Abstract:The Internet of Things (IoT), as the information carrier of the Internet and telecommunications networks, is a new network technology comprising physical entities embedded with electronic components, software and sensors, and characterized by strong complexity and openness. With the massive amount of data, the occurrence of network intrusion is also increasingly frequent, involving industrial control systems, IoT devices, mobile security, cloud services, and telecommunications services. With the diversification and intelligence of cyberattack behaviors, traditional intrusion detection systems (IDSs) face problems—such as insufficient feature extraction and inaccurate model classification—when faced with high-dimensional features and nonlinear massive data. Due to their powerful data representation learning ability, deep learning methods save substantial time in processing high-dimensional and complex intrusion data. On this basis, we propose an intrusion detection model using ResNet, Transformer and BiLSTM (Res-TranBiLSTM) that takes into account both the spatial and temporal features of network traffic. We use the Synthetic Minor Overriding Technique (SMOTE) – Edited Nearest Neighbor (ENN) method to alleviate the degree of data imbalance. In addition, we respectively establish a spatial feature extraction model based on ResNet and a temporal feature extraction model based on Transformer and BiLSTM to extract spatial features and temporal features parallelly. Finally, spatiotemporal features are included to achieve attack detection and classification. Further, simulation experiments are conducted using the public data sets NSL-KDD and CIC-IDS2017. The experiments are implemented using Python programming language and Pytorch framework. The results reveal that the performance of our proposed model is better than that of other models, with accuracy reaching 90.99%, 99.15% and 99.56%, on NSL-KDD dataset, CIC-IDS2017 dataset and MQTTset dataset, respectively. It increased the detection accuracy by about 1%-10% on NSL-KDD dataset and about 0.2%-10% on CIC-IDS2017 dataset, and about 1%-10% on MQTTset dataset. These results demonstrate that this method is effective in constructing and optimizing large-scale IDS in the IoT environment.

An Intelligent Digital Twin Method based on Spatio-Temporal Feature Fusion for IoT Attack Behavior Identification

Enhanced Network Intrusion Detection System for Internet of Things Security Using Multimodal Big Data Representation with Transfer Learning and Game Theory

A Novel Internet of Things (IoT) Web Attack Detection Architecture Based on the Combination of Symbolism and Connectionism AI

DeepAK-IoT: an Effective Deep Learning Model for Cyberattack Detection in IoT Networks

Intrusion Detection System for Internet of Things Based on Temporal Convolution Neural Network and Efficient Feature Engineering

An LSTM Based Malicious Traffic Attack Detection in Industrial Internet

Res-TranBiLSTM: An Intelligent Approach for Intrusion Detection in the Internet of Things

IoT-Based Intrusion Detection System Using New Hybrid Deep Learning Algorithm

Intrusion Detection Method for Internet of Vehicles Based on Parallel Analysis of Spatio-Temporal Features

Enhancing the security in IoT and IIoT networks: An intrusion detection scheme leveraging deep transfer learning

Multi-Level Intrusion Detection Based on Transformer and Wavelet Transform for IoT Data Security

Intelligent botnet detection in IoT networks using parallel CNN‐LSTM fusion

A lightweight intrusion detection method for IoT based on deep learning and dynamic quantization

Toward Design of an Intelligent Cyber Attack Detection System using Hybrid Feature Reduced Approach for IoT Networks

An efficient deep recurrent neural network for detection of cyberattacks in realistic IoT environment

An Enhanced Intrusion Detection System for IoT Networks Based on Deep Learning and Knowledge Graph

Your Smart Home Can't Keep a Secret: Towards Automated Fingerprinting of IoT Traffic with Neural Networks

Using Feature Selection Enhancement to Evaluate Attack Detection in the Internet of Things Environment

A Deep Learning-Based Intrusion Detection Model Integrating Convolutional Neural Network and Vision Transformer for Network Traffic Attack in the Internet of Things

A hybrid deep learning-based intrusion detection system for IoT networks

Machine learning-based attack detection for the Internet of Things