A Comparative Analysis of Machine Learning Techniques for IoT Intrusion Detection
arXiv:2111.13149 · doi:10.1007/978-3-031-08147-7_13
Abstract
The digital transformation faces tremendous security challenges. In particular, the growing number of cyber-attacks targeting Internet of Things (IoT) systems restates the need for a reliable detection of malicious network activity. This paper presents a comparative analysis of supervised, unsupervised and reinforcement learning techniques on nine malware captures of the IoT-23 dataset, considering both binary and multi-class classification scenarios. The developed models consisted of Support Vector Machine (SVM), Extreme Gradient Boosting (XGBoost), Light Gradient Boosting Machine (LightGBM), Isolation Forest (iForest), Local Outlier Factor (LOF) and a Deep Reinforcement Learning (DRL) model based on a Double Deep Q-Network (DDQN), adapted to the intrusion detection context. The most reliable performance was achieved by LightGBM. Nonetheless, iForest displayed good anomaly detection results and the DRL model demonstrated the possible benefits of employing this methodology to continuously improve the detection. Overall, the obtained results indicate that the analyzed techniques are well suited for IoT intrusion detection.
16 pages, 12 tables, 4 figures, FPS 2021 conference
References in corpus (3)
Cited by in corpus (5)
- Towards Adversarial Realism and Robust Learning for IoT Intrusion Detection and Classification
- Reliable Feature Selection for Adversarially Robust Cyber-Attack Detection
- An Adversarial Robustness Benchmark for Enterprise Network Intrusion Detection
- Is there a Trojan! : Literature survey and critical evaluation of the latest ML based modern intrusion detection systems in IoT environments
- Adversarial Robustness and Feature Impact Analysis for Driver Drowsiness Detection