A Two-tier Intrusion Detection Framework for Embedded Systems

The embedded system is an essential component of the Internet of Everything. Recently, host-based intrusion detection techniques have been widely applied to embedded systems effectively. However, the traditional standalone intrusion detection system has several shortcomings in terms of efficiency and scalability. In this article, a two-tier scalable intrusion detection framework is designed for embedded systems to address these shortcomings. The framework is based on Spark and is deployed in the cloud environment. The experiments show that the proposed framework can effectively improve the detection efficiency and scalability.