An Efficient Two-Stage Network Intrusion Detection System in the Internet of Things

被引:9
|
作者
Zhang, Hongpo [1 ,2 ]
Zhang, Bo [1 ]
Huang, Lulu [2 ]
Zhang, Zhaozhe [1 ]
Huang, Haizhaoyang [1 ]
机构
[1] Zhengzhou Univ, Sch Cyber Sci & Engn, Zhengzhou 450001, Peoples R China
[2] Zhengzhou Univ, Cooperat Innovat Ctr Internet Healthcare, Zhengzhou 450001, Peoples R China
关键词
internet of things; network intrusion detection; convolutional neural network; class imbalance; LightGBM; NEURAL-NETWORK; IOT;
D O I
10.3390/info14020077
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Internet of Things (IoT) devices and services provide convenience but face serious security threats. The network intrusion detection system is vital in ensuring the security of the IoT environment. In the IoT environment, we propose a novel two-stage intrusion detection model that combines machine learning and deep learning to deal with the class imbalance of network traffic data and achieve fine-grained intrusion detection on large-scale flow data. The superiority of the model is verified on the newer and larger CSE-CIC-IDS2018 dataset. In Stage-1, the LightGBM algorithm recognizes normal and abnormal network traffic data and compares six classic machine learning techniques. In Stage-2, the Convolutional Neural Network (CNN) performs fine-grained attack class detection on the samples predicted to be abnormal in Stage-1. The Stage-2 multiclass classification achieves a detection rate of 99.896%, F1score of 99.862%, and an MCC of 95.922%. The total training time of the two-stage model is 74.876 s. The detection time of a sample is 0.0172 milliseconds. Moreover, we set up an optional Synthetic Minority Over-sampling Technique based on the imbalance ratio (IR-SMOTE) of the dataset in Stage-2. Experimental results show that, compared with SMOTE technology, the two-stage intrusion detection model can adapt to imbalanced datasets well and reveal higher efficiency and better performance when processing large-scale flow data, outperforming state-of-the-art intrusion detection systems.
引用
收藏
页数:17
相关论文
共 50 条
  • [1] An Efficient Intelligent Intrusion Detection System for Internet of Things
    Abdaljabar, Zainab Hussam
    Ucan, Osman Nuri
    Alheeti, Khattab M. Ali
    2021 14TH INTERNATIONAL CONFERENCE ON DEVELOPMENTS IN ESYSTEMS ENGINEERING (DESE), 2021, : 481 - 486
  • [2] A two stage lightweight approach for intrusion detection in Internet of Things
    Li, Zeyu
    Yao, Wenbin
    EXPERT SYSTEMS WITH APPLICATIONS, 2024, 257
  • [3] A two-stage hybrid classification technique for network intrusion detection system
    Jamal Hussain
    Samuel Lalmuanawma
    Lalrinfela Chhakchhuak
    International Journal of Computational Intelligence Systems, 2016, 9 : 863 - 875
  • [4] A two-stage hybrid classification technique for network intrusion detection system
    Hussain, Jamal
    Lalmuanawma, Samuel
    Chhakchhuak, Lalrinfela
    INTERNATIONAL JOURNAL OF COMPUTATIONAL INTELLIGENCE SYSTEMS, 2016, 9 (05) : 863 - 875
  • [5] A Novel Two-Stage Deep Learning Model for Efficient Network Intrusion Detection
    Khan, Farrukh Aslam
    Gumaei, Abdu
    Derhab, Abdelouahid
    Hussain, Amir
    IEEE ACCESS, 2019, 7 : 30373 - 30385
  • [6] Efficient Intrusion Detection System for SDN Orchestrated Internet of Things
    Zeleke, Esubalew M.
    Melaku, Henock M.
    Mengistu, Fikreselam G.
    JOURNAL OF COMPUTER NETWORKS AND COMMUNICATIONS, 2021, 2021
  • [7] A Two-Stage Classifier Approach for Network Intrusion Detection
    Zong, Wei
    Chow, Yang-Wai
    Susilo, Willy
    INFORMATION SECURITY PRACTICE AND EXPERIENCE (ISPEC 2018), 2018, 11125 : 329 - 340
  • [8] Enhanced Network Intrusion Detection System Protocol for Internet of Things
    Mbarek, Bacem
    Ge, Mouzhi
    Pitner, Tomas
    PROCEEDINGS OF THE 35TH ANNUAL ACM SYMPOSIUM ON APPLIED COMPUTING (SAC'20), 2020, : 1156 - 1163
  • [9] A novel adaptive network intrusion detection system for internet of things
    Aravamudhan, Parthiban
    Kanimozhi, K.
    PLOS ONE, 2023, 18 (04):
  • [10] A Novel Intrusion Detection System for Internet of Things Network Security
    Bediya, Arun Kumar
    Kumar, Rajendra
    JOURNAL OF INFORMATION TECHNOLOGY RESEARCH, 2021, 14 (03) : 20 - 37