journal article·2023Open access

AID4I: An Intrusion Detection Framework for Industrial Internet of Things Using Automated Machine Learning

Anıl Sezgin, Aytuğ Boyacı

Computers, Materials & Continua· Volume 76· Issue 2

Abstract

By identifying and responding to any malicious behavior that could endanger the system, the Intrusion Detection System (IDS) is crucial for preserving the security of the Industrial Internet of Things (IIoT) network. The benefit of anomaly-based IDS is that they are able to recognize zero-day attacks due to the fact that they do not rely on a signature database to identify abnormal activity. In order to improve control over datasets and the process, this study proposes using an automated machine learning (AutoML) technique to automate the machine learning processes for IDS. Our ground-breaking architecture, known as AID4I, makes use of automatic machine learning methods for intrusion detection. Through automation of preprocessing, feature selection, model selection, and hyperparameter tuning, the objective is to identify an appropriate machine learning model for intrusion detection. Experimental studies demonstrate that the AID4I framework successfully proposes a suitable model. The integrity, security, and confidentiality of data transmitted across the IIoT network can be ensured by automating machine learning processes in the IDS to enhance its capacity to identify and stop threatening activities. With a comprehensive solution that takes advantage of the latest advances in automated machine learning methods to improve network security, AID4I is a powerful and effective instrument for intrusion detection. In preprocessing module, three distinct imputation methods are utilized to handle missing data, ensuring the robustness of the intrusion detection system in the presence of incomplete information. Feature selection module adopts a hybrid approach that combines Shapley values and genetic algorithm. The Parameter Optimization module encompasses a diverse set of 14 classification methods, allowing for thorough exploration and optimization of the parameters associated with each algorithm. By carefully tuning these parameters, the framework enhances its adaptability and accuracy in identifying potential intrusions. Experimental results demonstrate that the AID4I framework can achieve high levels of accuracy in detecting network intrusions up to 14.39% on public datasets, outperforming traditional intrusion detection methods while concurrently reducing the elapsed time for training and testing.
Source: openalex_inverted_index · Quality: baseline

Research context

OpenAlex topics: Network Security and Intrusion Detection · Anomaly Detection Techniques and Applications · Advanced Malware Detection Techniques

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

References (35)

Show source-provided references
1. Supervisory control and data acquisition10.5120/17848-8797 ↗
2. Hassanzadeh · IEEE World Forum on Internet of Things (WF-IoT) · 2015 · 795
3. Internet of things standards: Who stands out from the crowd?10.1109/MCOM.2016.7514162 ↗
4. A survey of data mining and machine learning methods for cyber security intrusion detection10.1109/COMST.2015.2494502 ↗
5. Review on anomaly based network intrusion detection system
6. Enhanced network anomaly detection based on deep neural networks10.1109/ACCESS.2018.2863036 ↗
7. Internet of things intrusion detection system based on convolutional neural network10.32604/cmc.2023.035077 ↗
8. A hybrid intrusion detection system based on ABC-AFS algorithm for misuse and anomaly detection10.1016/j.comnet.2018.02.028 ↗
9. Zhang · Matrix Algebra Approach to Artificial Intelligence · 202010.1007/978-981-15-2770-8 ↗
10. Mohammed · Machine Learning: Algorithms and Applications · 2016
11. Random search for hyper-parameter optimization
12. Enhancing intrusion detection in industrial internet of things through automated preprocessing10.12913/22998624/162004 ↗
13. Informing the use of hyperparameter optimization through metalearning
14. Data-driven advice for applying machine learning to bioinformatics problems
15. Auto-WEKA 2.0: Automatic model selection and hyperparameter optimization in WEKA
16. Olson · Automated Machine Learning · 2019 · 151
17. Efficient and robust automated machine learning
18. Auto-keras: An efficient neural architecture search system
19. Oracle AutoML: A fast and predictive AutoML pipeline10.14778/3415478.3415542 ↗
20. X-IIoTID: A connectivity-agnostic and device-agnostic intrusion data set for industrial internet of things10.1109/JIOT.2021.3102056 ↗
21. A novel wrapper-based optimization algorithm for the feature selection and classification10.32604/cmc.2023.034025 ↗
22. A review of feature selection techniques in bioinformatics
23. A value for n-person games
24. A unified approach to interpreting model predictions
25. Asynchronous peer-to-peer federated capability-based targeted ransomware detection model for industrial IoT10.1109/ACCESS.2021.3124634 ↗
26. Network intrusion detection using Naive Bayes
27. Classification and prediction of network abnormal data based on machine learning
28. Network attack detection methods based on convolutional neural network
29. Network attack detection using an unsupervised machine learning algorithm
30. An adaptive distributed intrusion detection system architecture using multi agents10.11591/ijece.v9i6.pp4951-4960 ↗
31. A NSGA2-LR wrapper approach for feature selection in network intrusion detection10.1016/j.comnet.2020.107183 ↗
32. Wang · IEEE SmartWorld, Ubiquitous Intelligence & Computing, Advanced & Trusted Computing, Scalable Computing & Communications, Cloud & Big Data Computing, Internet of People and Smart City Innovation (SmartWorld/SCALCOM/UIC/ATC/CBDCom/IOP/SCI) · 2018 · 1803
33. A performance comparison of data mining algorithms based intrusion detection system for smart grid
34. The evaluation of network anomaly detection systems: Statistical analysis of the UNSW-NB15 data set and the comparison with the KDD99 data set
35. Model of the intrusion detection system based on the integration of spatial-temporal features10.1016/j.cose.2019.101681 ↗