Enhancing IoT Security with CNN and LSTM-Based Intrusion Detection Systems

Afrah Gueriani,Hamza Kheddar,Ahmed Cherif Mazari

2024-05-29

Abstract:Protecting Internet of things (IoT) devices against cyber attacks is imperative owing to inherent security vulnerabilities. These vulnerabilities can include a spectrum of sophisticated attacks that pose significant damage to both individuals and organizations. Employing robust security measures like intrusion detection systems (IDSs) is essential to solve these problems and protect IoT systems from such attacks. In this context, our proposed IDS model consists on a combination of convolutional neural network (CNN) and long short-term memory (LSTM) deep learning (DL) models. This fusion facilitates the detection and classification of IoT traffic into binary categories, benign and malicious activities by leveraging the spatial feature extraction capabilities of CNN for pattern recognition and the sequential memory retention of LSTM for discerning complex temporal dependencies in achieving enhanced accuracy and efficiency. In assessing the performance of our proposed model, the authors employed the new CICIoT2023 dataset for both training and final testing, while further validating the model's performance through a conclusive testing phase utilizing the CICIDS2017 dataset. Our proposed model achieves an accuracy rate of 98.42%, accompanied by a minimal loss of 0.0275. False positive rate(FPR) is equally important, reaching 9.17% with an F1-score of 98.57%. These results demonstrate the effectiveness of our proposed CNN-LSTM IDS model in fortifying IoT environments against potential cyber threats.

Cryptography and Security,Artificial Intelligence

What problem does this paper attempt to address?

The problem that this paper attempts to solve is to enhance network security in Internet of Things (IoT) devices. Specifically, it is to identify and classify benign and malicious activities in network traffic by developing an Intrusion Detection System (IDS) based on Convolutional Neural Network (CNN) and Long Short - Term Memory Network (LSTM). Due to the inherent security vulnerabilities of IoT devices, these devices are vulnerable to various complex network attacks, which may cause significant damage to individuals and organizations. Therefore, constructing an efficient IDS is crucial for protecting the IoT environment from potential network threats.

The method proposed in the paper combines the spatial feature extraction ability of CNN and the time - series analysis ability of LSTM to improve the accuracy and efficiency of detection and classification. By using the new CICIoT2023 dataset for training and final testing, and using the CICIDS2017 dataset to further verify the model performance, the results show that the proposed CNN - LSTM IDS model has a significant effect in improving the security of the IoT environment, achieving an accuracy rate of 98.42% and an F1 - score of 98.57%, while maintaining a low false positive rate (9.17%). These results indicate that the model is effective in defending against potential network threats.