Context : Deployment of secure and reliable energy management - - PowerPoint PPT Presentation

| 1

ANOMALY DETECTION USING HARDWARE PERFORMANCE COUNTERS ON A LARGE SCALE IOT DEPLOYMENT Context :

• Deployment of secure and reliable energy management devices

Issues :

• Large scale deployment
• Resources constrained IoT devices
• Dynamic devices (updates)

Hypothesis & approach :

• Identical IoT devices
• Attacks on devices uses more resources
• Use HPC to characterize the software execution
• Anomaly detection based on comparative analysis only

| 2

HARDWARE PERFORMANCE COUNTERS ANALYSIS:

HPC raw values

HPC value Time HPC "derivative" value Time HPC "derivative" value Time

HPC "derivative" values For one device :

HPC value Time

For ten devices including an attacked device :

| 3

ARCHITECTURE AND TESTING PLATFORM :

v

Device

v

Server Legitimate software + counter enabling Periodic sending Feature extraction Anomaly/outlier detection Series of counters Periodic save of counters Pre-computation