Department of Electrical Engineering and Computer Science, Florida Atlantic University, 777 Glades Road, Boca Raton, FL 33431, USA.
Sensors (Basel). 2023 Jun 14;23(12):5568. doi: 10.3390/s23125568.
The Internet of Things (IoT) comprises a network of interconnected nodes constantly communicating, exchanging, and transferring data over various network protocols. Studies have shown that these protocols pose a severe threat (Cyber-attacks) to the security of data transmitted due to their ease of exploitation. In this research, we aim to contribute to the literature by improving the Intrusion Detection System (IDS) detection efficiency. In order to improve the efficiency of the IDS, a binary classification of normal and abnormal IoT traffic is constructed to enhance the IDS performance. Our method employs various supervised ML algorithms and ensemble classifiers. The proposed model was trained on TON-IoT network traffic datasets. Four of the trained ML-supervised models have achieved the highest accurate outcomes; Random Forest, Decision Tree, Logistic Regression, and K-Nearest Neighbor. These four classifiers are fed to two ensemble approaches: voting and stacking. The ensemble approaches were evaluated using the evaluation metrics and compared for their efficacy on this classification problem. The accuracy of the ensemble classifiers was higher than that of the individual models. This improvement can be attributed to ensemble learning strategies that leverage diverse learning mechanisms with varying capabilities. By combining these strategies, we were able to enhance the reliability of our predictions while reducing the occurrence of classification errors. The experimental results show that the framework can improve the efficiency of the Intrusion Detection System, achieving an accuracy rate of 0.9863.
物联网(IoT)由一个互联节点网络组成,这些节点通过各种网络协议不断进行通信、交换和传输数据。研究表明,由于这些协议易于被利用,它们对传输数据的安全性构成了严重威胁(网络攻击)。在这项研究中,我们旨在通过提高入侵检测系统(IDS)的检测效率来为文献做出贡献。为了提高 IDS 的效率,构建了正常和异常物联网流量的二进制分类,以增强 IDS 的性能。我们的方法采用了各种监督机器学习算法和集成分类器。所提出的模型在 TON-IoT 网络流量数据集上进行了训练。在训练的四个监督机器学习模型中,随机森林、决策树、逻辑回归和 K-最近邻算法的准确率最高。这四个分类器被输入到两种集成方法:投票和堆叠。使用评估指标对集成方法进行了评估,并比较了它们在这个分类问题上的效果。集成分类器的准确性高于单个模型。这种改进可以归因于集成学习策略,该策略利用了具有不同能力的各种学习机制。通过结合这些策略,我们能够提高预测的可靠性,同时减少分类错误的发生。实验结果表明,该框架可以提高入侵检测系统的效率,达到 0.9863 的准确率。