Enhanced Intrusion Detection with LSTM-Based Model, Feature Selection, and SMOTE for Imbalanced Data
Source abstract
Abstract
This study introduces a sophisticated intrusion detection system (IDS) that has been specifically developed for internet of things (IoT) networks. By utilizing the capabilities of long short-term memory (LSTM), a deep learning model renowned for its proficiency in modeling sequential data, our intrusion detection system (IDS) effectively discerns between regular network traffic and potential malicious attacks. In order to tackle the issue of imbalanced data, which is a prevalent concern in the development of intrusion detection systems (IDSs), we have integrated the synthetic minority over-sampling technique (SMOTE) into our approach. This incorporation allows our model to accurately identify infrequent incursion patterns. The rebalancing of the dataset is accomplished by SMOTE through the generation of synthetic samples belonging to the minority class. Various strategies, such as the utilization of generative adversarial networks (GANs), have been put forth in order to tackle the issue of data imbalance. However, SMOTE (synthetic minority over-sampling technique) presents some distinct advantages when applied to intrusion detection. The SMOTE is characterized by its simplicity and proven efficacy across diverse areas, including in intrusion detection. The implementation of this approach is straightforward and does not necessitate intricate adversarial training techniques such as generative adversarial networks (GANs). The interpretability of SMOTE lies in its ability to generate synthetic samples that are aligned with the properties of the original data, rendering it well suited for security applications that prioritize transparency. The utilization of SMOTE has been widely embraced in the field of intrusion detection research, demonstrating its effectiveness in augmenting the detection capacities of intrusion detection systems (IDSs) in internet of things (IoT) networks and reducing the consequences of class imbalance. This study conducted a thorough assessment of three commonly utilized public datasets, namely, CICIDS2017, NSL-KDD, and UNSW-NB15. The findings indicate that our LSTM-based intrusion detection system (IDS), in conjunction with the implementation of SMOTE to address data imbalance, outperforms existing methodologies in accurately detecting network intrusions. The findings of this study provide significant contributions to the domain of internet of things (IoT) security, presenting a proactive and adaptable approach to safeguarding against advanced cyberattacks. Through the utilization of LSTM-based deep learning techniques and the mitigation of data imbalance using SMOTE, our AI-driven intrusion detection system (IDS) enhances the security of internet of things (IoT) networks, hence facilitating the wider implementation of IoT technologies across many industries.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Network Security and Intrusion Detection · Anomaly Detection Techniques and Applications · Internet Traffic Analysis and Secure E-voting
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
College of Computer Science and Electronic Engineering, Hunan University, Changsha 410082, China
References (29)
Show source-provided references
1. Malik, N., Sardaraz, M., Tahir, M., Shah, B., Ali, G., and Moreira, F. (2021). Energy-efficient load balancing algorithm for workflow scheduling in cloud data centers using queuing and thresholds. Appl. Sci., 11.10.3390/app11135849 ↗
2. Baiyere, A., Topi, H., Venkatesh, V., Wyatt, J., Design, R., and Donnellan, B. (2022, May 24). Communications of the Association for Information Systems Internet of Things (IoT)—A Research Agenda for Information Systems. Available online: https://ssrn.com/abstract=3844214.
3. A comprehensive study on cybersecurity challenges and opportunities in the IoT world10.1002/spy2.318 ↗
4. Intrusion Detection System for IoT Based on Deep Learning and Modified Reptile Search Algorithm10.1155/2022/6473507 ↗
5. Long Short-Term Memory10.1162/neco.1997.9.8.1735 ↗
6. DCNNBiLSTM: An Efficient Hybrid Deep Learning-Based Intrusion Detection System10.1016/j.teler.2023.100053 ↗
7. Ashiku, L., and Dagli, C. (2021). Procedia Computer Science, Elsevier B.V.
8. SMOTE: Synthetic Minority over-sampling Technique10.1613/jair.953 ↗
9. Research on expansion and classification of imbalanced data based on SMOTE algorithm10.1038/s41598-021-03430-5 ↗
10. Ustebay, S., Turgut, Z., and Aydin, M.A. (2018, January 3–4). Intrusion Detection System with Recursive Feature Elimination by Using Random Forest and Deep Learning Classifier. Proceedings of the International Congress on Big Data, Deep Learning and Fighting Cyber Terrorism, IBIGDELFT 2018—Proceedings, Ankara, Turkey.10.1109/IBIGDELFT.2018.8625318 ↗
11. Darst, B.F., Malecki, K.C., and Engelman, C.D. (2018). Using recursive feature elimination in random forest to account for correlated variables in high dimensional data. BMC Genet., 19.10.1186/s12863-018-0633-8 ↗
12. Recursive feature elimination with random forest for PTR-MS analysis of agroindustrial products10.1016/j.chemolab.2006.01.007 ↗
13. (2023, July 23). IDS 2017|Datasets|Research|Canadian Institute for Cybersecurity|UNB. Available online: https://www.unb.ca/cic/datasets/ids-2017.html.
14. Tavallaee, M., Bagheri, E., Lu, W., and Ghorbani, A.A. (2009, January 8–10). A detailed analysis of the KDD CUP 99 data set. Proceedings of the IEEE Symposium on Computational Intelligence for Security and Defense Applications, CISDA 2009, Ottawa, ON, Canada.10.1109/CISDA.2009.5356528 ↗
15. Moustafa, N., and Slay, J. (2015, January 10–12). UNSW-NB15: A comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set). Proceedings of the 2015 Military Communications and Information Systems Conference, MilCIS 2015—Proceedings, Canberra, Australia.10.1109/MilCIS.2015.7348942 ↗
16. Yang, L., Moubayed, A., Hamieh, I., and Shami, A. (2019, January 9–13). Tree-based Intelligent Intrusion Detection System in Internet of Vehicles. Proceedings of the 2019 IEEE Global Communications Conference (GLOBECOM), Big Island, HI, USA.10.1109/GLOBECOM38437.2019.9013892 ↗
17. MTH-IDS: A Multi-Tiered Hybrid Intrusion Detection System for Internet of Vehicles10.1109/JIOT.2021.3084796 ↗
18. Joloudari, J.H., Marefat, A., Nematollahi, M.A., Oyelere, S.S., and Hussain, S. (2023). Effective Class-Imbalance Learning Based on SMOTE and Convolutional Neural Networks. Appl. Sci., 13.10.3390/app13064006 ↗
19. Fatani, A., Dahou, A., Abd Elaziz, M., Al-Qaness, M.A., Lu, S., Alfadhli, S.A., and Alresheedi, S.S. (2023). Enhancing Intrusion Detection Systems for IoT and Cloud Environments Using a Growth Optimizer Algorithm and Conventional Neural Networks. Sensors, 23.10.3390/s23094430 ↗
20. Fu, Y., Du, Y., Cao, Z., Li, Q., and Xiang, W. (2022). A Deep Learning Model for Network Intrusion Detection with Imbalanced Data. Electronics, 11.10.3390/electronics11060898 ↗
21. EIDM: Deep learning model for IoT intrusion detection systems10.1007/s11227-023-05197-0 ↗
22. Speiser, J.L. (2021). A random forest method with feature selection for developing medical prediction models with clustered and longitudinal data. J. Biomed. Inform., 117.10.1016/j.jbi.2021.103763 ↗
23. Deep learning algorithms for intrusion detection systems in internet of things using CIC-IDS 2017 dataset
24. Sharafaldin, I., Lashkari, A.H., and Ghorbani, A.A. (2018, January 22–24). Toward generating a new intrusion detection dataset and intrusion traffic characterization. Proceedings of the ICISSP 2018—Proceedings of the 4th International Conference on Information Systems Security and Privacy, Funchal, Portugal.10.5220/0006639801080116 ↗
25. The evaluation of Network Anomaly Detection Systems: Statistical analysis of the UNSW-NB15 data set and the comparison with the KDD99 data set10.1080/19393555.2015.1125974 ↗
26. Selecting critical features for data classification based on machine learning methods10.1186/s40537-020-00327-4 ↗
27. Vujović, Ž.Đ. (2021, July 24). Classification Model Evaluation Metrics. Available online: www.ijacsa.thesai.org.10.14569/IJACSA.2021.0120670 ↗
28. Tafvizi, A., Avci, B., and Sundararajan, M. (2022, May 24). Attributing AUC-ROC to Analyze Binary Classifier Performance. May 2022. Available online: http://arxiv.org/abs/2205.11781.
29. Graph-based few-shot learning with transformed feature propagation and optimal class allocation10.1016/j.neucom.2021.10.110 ↗