I am looking for any open source implementation of anomaly based IDS for resource constrained nodes. As in Internet of things, we have heterogeneous endpoints with limited processing and storage. With reference to literature, I have gone through anomaly detection in such environment is done remotely. This will certainly have latency issue.
I am interested in literature pointing towards technique that is deployed on device. Is there any available implementation for this task?