Abstract:Following the recent advances in wireless communication leading to increased Internet of Things (IoT) systems, many security threats are currently ravaging IoT systems, causing harm to information. Considering the vast application areas of IoT systems, ensuring that cyberattacks are holistically detected to avoid harm is paramount. Machine learning (ML) algorithms have demonstrated high capacity in helping to mitigate attacks on IoT devices and other edge systems with reasonable accuracy. However, the dynamics of operation of intruders in IoT networks require more improved IDS models capable of detecting multiple attacks with a higher detection rate and lower computational resource requirement, which is one of the challenges of IoT systems. Many ensemble methods have been used with different ML classifiers, including decision trees and random forests, to propose IDS models for IoT environments. The boosting method is one of the approaches used to design an ensemble classifier. This paper proposes an efficient method for detecting cyberattacks and network intrusions based on boosted ML classifiers. Our proposed model is named BoostedEnML. First, we train six different ML classifiers (DT, RF, ET, LGBM, AD, and XGB) and obtain an ensemble using the stacking method and another with a majority voting approach. Two different datasets containing high-profile attacks, including distributed denial of service (DDoS), denial of service (DoS), botnets, infiltration, web attacks, heartbleed, portscan, and botnets, were used to train, evaluate, and test the IDS model. To ensure that we obtained a holistic and efficient model, we performed data balancing with synthetic minority oversampling technique (SMOTE) and adaptive synthetic (ADASYN) techniques; after that, we used stratified K-fold to split the data into training, validation, and testing sets. Based on the best two models, we construct our proposed BoostedEnsML model using LightGBM and XGBoost, as the combination of the two classifiers gives a lightweight yet efficient model, which is part of the target of this research. Experimental results show that BoostedEnsML outperformed existing ensemble models in terms of accuracy, precision, recall, F-score, and area under the curve (AUC), reaching 100% in each case on the selected datasets for multiclass classification.

XGBoost for Imbalanced Multiclass Classification-Based Industrial Internet of Things Intrusion Detection Systems

A Mixed Intrusion Detection System Utilizing K-means and Extreme Gradient Boosting

An effective method for anomaly detection in industrial Internet of Things using XGBoost and LSTM

Deep learning-based intrusion detection approach for securing industrial Internet of Things

An improved anomaly detection model for IoT security using decision tree and gradient boosting

Sampling-Based Machine Learning Models for Intrusion Detection in Imbalanced Dataset

Intrusion detection using hybridized meta-heuristic techniques with Weighted XGBoost Classifier

BoostedEnML: Efficient Technique for Detecting Cyberattacks in IoT Systems Using Boosted Ensemble Machine Learning

GPT and Interpolation-Based Data Augmentation for Multiclass Intrusion Detection in IIoT

Industrial Internet of Things Intrusion Detection Method Using Machine Learning and Optimization Techniques

Enhancing intrusion detection in IIoT: optimized CNN model with multi-class SMOTE balancing

An Efficient Deep Learningbased Intrusion Detection System for Internet of Things Networks with Hybrid Feature Reduction and Data Balancing Techniques

Class imbalance data handling with optimal deep learning-based intrusion detection in IoT environment

Optimizing IoT Intrusion Detection Using Balanced Class Distribution, Feature Selection, and Ensemble Machine Learning Techniques

Detecting Unbalanced Network Traffic Intrusions With Deep Learning

A cloud‐based hybrid intrusion detection framework using XGBoost and ADASYN‐Augmented random forest for IoMT

Hybrid Deep Learning-based Intrusion Detection System for Industrial Internet of Things

Enhancing the security in IoT and IIoT networks: An intrusion detection scheme leveraging deep transfer learning

Intrusion Detection in Industrial Internet of Things Network-Based on Deep Learning Model with Rule-Based Feature Selection

An efficient XGBoost–DNN-based classification model for network intrusion detection system

Multi-Classification and Tree-Based Ensemble Network for the Intrusion Detection System in the Internet of Vehicles