Abstract:Internet of Things (IoT) devices are leading to advancements in innovation, efficiency, and sustainability across various industries. However, as the number of connected IoT devices increases, the risk of intrusion becomes a major concern in IoT security. To prevent intrusions, it is crucial to implement intrusion detection systems (IDSs) that can detect and prevent such attacks. IDSs are a critical component of cybersecurity infrastructure. They are designed to detect and respond to malicious activities within a network or system. Traditional IDS methods rely on predefined signatures or rules to identify known threats, but these techniques may struggle to detect novel or sophisticated attacks. The implementation of IDSs with machine learning (ML) and deep learning (DL) techniques has been proposed to improve IDSs' ability to detect attacks. This will enhance overall cybersecurity posture and resilience. However, ML and DL techniques face several issues that may impact the models' performance and effectiveness, such as overfitting and the effects of unimportant features on finding meaningful patterns. To ensure better performance and reliability of machine learning models in IDSs when dealing with new and unseen threats, the models need to be optimized. This can be done by addressing overfitting and implementing feature selection. In this paper, we propose a scheme to optimize IoT intrusion detection by using class balancing and feature selection for preprocessing. We evaluated the experiment on the UNSW-NB15 dataset and the NSL-KD dataset by implementing two different ensemble models: one using a support vector machine (SVM) with bagging and another using long short-term memory (LSTM) with stacking. The results of the performance and the confusion matrix show that the LSTM stacking with analysis of variance (ANOVA) feature selection model is a superior model for classifying network attacks. It has remarkable accuracies of 96.92% and 99.77% and overfitting values of 0.33% and 0.04% on the two datasets, respectively. The model's ROC is also shaped with a sharp bend, with AUC values of 0.9665 and 0.9971 for the UNSW-NB15 dataset and the NSL-KD dataset, respectively.

Intrusion detection via optimal tuned LSTM model with trust and risk level evaluation

Optimization assisted deep learning based intrusion detection system in wireless sensor network with two‐tier trust evaluation

An Enhanced Hybrid Intrusion Detection Using Mapreduce-Optimized Black Widow Convolutional LSTM Neural Networks

Optimized Ensemble Learning Models Based on Clustering and Hybrid Deep Learning for Wireless Intrusion Detection

An optimized intrusion detection model for wireless sensor networks based on MLP-CatBoost algorithm

Performance optimization for Intrusion Detection by Long Short Term Memory (LSTM)

An LSTM‐based novel near‐real‐time multiclass network intrusion detection system for complex cloud environments

Optimizing IoT Intrusion Detection Using Balanced Class Distribution, Feature Selection, and Ensemble Machine Learning Techniques

An Enhanced Deep Neural Network Enabled with Cuckoo Search Algorithm for Intrusion Detection in Wide Area Networks

Dugat-LSTM: Deep learning based network intrusion detection system using chaotic optimization strategy

Deep ensemble of classifier for intrusion detection in WSN and improved attack mitigation process

A Hybrid Modified Deep Learning Architecture for Intrusion Detection System with Optimal Feature Selection

Lightweight CNN-BiLSTM based Intrusion Detection Systems for Resource-Constrained IoT Devices

Enhancing Cybersecurity in Cloud Computing and WSNs: A Hybrid IDS Approach

OOA-modified Bi-LSTM network: An effective intrusion detection framework for IoT systems

Intrusion Detection Model for IoT Using Recurrent Kernel Convolutional Neural Network

Efficient Intrusion Detection: Combining $χ^2$ Feature Selection with CNN-BiLSTM on the UNSW-NB15 Dataset

Intrusion Detection in Wireless Sensor Networks Based on IPSO-SVM Algorithm

A Novel Two-Stage Deep Learning Model for Network Intrusion Detection: LSTM-AE

Efficient Deep CNN-BiLSTM Model for Network Intrusion Detection

An Enhanced Intrusion Detection Model Based on Improved kNN in WSNs