Toward a Hardware-assisted Online Intrusion Detection System Based on Deep Learning Algorithms for Resource-Limited Embedded Systems by Khaled Al Rawashdeh is licensed under a Creative Commons Attribution-NonCommercial-NoDerivs 3.0 Unported License. Based on a work at etd.ohiolink.edu.
This open access ETD is published by University of Cincinnati and OhioLINK.