Suppr超能文献

基于优化极端梯度提升和特征选择的物联网僵尸网络攻击检测。

IoT Botnet Attack Detection Based on Optimized Extreme Gradient Boosting and Feature Selection.

机构信息

Computer Science Department, College of Computer and Information Sciences, King Saud University, Riyadh 11543, Saudi Arabia.

出版信息

Sensors (Basel). 2020 Nov 6;20(21):6336. doi: 10.3390/s20216336.

Abstract

Nowadays, Internet of Things (IoT) technology has various network applications and has attracted the interest of many research and industrial communities. Particularly, the number of vulnerable or unprotected IoT devices has drastically increased, along with the amount of suspicious activity, such as IoT botnet and large-scale cyber-attacks. In order to address this security issue, researchers have deployed machine and deep learning methods to detect attacks targeting compromised IoT devices. Despite these efforts, developing an efficient and effective attack detection approach for resource-constrained IoT devices remains a challenging task for the security research community. In this paper, we propose an efficient and effective IoT botnet attack detection approach. The proposed approach relies on a Fisher-score-based feature selection method along with a genetic-based extreme gradient boosting (GXGBoost) model in order to determine the most relevant features and to detect IoT botnet attacks. The Fisher score is a representative filter-based feature selection method used to determine significant features and discard irrelevant features through the minimization of intra-class distance and the maximization of inter-class distance. On the other hand, GXGBoost is an optimal and effective model, used to classify the IoT botnet attacks. Several experiments were conducted on a public botnet dataset of IoT devices. The evaluation results obtained using holdout and 10-fold cross-validation techniques showed that the proposed approach had a high detection rate using only three out of the 115 data traffic features and improved the overall performance of the IoT botnet attack detection process.

摘要

如今,物联网 (IoT) 技术拥有各种网络应用,并吸引了许多研究和工业界的关注。特别是,易受攻击或未受保护的物联网设备的数量急剧增加,同时可疑活动(如物联网僵尸网络和大规模网络攻击)的数量也在增加。为了解决这个安全问题,研究人员已经部署了机器学习和深度学习方法来检测针对受感染的物联网设备的攻击。尽管做出了这些努力,但是为资源受限的物联网设备开发高效和有效的攻击检测方法仍然是安全研究社区面临的一项挑战。在本文中,我们提出了一种高效和有效的物联网僵尸网络攻击检测方法。该方法依赖于基于 Fisher 得分的特征选择方法和基于遗传的极端梯度提升 (GXGBoost) 模型,以确定最相关的特征并检测物联网僵尸网络攻击。Fisher 得分是一种基于过滤的特征选择方法,用于通过最小化类内距离和最大化类间距离来确定显著特征并丢弃不相关特征。另一方面,GXGBoost 是一种最优和有效的模型,用于对物联网僵尸网络攻击进行分类。在物联网设备的公共僵尸网络数据集上进行了多次实验。使用保留和 10 折交叉验证技术获得的评估结果表明,该方法仅使用 115 个数据流量特征中的三个特征就具有很高的检测率,并提高了物联网僵尸网络攻击检测过程的整体性能。

https://cdn.ncbi.nlm.nih.gov/pmc/blobs/91b3/7664261/4ac0183fd111/sensors-20-06336-g001.jpg

相似文献

1
IoT Botnet Attack Detection Based on Optimized Extreme Gradient Boosting and Feature Selection.
Sensors (Basel). 2020 Nov 6;20(21):6336. doi: 10.3390/s20216336.
3
Machine Learning-Based IoT-Botnet Attack Detection with Sequential Architecture.
Sensors (Basel). 2020 Aug 5;20(16):4372. doi: 10.3390/s20164372.
4
Review of Botnet Attack Detection in SDN-Enabled IoT Using Machine Learning.
Sensors (Basel). 2022 Dec 14;22(24):9837. doi: 10.3390/s22249837.
5
Using Embedded Feature Selection and CNN for Classification on CCD-INID-V1-A New IoT Dataset.
Sensors (Basel). 2021 Jul 15;21(14):4834. doi: 10.3390/s21144834.
6
Cross Deep Learning Method for Effectively Detecting the Propagation of IoT Botnet.
Sensors (Basel). 2022 May 20;22(10):3895. doi: 10.3390/s22103895.
7
A comparative analysis of using ensemble trees for botnet detection and classification in IoT.
Sci Rep. 2023 Dec 7;13(1):21632. doi: 10.1038/s41598-023-48681-6.
8
Classification of botnet attacks in IoT smart factory using honeypot combined with machine learning.
PeerJ Comput Sci. 2021 Jan 25;7:e350. doi: 10.7717/peerj-cs.350. eCollection 2021.
9
Lightweight Internet of Things Botnet Detection Using One-Class Classification.
Sensors (Basel). 2022 May 10;22(10):3646. doi: 10.3390/s22103646.
10
Systematic Literature Review of IoT Botnet DDOS Attacks and Evaluation of Detection Techniques.
Sensors (Basel). 2024 Jun 1;24(11):3571. doi: 10.3390/s24113571.

引用本文的文献

1
A comparative analysis of using ensemble trees for botnet detection and classification in IoT.
Sci Rep. 2023 Dec 7;13(1):21632. doi: 10.1038/s41598-023-48681-6.
3
A systematic literature review for APT detection and Effective Cyber Situational Awareness (ECSA) conceptual model.
Heliyon. 2023 Jun 16;9(7):e17156. doi: 10.1016/j.heliyon.2023.e17156. eCollection 2023 Jul.
6
Explainable Security in SDN-Based IoT Networks.
Sensors (Basel). 2020 Dec 20;20(24):7326. doi: 10.3390/s20247326.

本文引用的文献

2
Blockchain and Random Subspace Learning-Based IDS for SDN-Enabled Industrial IoT Security.
Sensors (Basel). 2019 Jul 15;19(14):3119. doi: 10.3390/s19143119.

文献AI研究员

20分钟写一篇综述,助力文献阅读效率提升50倍。

立即体验

用中文搜PubMed

大模型驱动的PubMed中文搜索引擎

马上搜索

文档翻译

学术文献翻译模型,支持多种主流文档格式。

立即体验