journal article·2023-02-14Open access

An Ensemble Tree-Based Model for Intrusion Detection in Industrial Internet of Things Networks

Joseph Bamidele Awotunde, Sakinat Oluwabukonla Folorunso, Agbotiname Lucky Imoize, Julius Olusola Odunuga, Cheng-Chi Lee, Chun-Ta Li, Dinh-Thuan Do

Applied Sciences· Volume 13· Issue 4

Abstract

With less human involvement, the Industrial Internet of Things (IIoT) connects billions of heterogeneous and self-organized smart sensors and devices. Recently, IIoT-based technologies are now widely employed to enhance the user experience across numerous application domains. However, heterogeneity in the node source poses security concerns affecting the IIoT system, and due to device vulnerabilities, IIoT has encountered several attacks. Therefore, security features, such as encryption, authorization control, and verification, have been applied in IIoT networks to secure network nodes and devices. However, the requisite machine learning models require some time to detect assaults because of the diverse IIoT network traffic properties. Therefore, this study proposes ensemble models enabled with a feature selection classifier for Intrusion Detection in the IIoT network. The Chi-Square Statistical method was used for feature selection, and various ensemble classifiers, such as eXtreme gradient boosting (XGBoost), Bagging, extra trees (ET), random forest (RF), and AdaBoost can be used for the detection of intrusion applied to the Telemetry data of the TON_IoT datasets. The performance of these models is appraised based on accuracy, recall, precision, F1-score, and confusion matrix. The results indicate that the XGBoost ensemble showed superior performance with the highest accuracy over other models across the datasets in detecting and classifying IIoT attacks.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: Network Security and Intrusion Detection · Advanced Malware Detection Techniques · Anomaly Detection Techniques and Applications

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

Department of Computer Science, Faculty of Information and Communication Sciences, University of Ilorin, Ilorin 240003, Nigeria

Department of Mathematical Sciences, Olabisi Onabanjo University, Ago-Iwoye 120107, Nigeria

Department of Electrical and Electronics Engineering, Faculty of Engineering, University of Lagos, Akoka, Lagos 100213, Nigeria

Department of Electrical Engineering and Information Technology, Institute of Digital Communication, Ruhr University, 44801 Bochum, Germany

Research and Development Center for Physical Education, Health, and Information Technology, Department of Library and Information Science, Fu Jen Catholic University, New Taipei City 24205, Taiwan

Department of Computer Science and Information Engineering, Asia University, Taichung City 41354, Taiwan

Bachelor’s Program of Artificial Intelligence and Information Security, Fu Jen Catholic University, New Taipei City 24206, Taiwan

Department of Computer Science and Information Engineering, College of Information and Electrical Engineering, Asia University, Taichung 41354, Taiwan

Funding

Nigerian Petroleum Technology Development Fund (PTDF) · German Academic Exchange Service (DAAD)

References (63)

Show source-provided references
1. A security authorization scheme for smart home Internet of Things devices10.1016/j.future.2017.05.048 ↗
2. A review on ensembles for the class imbalance problem: Bagging boosting, and hybrid-based approaches10.1109/TSMCC.2011.2161285 ↗
3. Awotunde, J.B., Jimoh, R.G., Folorunso, S.O., Adeniyi, E.A., Abiodun, K.M., and Banjo, O. (2021). The Fusion of Internet of Things, Artificial Intelligence, and Cloud Computing in Health Care, Springer.
4. Folorunso, S.O., Awotunde, J.B., Adeniyi, E.A., Abiodun, K.M., and Ayo, F.E. (2021). Informatics and Intelligent Applications (ICIIA 2021), Springer.
5. Feature extraction for machine learning-based intrusion detection in IoT networks
6. Intrusion detection in industrial internet of things network-based on deep learning model with rule-based feature selection10.1155/2021/7154587 ↗
7. Awotunde, J.B., Misra, S., Adeniyi, A., Abiodun, M., Kaushik, M., and Lawrence, M.O. (2022). International Conference on Computational Science and Its Applications, Springer.
8. A survey of defense mechanisms against distributed denial of service (DDoS) flooding attacks10.1109/SURV.2013.031413.00127 ↗
9. Feature selection for intrusion detection system in Internet-of-Things (IoT)10.1016/j.icte.2021.04.012 ↗
10. AbdulRaheem, M., Oladipo, I.D., González-Briones, A., Awotunde, J.B., Tomori, A.R., and Jimoh, R.G. (2022). An efficient lightweight speck technique for edge-IoT-based smart healthcare systems.” In 5G IoT and Edge Computing for Smart Healthcare, Academic Press.10.1016/B978-0-323-90548-0.00005-X ↗
11. Johnson, C.A. (2016). IoT Security for Dummies, John Wiley and Sons Ltd.
12. TON_IoT Telemetry Dataset: A New Generation Dataset of IoT and IIoT for Data-Driven Intrusion Detection Systems10.1109/ACCESS.2020.3022862 ↗
13. Network intrusion detection for IoT security based on learning techniques10.1109/COMST.2019.2896380 ↗
14. Deep learning for IoT big data and streaming analytics: A survey10.1109/COMST.2018.2844341 ↗
15. A survey of data mining and machine learning methods for cyber security intrusion detection10.1109/COMST.2015.2494502 ↗
16. Kirana, K.V.V.N.L.S., Devisetty, R.N.K., Kalyan, N.P., Mukundini, K., and Karthi, R. (2019, January 18–21). Building an Intrusion Detection System for IoT Environment using Machine Learning Techniques. Proceedings of the The Third International Conference and Network Communications (CoCoNet’19), Trivandrum, India.
17. Towards Machine Learning Based Intrusion Detection in IoT Networks
18. Parmisano, A., Garcia, S., and Erquiaga, M. (2019). Iot-23 Dataset: A Labeled Dataset of Malware and Benign Iot Traffic, Avast-AIC Laboratory, Stratosphere IPS, Czech Technical University (CTU).
19. Kaggle (2022, June 05). Iot Device Network Logs. Available online: https://www.kaggle.com/speedwall10/iotdevice-network-logs.
20. Pahl, M., and Aubet, F. (2018, January 5–9). All eyes on you: Distributed multi-dimensional IoT microservice anomaly detection. Proceedings of the 14th International Conference on Network and Service Management, Rome, Italy.
21. IoT network intrusion dataset
22. Ullah, I., and Mahmoud, Q.H. (2020, January 11–14). A technique for generating a botnet dataset for anomalous activity detection in IoT networks. Proceedings of the 2020 IEEE International Conference on Systems, Man, and Cybernetics, Toronto, ON, Canada.10.1109/SMC42975.2020.9283220 ↗
23. Efficient Intrusion Detection System for IoT Environment
24. A Distributed Intrusion Detection System using Machine Learning for IoT based on ToN-IoT Dataset
25. Analysis and modelling of a ML-based NIDS for IoT networks10.1016/j.procs.2022.08.023 ↗
26. A tree-based stacking ensemble technique with feature selection for network intrusion detection10.1007/s10489-021-02968-1 ↗
27. An ensemble intrusion detection technique based on proposed statistical flow features for protecting network traffic of internet of things10.1109/JIOT.2018.2871719 ↗
28. Koroniotis, N., Moustafa, N., Sitnikova, E., and Slay, J. (2017). International Conference on Mobile Networks and Management, Springer.
29. Roopak, M., Tian, G.Y., and Chambers, J. (2020). 2020 10th Annual Computing and Communication Workshop and Conference (CCWC), IEEE.
30. Leveraging LSTM networks for attack detection in fog-to-things communications10.1109/MCOM.2018.1701270 ↗
31. A supervised intrusion detection system for smart home IoT devices10.1109/JIOT.2019.2926365 ↗
32. Chen, Y.W., Sheu, J.P., Kuo, Y.C., and Van Cuong, N. (2020). 2020 European Conference on Networks and Communications (EuCNC), IEEE.
33. ForChaos: Real-time application DDoS detection using forecasting and chaos theory in smart home IoT network10.1155/2019/8469410 ↗
34. Shrivastava, R.K., Bashir, B., and Hota, C. (2019). International Conference on Distributed Computing and Internet Technology, Springer.
35. Nanthiya, D., Keerthika, P., Gopal, S.B., Kayalvizhi, S.B., Raja, T., and Priya, R.S. (2021). 2021 Innovations in Power and Advanced Computing Technologies (i-PACT), IEEE.
36. Awotunde, J.B., and Misra, S. (2022). Illumination of Artificial Intelligence in Cybersecurity and Forensics, Springer.
37. Ferrag, M.A., Maglaras, L., Ahmim, A., Derdour, M., and Janicke, H. (2020). Rdtids: Rules and decision tree-based intrusion detection system for internet-of-things networks. Future Internet, 12.10.3390/fi12030044 ↗
38. Khraisat, A., Gondal, I., Vamplew, P., Kamruzzaman, J., and Alazab, A. (2019). A novel ensemble of hybrid intrusion detection system for detecting internet of things attacks. Electronics, 8.10.3390/electronics8111210 ↗
39. An ensemble deep learning model for cyber threat hunting in the industrial internet of things
40. Greedy function approximation: A gradient boosting machine10.1214/aos/1013203451 ↗
41. Chen, T., and Guestrin, C. (2016, January 13–17). XGBoost: A Scalable Tree Boosting System. Proceedings of the 22nd ACM Sigkdd International Conference on Knowledge Discovery and Data Mining, San Francisco, CA, USA.10.1145/2939672.2939785 ↗
42. Dissecting Genre of Nigerian Music with Machine Learning Models
43. Ampomah, E.K., Qin, Z., and Nyame, G. (2020). Evaluation of Tree-Based Ensemble Machine Learning Models in Predicting Stock Price Direction of Movement. Information, 11.10.3390/info11060332 ↗
44. Gene expression value prediction based on XGBoost algorithm10.3389/fgene.2019.01077 ↗
45. Bagging Predictors10.1007/BF00058655 ↗
46. Random forests10.1023/A:1010933404324 ↗
47. Machine Learning for Prediction of Drug Targets in Microbe Associated Cardiovascular Diseases by Incorporating Host-pathogen Interaction Network Parameters10.1002/minf.202100115 ↗
48. Random forest for label ranking10.1016/j.eswa.2018.06.036 ↗
49. Extremely randomized trees10.1007/s10994-006-6226-1 ↗
50. Freund, Y., and Schapire, R. (1996, January 3–6). Experiments with a new boosting algorithm. In Machine Learning. Proceedings of the Thirteenth International Conference of Machine Learning (ICML ’96), Bari, Italy.
51. Additive logistic regression: A723 statistical view of boosting10.1214/aos/1016218223 ↗
52. Krupp, J., Backes, M., and Rossow, C. (2016, January 24–28). Identifying the scan and attack infrastructures behind amplification DDoS attacks. Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, Vienna, Austria.10.1145/2976749.2978293 ↗
53. Lyon, G.F. (2009). Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning, Insecure.
54. (2022, July 01). Nessus, Nessus: A Secure Vulnerability Scanning Tool. Available online: https://www.cs.cmu.edu/dwendlan/personal/nessus.html.
55. Towards the development of realistic botnet dataset in the Internet of Things for network forensic analytics: Bot-IoT dataset10.1016/j.future.2019.05.041 ↗
56. Ransomware threat success factors, taxonomy, and countermeasures: A survey and research directions10.1016/j.cose.2018.01.001 ↗
57. Intrusion detection in 802.11 networks: Empirical evaluation of threats and a public dataset10.1109/COMST.2015.2402161 ↗
58. Machin learning-based network vulnerability analysis of industrial Internet of Things10.1109/JIOT.2019.2912022 ↗
59. Nelso, T., and Chaffin, M. (2011). Control Systems Security Program, Department of Homeland Security (DHS), National Cyber Security Division.
60. Data Classification Model for COVID-19 Pandemic10.1007/978-3-030-77302-1_6 ↗
61. Tasnim, A., Hossain, N., Parvin, N., Tabassum, S., Rahman, R., and Hossain, M.I. (2022, January 23–25). Experimental Analysis of Classification for Different Internet of Things (IoT) Network Attacks Using Machine Learning and Deep learning. Proceedings of the International Conference on Decision Aid Sciences and Applications (DASA), Chiangrai, Thailand.10.1109/DASA54658.2022.9765108 ↗
62. Securing the IoT System of Smart City against Cyber Threats Using10.1155/2022/1241122 ↗
63. An Ensemble-Based Multiclass Classifier for Intrusion Detection Using Internet of Things10.1155/2022/1668676 ↗