Abstract:In recent years, with the application of Internet of Things (IoT) and cloud technology in smart industrialization, Industrial Internet of Things (IIoT) has become an emerging hot topic. The increasing amount of data and device numbers in IIoT poses significant challenges to its security issues, making anomaly detection particularly important. Existing methods for anomaly detection in the IIoT often fall short when dealing with data imbalance, and the huge amount of IIoT data makes feature selection challenging and computationally intensive. In this paper, we propose an optimal deep learning model for anomaly detection in IIoT. Firstly, by setting different thresholds of eXtreme Gradient Boosting (XGBoost) for feature selection, features with importance above the given threshold are retained, while those below are ignored. Different thresholds yield different numbers of features. This approach not only secures effective features but also reduces the feature dimensionality, thereby decreasing the consumption of computational resources. Secondly, an optimized loss function is designed to study its impact on model performance in terms of handling imbalanced data, highly similar categories, and model training. We select the optimal threshold and loss function, which are part of our optimal model, by comparing metrics such as accuracy, precision, recall, False Alarm Rate (FAR), Area Under the Receiver Operating Characteristic Curve (AUC-ROC), and Area Under the Precision–Recall Curve (AUC-PR) values. Finally, combining the optimal threshold and loss function, we propose a model named MIX_LSTM for anomaly detection in IIoT. Experiments are conducted using the UNSW-NB15 and NSL-KDD datasets. The proposed MIX_LSTM model can achieve 0.084 FAR, 0.984 AUC-ROC, and 0.988 AUC-PR values in the binary anomaly detection experiment on the UNSW-NB15 dataset. In the NSL-KDD dataset, it can achieve 0.028 FAR, 0.967 AUC-ROC, and 0.962 AUC-PR values. By comparing the evaluation indicators, the model shows good performance in detecting abnormal attacks in the Industrial Internet of Things compared with traditional deep learning models, machine learning models and existing technologies.

Feature-Attended Multi-Flow LSTM for Anomaly Detection in Internet of Things

An Anomaly Detection Algorithm for the Power Industrial Terminal Security Monitoring

An LSTM Based Malicious Traffic Attack Detection in Industrial Internet

Attention Based CNN-LSTM Network for Anomaly Pattern Classification of Multivariate Time Series

Improved LSTM-based Time-Series Anomaly Detection in Rail Transit Operation Environments

An effective method for anomaly detection in industrial Internet of Things using XGBoost and LSTM

LSTM-Markov based efficient anomaly detection algorithm for IoT environment

F-SE-LSTM: A Time Series Anomaly Detection Method with Frequency Domain Information

Improved LSTM-Based Abnormal Stream Data Detection and Correction System for Internet of Things

An Enhancing Timeseries Anomaly Detection Using LSTM and Bi-LSTM Architectures

Real-time Water Quality Detection Based on Fluctuation Feature Analysis with the LSTM Model

LSTM-based Anomaly Detection for Non-linear Dynamical System

Deep Anomaly Detection for Time-Series Data in Industrial IoT: A Communication-Efficient On-Device Federated Learning Approach

LMCA: a lightweight anomaly network traffic detection model integrating adjusted mobilenet and coordinate attention mechanism for IoT

Anomaly Detection Based on Convolutional Recurrent Autoencoder for IoT Time Series

Research on Anomaly Network Detection Based on Self-Attention Mechanism

Real-time fault detection for IIoT facilities using GA-Att-LSTM based on edge-cloud collaboration

An Efficient Communication Intrusion Detection Scheme in AMI Combining Feature Dimensionality Reduction and Improved LSTM

Anomaly Detection of Streaming Data Based on Deep Learning

Mobile Edge Assisted Literal Multi-Dimensional Anomaly Detection of In-Vehicle Network Using LSTM.

Enhancing Cybersecurity in IoT Networks: A Deep Learning Approach to Anomaly Detection