Stacked recurrent neural network for botnet detection in smart homes. (June 2021)

• Record Type: Journal Article
• Authors: Popoola, Segun I.; Adebisi, Bamidele; Hammoudeh, Mohammad; Gacanin, Haris; Gui, Guan
• Is Part Of: Computers & electrical engineering. Volume 92(2021)
• Publication Date: 2021-06
• Subjects: Internet of Things -- Botnet detection -- Network traffic -- Deep learning -- Recurrent neural network -- Smart home; Computer engineering -- Periodicals; Electrical engineering -- Periodicals; Electrical engineering -- Data processing -- Periodicals; Ordinateurs -- Conception et construction -- Périodiques; Électrotechnique -- Périodiques; Électrotechnique -- Informatique -- Périodiques; Computer engineering; Electrical engineering; Electrical engineering -- Data processing; Periodicals; Electronic journals; 621.302854
• DOI: 10.1016/j.compeleceng.2021.107039
• Languages: English
• ISSNs: 0045-7906

Abstract

Abstract: Internet of Things (IoT) devices in Smart Home Network (SHN) are highly vulnerable to complex botnet attacks. In this paper, we investigate the effectiveness of Recurrent Neural Network (RNN) to correctly classify network traffic samples in the minority classes of highly imbalanced network traffic data. Multiple layers of RNN are stacked to learn the hierarchical representations of highly imbalanced network traffic data with different levels of abstraction. We evaluate the performance of Stacked RNN (SRNN) model with Bot-IoT dataset. Results show that SRNN outperformed RNN in all classification scenarios. Specifically, SRNN model learned the discriminating features of highly imbalanced network traffic samples in the training set with better representations than RNN model. Also, SRNN model is more robust and it demonstrated better capability to effectively handle over-fitting problem than RNN model. Furthermore, SRNN model achieved better generalization ability in detecting network traffic samples of the minority classes. Graphical abstract: Highlights: Multiple RNN are stacked to detect botnet attacks in smart homes. Performance of RNN and SRNN is evaluated with Bot-IoT dataset. Binary and multi-class classification scenarios are considered. SRNN outperformed RNN and state-of-the-art models in all scenarios.