Abstract:Following the recent advances in wireless communication leading to increased Internet of Things (IoT) systems, many security threats are currently ravaging IoT systems, causing harm to information. Considering the vast application areas of IoT systems, ensuring that cyberattacks are holistically detected to avoid harm is paramount. Machine learning (ML) algorithms have demonstrated high capacity in helping to mitigate attacks on IoT devices and other edge systems with reasonable accuracy. However, the dynamics of operation of intruders in IoT networks require more improved IDS models capable of detecting multiple attacks with a higher detection rate and lower computational resource requirement, which is one of the challenges of IoT systems. Many ensemble methods have been used with different ML classifiers, including decision trees and random forests, to propose IDS models for IoT environments. The boosting method is one of the approaches used to design an ensemble classifier. This paper proposes an efficient method for detecting cyberattacks and network intrusions based on boosted ML classifiers. Our proposed model is named BoostedEnML. First, we train six different ML classifiers (DT, RF, ET, LGBM, AD, and XGB) and obtain an ensemble using the stacking method and another with a majority voting approach. Two different datasets containing high-profile attacks, including distributed denial of service (DDoS), denial of service (DoS), botnets, infiltration, web attacks, heartbleed, portscan, and botnets, were used to train, evaluate, and test the IDS model. To ensure that we obtained a holistic and efficient model, we performed data balancing with synthetic minority oversampling technique (SMOTE) and adaptive synthetic (ADASYN) techniques; after that, we used stratified K-fold to split the data into training, validation, and testing sets. Based on the best two models, we construct our proposed BoostedEnsML model using LightGBM and XGBoost, as the combination of the two classifiers gives a lightweight yet efficient model, which is part of the target of this research. Experimental results show that BoostedEnsML outperformed existing ensemble models in terms of accuracy, precision, recall, F-score, and area under the curve (AUC), reaching 100% in each case on the selected datasets for multiclass classification.

A Lightweight Energy Consumption Ensemble-Based Botnet Detection Model for IoT/6G Networks

IoTEnsemble: Detection of Botnet Attacks on Internet of Things

Enhanced botnet detection in IoT networks using zebra optimization and dual-channel GAN classification

ELBA-IoT: An Ensemble Learning Model for Botnet Attack Detection in IoT Networks

BoostedEnML: Efficient Technique for Detecting Cyberattacks in IoT Systems Using Boosted Ensemble Machine Learning

A machine learning-based ensemble model for securing the IoT network

Cross Device Federated Intrusion Detector for Early Stage Botnet Propagation in IoT

Hybrid Data Augmentation Based Machine Learning Approach for Botnet Attack Detection in IOT Networks

Enhancing Smart IoT Malware Detection: A GhostNet-based Hybrid Approach

Cross Deep Learning Method for Effectively Detecting the Propagation of IoT Botnet

Intelligent botnet detection in IoT networks using parallel CNN‐LSTM fusion

Machine learning-based early detection of IoT botnets using network-edge traffic

Approach for Detecting Attacks on IoT Networks Based on Ensemble Feature Selection and Deep Learning Models

Ensemble averaging deep neural network for botnet detection in heterogeneous Internet of Things devices

Review of Botnet Attack Detection in SDN-Enabled IoT Using Machine Learning

Optimized Ensemble Model Towards Secured Industrial IoT Devices

Unsupervised Learning for Feature Selection: A Proposed Solution for Botnet Detection in 5G Networks

IoT networks attacks detection using multi-novel features and extra tree random - voting ensemble classifier (ER-VEC)

Robust Intelligent Malware Detection using Light GBM Algorithm

AI-Driven Fast and Early Detection of IoT Botnet Threats: A Comprehensive Network Traffic Analysis Approach

IoT Botnet Detection Using an Economic Deep Learning Model