Comparison Between in-Core Hardware IDS, off-Core Hardware IDS and Software IDS

EasyChair Preprint 15742

Abstract

Wireless attacks targeting the Internet of Things (IoT) pose challenges to its security. To counter this threat, in-depth security mechanisms such as Intrusion Detection Systems (IDSs) are used. The implementation of IDSs in edge devices is challenging, considering the inherent constrained nature of IoT devices. In this paper, three Intrusion Detection System (IDS) implementation approaches, software, in-core hardware, and off-core hardware are defined and compared, using an IoT-context representative case study. Advantages and disadvantages of each approach are assessed and discussed, comparing design time, ease of maintenance, detection performance and SoC resource utilization. Our results, relative to the SoC baseline, show that the software approach used 17.92% more energy consumption per packet(+0.19mJ/p) than the hardware approach. Conversely, the hardware approach results in a significant overhead of FPGA resources, requiring up to 12.06% more LUT and 7.75% more FF.

Keyphrases: Embedded System Security, Internet of Things, Intrusion Detection System, Wireless Security

@booklet{EasyChair:15742,
  author    = {Tianxu Li and Mohamed El Bouazzati and Camille Monière and Philippe Tanguy and Guy Gogniat},
  title     = {Comparison Between in-Core Hardware IDS, off-Core Hardware IDS and Software IDS},
  howpublished = {EasyChair Preprint 15742},
  year      = {EasyChair, 2025}}