Two-step ensemble approach for intrusion detection and identification in IoT and fog computing environments. (March 2022)

• Record Type: Journal Article
• Authors: de Souza, Cristiano Antonio; Westphall, Carlos Becker; Machado, Renato Bobsin
• Is Part Of: Computers & electrical engineering. Volume 98(2022)
• Publication Date: 2022-03
• Subjects: Internet of things -- Fog computing -- Intrusion detection -- Intrusion identification -- Ensemble learning; Computer engineering -- Periodicals; Electrical engineering -- Periodicals; Electrical engineering -- Data processing -- Periodicals; Ordinateurs -- Conception et construction -- Périodiques; Électrotechnique -- Périodiques; Électrotechnique -- Informatique -- Périodiques; Computer engineering; Electrical engineering; Electrical engineering -- Data processing; Periodicals; Electronic journals; 621.302854
• DOI: 10.1016/j.compeleceng.2022.107694
• Languages: English
• ISSNs: 0045-7906

Abstract

Abstract: Due to Internet of Things devices resource limitations, security often does not receive enough attention. Intrusion detection approaches are important for identifying attacks and taking appropriate countermeasures for each specific threat. This work presents a two-step approach for intrusion detection and identification. The first step performs a traffic analysis with an Extra Tree binary classifier. Events detected as intrusive are analyzed in the second stage by an ensemble approach consisting of Extra Tree, Random Forest, and Deep Neural Network. An extensive evaluation was performed with the Bot-IoT, IoTID20, NSL-KDD, and CICIDS2018 intrusion datasets. The experiments demonstrated that the proposed approach could achieve similar or superior performance to other machine learning techniques and state-of-the-art approaches in all databases, demonstrating the robustness of the proposed approach. Graphical abstract: