Anomaly-based Intrusion Detection for Zephyr-based Resource-Constrained Devices in IoMT Networks

The integration of the Internet of Things into the healthcare sector has resulted in the emergence of the Internet of Medical Things (IoMT) technology. However, IoMT networks remain susceptible to various types of threats due to their heterogeneity and resource-constrained characteristics. Therefore, novel security solutions, such as efficient and accurate Anomaly-based Intrusion Detection Systems (AIDSs), considering the inherent limitations of IoMT networks are required to be developed, before IoMT networks realize their full potential in the market. In our previous work, we focused on developing an AIDS for protecting Linux-based IoMT devices. In this paper, we extend our previous work by presenting the first AIDS specifically designed for resource-constrained IoMT devices using the popular Zephyr RTOS. The implementation details of the proposed AIDS are described, and the runtime performance of the implemented MDA component of the AIDS is evaluated using an nRF52840 Development Kit (DK). The runtime performance evaluation showed a minimized resource consumption (i.e., less than 1% CPU and RAM usage, approximately 1% ROM usage).