Abstract:In recent years, with the application of Internet of Things (IoT) and cloud technology in smart industrialization, Industrial Internet of Things (IIoT) has become an emerging hot topic. The increasing amount of data and device numbers in IIoT poses significant challenges to its security issues, making anomaly detection particularly important. Existing methods for anomaly detection in the IIoT often fall short when dealing with data imbalance, and the huge amount of IIoT data makes feature selection challenging and computationally intensive. In this paper, we propose an optimal deep learning model for anomaly detection in IIoT. Firstly, by setting different thresholds of eXtreme Gradient Boosting (XGBoost) for feature selection, features with importance above the given threshold are retained, while those below are ignored. Different thresholds yield different numbers of features. This approach not only secures effective features but also reduces the feature dimensionality, thereby decreasing the consumption of computational resources. Secondly, an optimized loss function is designed to study its impact on model performance in terms of handling imbalanced data, highly similar categories, and model training. We select the optimal threshold and loss function, which are part of our optimal model, by comparing metrics such as accuracy, precision, recall, False Alarm Rate (FAR), Area Under the Receiver Operating Characteristic Curve (AUC-ROC), and Area Under the Precision–Recall Curve (AUC-PR) values. Finally, combining the optimal threshold and loss function, we propose a model named MIX_LSTM for anomaly detection in IIoT. Experiments are conducted using the UNSW-NB15 and NSL-KDD datasets. The proposed MIX_LSTM model can achieve 0.084 FAR, 0.984 AUC-ROC, and 0.988 AUC-PR values in the binary anomaly detection experiment on the UNSW-NB15 dataset. In the NSL-KDD dataset, it can achieve 0.028 FAR, 0.967 AUC-ROC, and 0.962 AUC-PR values. By comparing the evaluation indicators, the model shows good performance in detecting abnormal attacks in the Industrial Internet of Things compared with traditional deep learning models, machine learning models and existing technologies.

An Anomaly Detection Approach Based on Integrated LSTM for IoT Big Data

An effective method for anomaly detection in industrial Internet of Things using XGBoost and LSTM

Deep Learning for Anomaly Detection in IoT Systems: Techniques, Applications, and Future Directions

Feature-Attended Multi-Flow LSTM for Anomaly Detection in Internet of Things

Enhancing Cybersecurity in IoT Networks: A Deep Learning Approach to Anomaly Detection

Anomaly Detection Based on Convolutional Recurrent Autoencoder for IoT Time Series

Anomaly Detection for Multivariate Time Series in IoT Using Discrete Wavelet Decomposition and Dual Graph Attention Networks

IoT Data Analytics Using Deep Learning

An Effective Transformation-Encoding-Attention Framework for Multivariate Time Series Anomaly Detection in IoT Environment

An Intrusion Detection Method for Cyber Monintoring Using Attention Based Hierarchical LSTM

Anomaly Detection in IoT Networks: Machine Learning Approaches for Intrusion Detection

Anomaly-based intrusion detection system for IoT application

Deep Autoencoder-Based Integrated Model for Anomaly Detection and Efficient Feature Extraction in IoT Networks

Design and Development of a Deep Learning-Based Model for Anomaly Detection in IoT Networks

LSTM-Markov based efficient anomaly detection algorithm for IoT environment

Improvement of Anomaly Detection System in the IoT Networks using CNN-LSTM Approach

A data-driven approach for intrusion and anomaly detection using automated machine learning for the Internet of Things

One-Class LSTM Network for Anomalous Network Traffic Detection

Improved LSTM-Based Abnormal Stream Data Detection and Correction System for Internet of Things

HS-TCN: A Semi-supervised Hierarchical Stacking Temporal Convolutional Network for Anomaly Detection in IoT

Real-Time Deep Anomaly Detection Framework for Multivariate Time-Series Data in Industrial IoT