Intelligent parameter-based in-network IDS for IoT using UNSW-NB15 and BoT-IoT datasets

Muhammad Luqman,Muhammad Zeeshan,Qaiser Riaz,Mehdi Hussain,Hasan Tahir,Noman Mazhar,Muhammad Safeer Khan
DOI: https://doi.org/10.1016/j.jfranklin.2024.107440
IF: 4.246
2024-12-13
Journal of the Franklin Institute
Abstract:Keeping in mind the ubiquity of Internet of Things devices and the heterogeneity of protocols, intruders can easily meddle in an IoT network and jeopardize its security. This work proposes an intelligent intrusion detection system for IoT networks by applying machine learning algorithms, namely Random Forest and Support Vector Machine. We achieved high efficiency and reduced overfitting by balancing 11 classes in the BoT-IoT dataset. The dataset was prepared using preprocessing techniques that include handling missing values, one-hot encoding, and scaling the features for both binary and multi-class classification. An important feature selection and extraction process was used for RF and SVM model training with two hyperparameter tuning techniques. The proposed model achieves efficient training times for SVM and RF with three cross-validation techniques using 10 folds. In machine learning, an accuracy of 99.60% for binary and 98.31% for multi-class classification was achieved. For deep learning algorithms, the abnormal traffic in the UNSW BoT-IoT dataset consists of user datagram protocol and transmission control protocol packets. To address this imbalance, we merged two important network datasets, UNSW BoT-IoT and NB-15, using feature engineering based on common features, and used the deep learning model LSTM for training. After applying preprocessing techniques and important feature extraction, we performed multiple iterations with 10 and 16 epochs for model validation and achieved an accuracy of 99.89% and 99.97% for multi-class classification.
automation & control systems,engineering, electrical & electronic, multidisciplinary,mathematics, interdisciplinary applications
What problem does this paper attempt to address?