GSFI_SMOTE: a hybrid multiclass classifier for minority attack detection in internet of things network. (19th November 2021)

• Record Type: Journal Article
• Authors: Singh, Geeta; Khare, Neelu
• Is Part Of: International journal of ad hoc and ubiquitous computing. Volume 38:Number 1/3(2021)
• Page Start: 45
• Page End: 61
• Publication Date: 2021-11-19
• Subjects: security -- internet of things -- IoT -- network monitoring -- attack detection -- anomaly -- machine learning -- random forest -- feature importance -- oversampling -- parameter tuning; Ubiquitous computing -- Periodicals; Embedded computer systems -- Periodicals; Electronic data processing -- Distributed processing -- Periodicals; Wireless communication systems -- Periodicals; Computer architecture -- Periodicals; 004.2
• Languages: English
• ISSNs: 1743-8225

Abstract

The internet of things (IoT) network is prone to several cyber-attacks, due to many obligations of IoT devices. Minority attack detection in the IoT network is a challenge. This paper proposed three multiclassifier models to address this challenge at different IoT layers. Random forest (RF) classifier is the main component in proposed models. RF hyperparameters are tuned with grid-search cross-validation (GSCV) to build an initial GS model that achieves a 100% normal traffic detection rate. It can efficiently separate normal and anomalous traffic at the IoT network layer. GS is extended with a feature importance (FI)-based feature reduction technique and the synthetic minority oversampling technique (SMOTE) successively to realise GSFI and GSFI_SMOTE models that achieve better minority attack detection rates and applicable to the resource-limited fog/edge infrastructure, and the critical IoT infrastructure, respectively. GSFI_SMOTE outperforms the existing methods. The UNSW-NB15 is used as a use case for experimenting with proposed models.