Exploring optimal set of features in machine learning for improving IoT multilayer security

The growing use of Internet of Things (IoT) systems in industry and healthcare has raised serious concerns about their security because IoT-based devices are highly vulnerable to multilayer attacks. Alongside cross-layer interactions, machine learning methods are used for detecting IoT multilayer attacks. However, there is a lack of research findings to explore the optimal set of feature conditions in the machine learning process for detecting multilayer IoT attacks. In this paper, we have incorporated several feature selection methods and hyperparameter tuning of classification algorithms to optimize the overall process. The paper also presents a detailed strategy consisting of data collection, pre-processing, feature selection, dataset splitting, and binary classification. A range of feature selection techniques such as mutual information, information gain, decision tree entropy, correlation, chi-square, and principal component analysis (PCA) is implemented to identify the most significant features. The performance of the classification models is evaluated using different feature sets with standard (70:30, train: test) dataset-splitting scenarios. The results demonstrate that the information gain feature selection method with the highest 31 score features is effective in improving the accuracy of machine learning models in the field of multilayer attack detection in IoT networks. The Artificial Neural Network (ANN) model, which is a powerful deep-learning model, achieved the highest accuracy of 98.88%. The Decision Tree model and the Naïve Bayes model performed lower, however, they may still be useful for certain applications.

[1] B. Al Sukhni et al, "Investigating the security issues of multi-layer IoT attacks using machine learning techniques," in 2022 Human-Centered Cognitive Systems (HCCS), 2022.
[2] S. ur Rehman et al, "DIDDOS: An approach for detection and identification of Distributed Denial of Service (DDoS) cyberattacks using Gated Recurrent Units (GRU)," Future Generation Comput. Syst., vol. 118, pp. 453-466, 2021.
[3] I. Cvitić et al, "Boosting-based DDoS detection in internet of things systems," IEEE Internet of Things Journal, vol. 9, (3), pp. 2109-2123, 2021.
[4] D. Bansal, S. Sofat and P. Kumar, "Distributed cross layer approach for detecting multilayer attacks in wireless multi-hop networks," in 2011 IEEE Symposium on Computers & Informatics, 2011, .
[5] S. Sodagudi and D. K. R. Rao, "Behavior based Anomaly detection technique to identify Multilayer attacks," IJARCSMS, May, 2014.
[6] B. Li et al, "Artificial immunity based distributed and fast anomaly detection for Industrial Internet of Things," Future Generation Comput. Syst., 2023. Available: https://www.sciencedirect.com/science/article/pii/S0167739X23002327. DOI: 10.1016/j.future.2023.06.011.
[7] V. V. Mahale, N. P. Pareek and V. U. Uttarwar, "Alleviation of DDoS attack using advance technique," in 2017 International Conference on Innovative Mechanisms for Industry Applications (ICIMIA), 2017, .
[8] A. O. Sangodoyin et al, "Detection and classification of ddos flooding attacks on software-defined networks: a case study for the application of machine learning," IEEE Access, vol. 9, pp. 122495-122508, 2021.
[9] M. Shafiq et al, "IoT malicious traffic identification using wrapper-based feature selection mechanisms," Comput. Secur., vol. 94, pp. 101863, 2020.
[10] S. Egea et al, "Intelligent IoT traffic classification using novel search strategy for fast-based-correlation feature selection in industrial environments," IEEE Internet of Things Journal, vol. 5, (3), pp. 1616-1624, 2017.
[11] P. Nimbalkar and D. Kshirsagar, "Feature selection for intrusion detection system in Internet-of-Things (IoT)," ICT Express, vol. 7, (2), pp. 177-181, 2021.
[12] Y. Chen et al, "Design and implementation of IoT DDoS attacks detection system based on machine learning," in 2020 European Conference on Networks and Communications (EuCNC), 2020, .
[13] J. Su, S. He and Y. Wu, "Features selection and prediction for IoT attacks," High-Confidence Computing, vol. 2, (2), pp. 100047, 2022.
[14] K. Albulayhi et al, "IoT intrusion detection using machine learning with a novel high performing feature selection method," Applied Sciences, vol. 12, (10), pp. 5015, 2022.
[15] B. Al Sukhni et al, "Machine learning-based solutions for securing IoT systems against multilayer attacks," in 3rd International Conference on Communication, Networks and Computing, 2022, in press.
[16] M. A. Ferrag et al, "Edge-IIoTset: A new comprehensive realistic cyber security dataset of IoT and IIoT applications for centralized and federated learning," IEEE Access, vol. 10, pp. 40281-40306, 2022.