Promptly discovering unknown network attacks is critical for reducing the risk of major loss imposed on organizations and information infrastructure. This paper aims at developing an intelligent intrusion detection system capable of classifying known attacks as well as inferring unknown ones. To achieve this, we formulate the problem of fine-grained known/unknown intrusion detection as a two-stage minimization problem, where the first stage is to seek a score measure for minimizing the empirical risk of misclassifying the known attacks, while the second stage is to find another score measure for minimizing the identification risk of inferring unknown attacks. The hierarchical nature of problem formulation allows us to employ the class conditioned auto-encoders to construct a hierarchical intrusion detection framework. Since the reconstruction errors of unknown attacks are generally higher than that of the known attacks, we further employ extreme value theory in the second stage to model the distribution of reconstruction errors for differentiating known/unknown attack. To further reduce the false positive rate, we add a benign clustering module for learning the multimodal distribution of benign traffic. We conduct an experiment on two widely used datasets for assessing intrusion detection. The results show that the proposed method improves the detection rate of unknown attacks while keeping a low false positive rate.

Driven by the prevalence of the computation-intensive and delay-intensive mobile applications, Mobile Edge Computing (MEC) is emerging as a promising solution. Traditional task offloading methods usually rely on centralized decision making, which inevitably involves a high computational complexity and a large state space. However, the MEC is a typical distributed system, where the edge servers are geographically separated, and independently perform the computing tasks. This fact inspires us to conceive a distributed cooperative task offloading system, where each edge server makes its own decision on how to allocate local computing resources and how to migrate tasks among the edge servers. To characterize diverse task requirements, we divide the arrival tasks into different priorities according to the tolerance time, which enables to dynamically schedule the local computing resources for reducing the task timeout. In order to coordinate the independent decision makings of geographically separate edge servers, we propose a priority driven cooperative task offloading algorithm based on multi-agent deep reinforcement learning, where the decision making of each edge server not only depends on its own state but also on the shared global information. We further develop a Variational Recurrent Neural Network (VRNN) based global state sharing model which significantly reduces the communication overhead among edge servers. The performance evaluation conducted on a movement trajectories dataset of mobile devices verifies that the proposed algorithm can reduce the task consumption time and improve the edge computing resources utilization.

Intelligent driving has advanced significantly in recent decades, paving the path for the transportation of the future. Digital twin (DT) technology, which can bridge the physical and virtual space gaps in real time, plays an important role in the collaboration of vehicles and roads for intelligent driving. In this paper, we design the Digital Twin empowered Cloud-native Vehicular Networks (DT-CVN) architecture as well as the workflow for task execution aiming at executing intelligent driving tasks efficiently and reliably. In DT-CVN, we propose a design and implementation scheme for digital twins, in which different modules of the same digital twin entity can be deployed in different network locations in a distributed manner by taking advantage of the distributed features of microservices based on cloud-native technology. Furthermore, we design the modules reuse and requests aggregation mechanisms of digital twins invocation for task scheduling in DT-CVN, which can improve its efficiency even further. Then we model the task scheduling in DT-CVN into a combinational optimization problem and propose a deep reinforcement learning (DRL) based adaptive task scheduling algorithm. Simulation results show that the proposed scheme can improve the efficiency of task scheduling while reducing energy consumption.

Caching contents close to end-users can improve the network performance, while causing the problem of guaranteeing consistency. Specifically, solutions are classified into validation and invalidation, the latter of which can provide strong cache consistency strictly required in some scenarios. To date, little work on the analysis of cache invalidation has been covered. In this work, by using conditional probability to characterize the interactive relationship between existence and validity, we develop an analytical model that evaluates the performance (hit probability and server load) of four different invalidation schemes with LRU replacement under arbitrary invalidation frequency distribution. The model allows us to theoretically identify some key parameters that affect our metrics of interest and gain some common insights on parameter settings to balance the performance of cache invalidation. Compared with other cache invalidation models, our model can achieve higher accuracy in predicting the cache hit probability. We also conduct extensive simulations that demonstrate the achievable performance of our model.