Al Hanif Abdulelah, Ilyas Mohammad
Department of Electrical Engineering and Computer Science, Florida Atlantic University, 777 Glades Road, Boca Raton, FL 33431, USA.
Sensors (Basel). 2024 Mar 10;24(6):1782. doi: 10.3390/s24061782.
The explosive growth of the domain of the Internet of things (IoT) network devices has resulted in unparalleled ease of productivity, convenience, and automation, with Message Queuing Telemetry Transport (MQTT) protocol being widely recognized as an essential communication standard in IoT environments. MQTT enables fast and lightweight communication between IoT devices to facilitate data exchange, but this flexibility also exposes MQTT to significant security vulnerabilities and challenges that demand highly robust security. This paper aims to enhance the detection efficiency of an MQTT traffic intrusion detection system (IDS). Our proposed approach includes the development of a binary balanced MQTT dataset with an effective feature engineering and machine learning framework to enhance the security of MQTT traffic. Our feature selection analysis and comparison demonstrates that selecting a 10-feature model provides the highest effectiveness, as it shows significant advantages in terms of constant accuracy and superior training and testing times across all models. The results of this study show that the framework has the capability to enhance the efficiency of an IDS for MQTT traffic, with more than 96% accuracy, precision, recall, F1-score, and ROC, and it outperformed the most recent study that used the same dataset.
物联网(IoT)网络设备领域的爆炸式增长带来了前所未有的生产力提升、便利性和自动化,消息队列遥测传输(MQTT)协议被广泛认为是物联网环境中的一项重要通信标准。MQTT实现了物联网设备之间的快速轻量级通信,以促进数据交换,但这种灵活性也使MQTT面临重大的安全漏洞和挑战,需要高度强大的安全性。本文旨在提高MQTT流量入侵检测系统(IDS)的检测效率。我们提出的方法包括开发一个二进制平衡的MQTT数据集,并采用有效的特征工程和机器学习框架来增强MQTT流量的安全性。我们的特征选择分析和比较表明,选择一个10特征模型具有最高的有效性,因为它在所有模型中,在恒定准确性以及卓越的训练和测试时间方面都显示出显著优势。本研究结果表明,该框架能够提高MQTT流量IDS的效率,准确率、精确率、召回率、F1分数和ROC均超过96%,并且优于使用相同数据集的最新研究。