Anomaly Detection for IOT Systems Using Active Learning
Source abstract
Abstract
The prevalence of Internet of Things (IoT) technologies is on the rise, making the identification of anomalies in IoT systems crucial for ensuring their security and reliability. However, many existing approaches rely on static classifiers and immutable datasets, limiting their effectiveness. In this paper, we have utilized the UNSW-NB15 dataset, which contains 45 variables including multi- and binary-target variables, to determine the most relevant properties for detecting abnormalities in IoT systems. To address this issue, our research has investigated the use of active learning-based algorithms for anomaly detection in IoT systems. Active learning is a powerful technique that improves precision and productivity by eliminating the need for labeling and adapting to dynamic IoT environments. Additionally, our study has combined feature engineering methods, active learning approaches, and a random forest classifier to construct a resilient anomaly detection model for IoT devices. The proposed model has outperformed several state-of-the-art techniques, achieving an impressive accuracy rate of 99.7%. By implementing a rigorous sampling procedure and leveraging the collaborative nature of the random forest technique, our model has demonstrated a notable level of precision with a weighted average accuracy of 0.995. The findings of the study offered empirical evidence, supporting the efficacy of our active learning methodology in identifying abnormalities in IoT systems. Moreover, our study provides valuable insights and recommendations for future research and development activities in this field. Overall, this research contributes to the advancement of anomaly detection techniques in IoT systems, further enhancing their security and reliability.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Network Security and Intrusion Detection · Anomaly Detection Techniques and Applications · Advanced Malware Detection Techniques
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of Computer Sciences and Engineering, College of Applied Science, King Saud University, Riyadh 11543, Saudi Arabia
Department of Computer Engineering, College of Computer and Information Sciences, King Saud University, Riyadh 11543, Saudi Arabia
Funding
King Saud University
References (38)
Show source-provided references
1. A comprehensive study of anomaly detection schemes in IoT networks using machine learning algorithms10.3390/s21248320 ↗
2. Priya, V., Thaseen, I.S., Gadekallu, T.R., Aboudaif, M.K., and Nasr, E.A. (2021). Robust attack detection approach for IIoT using ensemble classifier. arXiv.
3. Efficient anomaly detection for smart hospital IoT systems10.3390/s21041026 ↗
4. A machine learning security framework for iot systems10.1109/ACCESS.2020.2996214 ↗
5. Attack and anomaly detection in IoT networks using supervised machine learning approaches
6. Outlier detection techniques for wireless sensor networks: A survey10.1109/SURV.2010.021510.00088 ↗
7. Active learning for wireless IoT intrusion detection10.1109/MWC.2017.1800079 ↗
8. Dang, Q.-V. (2020, January 14–15). Active learning for intrusion detection systems. Proceedings of the RIVF International Conference on Computing and Communication Technologies (RIVF), Ho Chi Minh City, Vietnam.10.1109/RIVF48685.2020.9140751 ↗
9. Anomaly detection, analysis and prediction techniques in iot environment: A systematic literature review10.1109/ACCESS.2019.2921912 ↗
10. Anomaly detection using ensemble techniques for boosting the security of intrusion detection system10.1016/j.procs.2023.01.080 ↗
11. TON_IoT telemetry dataset: A new generation dataset of IoT and IIoT for data-driven intrusion detection systems10.1109/ACCESS.2020.3022862 ↗
12. Dual-IDS: A bagging-based gradient boosting decision tree model for network anomaly intrusion detection system10.1016/j.eswa.2022.119030 ↗
13. Network intrusion detection based on ensemble classification and feature selection method for cloud computing10.1002/cpe.6838 ↗
14. Variational LSTM enhanced anomaly detection for industrial big data10.1109/TII.2020.3022432 ↗
15. An improved binary manta ray foraging optimization algorithm based feature selection and random forest classifier for network intrusion detection
16. Alzahrani, A.I.A., Al-Rasheed, A., Ksibi, A., Ayadi, M., Asiri, M.M., and Zakariah, M. (2022). Anomaly Detection in Fog Computing Architectures Using Custom Tab Transformer for Internet of Things. Electronics, 11.10.3390/electronics11234017 ↗
17. Genetic Algorithm based feature selection and Naive Bayes for anomaly detection in fog computing environment
18. IoT anomaly detection methods and applications: A survey10.1016/j.iot.2022.100568 ↗
19. Human immune-based intrusion detection and prevention system for fog computing10.1007/s10922-021-09616-6 ↗
20. Kocher, G., and Kumar, G. (2021). Analysis of machine learning algorithms with feature selection for intrusion detection using UNSW-NB15 dataset. SSRN Electron. J., 3784406.10.2139/ssrn.3784406 ↗
21. Samrin, R., and Vasumathi, D. (2017, January 15–16). Review on anomaly based network intrusion detection system. Proceedings of the International Conference on Electrical, Electronics, Communication, Computer, and Optimization Techniques (ICEECCOT), Mysuru, India.10.1109/ICEECCOT.2017.8284655 ↗
22. Performance analysis of intrusion detection systems using a feature selection method on the UNSW-NB15 dataset10.1186/s40537-020-00379-6 ↗
23. A detailed investigation and analysis of using machine learning techniques for intrusion detection10.1109/COMST.2018.2847722 ↗
24. Intrusion detection in internet of things using supervised machine learning based on application and transport layer features using UNSW-NB15 data-set10.1186/s13638-021-01893-8 ↗
25. Detecting internet of things attacks using distributed deep learning10.1016/j.jnca.2020.102662 ↗
26. Artificial intelligence based anomaly detection of energy consumption in buildings: A review, current trends and new perspectives10.1016/j.apenergy.2021.116601 ↗
27. Bovenzi, G., Aceto, G., Ciuonzo, D., Persico, V., and Pescapé, A. (2020, January 7–11). A hierarchical hybrid intrusion detection approach in IoT scenarios. Proceedings of the GLOBECOM 2020—IEEE Global Communications Conference, Taipei, Taiwan.10.1109/GLOBECOM42002.2020.9348167 ↗
28. Leveraging semisupervised hierarchical stacking temporal convolutional network for anomaly detection in IoT communication10.1109/JIOT.2020.3000771 ↗
29. A two-layer dimension reduction and two-tier classification model for anomaly-based intrusion detection in IoT backbone networks10.1109/TETC.2016.2633228 ↗
30. Alshahrani, M.M. (2023). A Secure and intelligent software-defined networking framework for future smart cities to prevent DDoS Attack. Appl. Sci., 13.10.3390/app13179822 ↗
31. Addressing heterophily in graph anomaly detection: A perspective of graph spectrum
32. Kim, B., Alawami, M.A., Kim, E., Oh, S., Park, J., and Kim, H. (2023). A comparative study of time series anomaly detection models for industrial control systems. Sensors, 23.10.3390/s23031310 ↗
33. Moustafa, N., and Slay, J. (2015, January 10–12). UNSW-NB15: A comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set). Proceedings of the Military Communications and Information Systems Conference (MilCIS), Canberra, Australia.10.1109/MilCIS.2015.7348942 ↗
34. Novel geometric area analysis technique for anomaly detection using trapezoidal area estimation on large-scale networks10.1109/TBDATA.2017.2715166 ↗
35. Arvind, S., Arvind, S., Silveri, V.K., Potey, G., Nunavath, P., and Podishetty, R. (2023, January 29–30). Network traffic virtualization using wireshark and google maps. Proceedings of the International Conference on Distributed Computing and Electrical Circuits and Electronics (ICDCECE), Ballar, India.10.1109/ICDCECE57866.2023.10150823 ↗
36. The UNSW-NB15 Dataset (2015, January 20). Faculty: UNSW Canberra at ADFA. Available online: https://research.unsw.edu.au/projects/unsw-nb15-dataset.
37. Thankachan, K. (2017, January 23–24). Automating anomaly detection for exploratory data analytics. Proceedings of the International Conference on Inventive Computing and Informatics (ICICI), Coimbatore, India.10.1109/ICICI.2017.8365228 ↗
38. Hairab, B.I., Aslan, H.K., Elsayed, M.S., Jurcut, A.D., and Azer, M.A. (2023). Anomaly Detection of Zero-Day Attacks Based on CNN and Regularization Techniques. Electronics, 12.10.3390/electronics12030573 ↗