Almuflih Ali Saeed, Abdullayev Ilyos, Bakhvalov Sergey, Shichiyakh Rustem, Dash Bibhuti Bhusan, Rao K B V Brahma, Bansal Kritika
Department of Industrial Engineering, College of Engineering, King Khalid University, P.O. Box 394, Abha, 61421, Saudi Arabia.
Center for Engineering and Technology Innovations, King Khalid University, Abha, 61421, Saudi Arabia.
Sci Rep. 2024 Nov 25;14(1):29238. doi: 10.1038/s41598-024-80255-y.
The fast improvement of cyberattacks in the area of the Internet of Things (IoT) presents novel safety challenges to zero-day attacks. Intrusion detection systems (IDS) are generally focused on exact attacks to defend the use of IoT. However, the attacks were unidentified, for IDS still signifies tasks and concerns about consumers' data privacy and safety. Anomaly-detection models are generally based on machine learning (ML) models. Conventional ML-based models have been recognized to have low estimate excellence and recognition rates. DL-based models, particularly convolutional neural networks (CNN) with regularization techniques, direct this problem, offer a superior prediction value with unidentified data, and prevent over-fitting. This manuscript presents a Binary Snake Optimizer with DL-Enabled Zero-Day Attack Detection and Classification (BSODL-ZDADC) method. The objective of the BSODL-ZDADC method is to employ metaheuristics with the DL method for enhanced recognition and classification of zero-day attacks. For data normalization, the BSODL-ZDADC method uses a Z-score normalization approach. To reduce the high dimensionality issue and improve the classification results, the BSODL-ZDADC technique designs a BSO method to choose a set of related features. Besides, the attention-based bidirectional gated recurrent unit (ABi-GRU) method helps recognize zero-day attacks. Since the hyperparameters play a vital part in the classification performance, the BSODL-ZDADC technique employs an improved sparrow search algorithm (ISSA). The experimental validation of the BSODL-ZDADC technique is verified by utilizing the ToN-IoT dataset. The performance validation of the BSODL-ZDADC technique portrayed a superior accuracy value of 98.28% over other models.
物联网(IoT)领域网络攻击的快速发展给零日攻击带来了新的安全挑战。入侵检测系统(IDS)通常专注于精确攻击以保护物联网的使用。然而,这些攻击未被识别,因为IDS仍然意味着对消费者数据隐私和安全的任务及担忧。异常检测模型通常基于机器学习(ML)模型。传统的基于ML的模型已被认为具有较低的估计质量和识别率。基于深度学习(DL)的模型,特别是具有正则化技术的卷积神经网络(CNN),解决了这个问题,在处理未识别数据时提供了更高的预测价值,并防止过拟合。本文提出了一种基于深度学习的零日攻击检测与分类的二进制蛇优化器(BSODL-ZDADC)方法。BSODL-ZDADC方法的目标是将元启发式算法与深度学习方法相结合,以增强对零日攻击的识别和分类。对于数据归一化,BSODL-ZDADC方法使用Z分数归一化方法。为了减少高维问题并提高分类结果,BSODL-ZDADC技术设计了一种BSO方法来选择一组相关特征。此外,基于注意力的双向门控循环单元(ABi-GRU)方法有助于识别零日攻击。由于超参数在分类性能中起着至关重要的作用,BSODL-ZDADC技术采用了改进的麻雀搜索算法(ISSA)。通过使用ToN-IoT数据集对BSODL-ZDADC技术进行了实验验证。BSODL-ZDADC技术的性能验证表明,其准确率高达98.28%,优于其他模型。