Abstract:Internet of Things (IoT) devices are leading to advancements in innovation, efficiency, and sustainability across various industries. However, as the number of connected IoT devices increases, the risk of intrusion becomes a major concern in IoT security. To prevent intrusions, it is crucial to implement intrusion detection systems (IDSs) that can detect and prevent such attacks. IDSs are a critical component of cybersecurity infrastructure. They are designed to detect and respond to malicious activities within a network or system. Traditional IDS methods rely on predefined signatures or rules to identify known threats, but these techniques may struggle to detect novel or sophisticated attacks. The implementation of IDSs with machine learning (ML) and deep learning (DL) techniques has been proposed to improve IDSs' ability to detect attacks. This will enhance overall cybersecurity posture and resilience. However, ML and DL techniques face several issues that may impact the models' performance and effectiveness, such as overfitting and the effects of unimportant features on finding meaningful patterns. To ensure better performance and reliability of machine learning models in IDSs when dealing with new and unseen threats, the models need to be optimized. This can be done by addressing overfitting and implementing feature selection. In this paper, we propose a scheme to optimize IoT intrusion detection by using class balancing and feature selection for preprocessing. We evaluated the experiment on the UNSW-NB15 dataset and the NSL-KD dataset by implementing two different ensemble models: one using a support vector machine (SVM) with bagging and another using long short-term memory (LSTM) with stacking. The results of the performance and the confusion matrix show that the LSTM stacking with analysis of variance (ANOVA) feature selection model is a superior model for classifying network attacks. It has remarkable accuracies of 96.92% and 99.77% and overfitting values of 0.33% and 0.04% on the two datasets, respectively. The model's ROC is also shaped with a sharp bend, with AUC values of 0.9665 and 0.9971 for the UNSW-NB15 dataset and the NSL-KD dataset, respectively.

Intrusion Detection Using an Improved Cuckoo Search Optimization Algorithm

Intrusion detection in networks using cuckoo search optimization

Feature Selection Algorithm For Intrusion Detection Using Cuckoo Search Algorithm

Feature Selection Models Based on Hybrid Firefly Algorithm with Mutation Operator for Network Intrusion Detection

Modified Aquila Optimizer Feature Selection Approach and Support Vector Machine Classifier for Intrusion Detection System

An Enhanced Deep Neural Network Enabled with Cuckoo Search Algorithm for Intrusion Detection in Wide Area Networks

Optimized Machine Learning-Based Intrusion Detection System for Fog and Edge Computing Environment

An Effective Feature Selection Model Using Hybrid Metaheuristic Algorithms for IoT Intrusion Detection

An improved binary manta ray foraging optimization algorithm based feature selection and random forest classifier for network intrusion detection

Computational Intelligence Approaches in Developing Cyberattack Detection System

Optimizing IoT Intrusion Detection Using Balanced Class Distribution, Feature Selection, and Ensemble Machine Learning Techniques

Building an Effective Intrusion Detection System using Unsupervised Feature Selection in Multi-objective Optimization Framework

Feature Selection by Hybrid Artificial Bee Colony Algorithm for Intrusion Detection

Anomaly-based intrusion detection system based on feature selection and majority voting

A Hybrid Modified Deep Learning Architecture for Intrusion Detection System with Optimal Feature Selection

Improved discrete salp swarm algorithm using exploration and exploitation techniques for feature selection in intrusion detection systems

Multi-Stage Optimized Machine Learning Framework for Network Intrusion Detection

Intelligent approach to build a Deep Neural Network based IDS for cloud environment using combination of machine learning algorithms

Enhancing intrusion detection: a hybrid machine and deep learning approach

Classification model for accuracy and intrusion detection using machine learning approach

Cyber Intrusion Detection System Based on a Multiobjective Binary Bat Algorithm for Feature Selection and Enhanced Bat Algorithm for Parameter Optimization in Neural Networks