Mansour Lmkaiti, Ibtissam Larhlimi, Maryem Lachgar, Houda Moudni and Hicham Mouncif
Framework for Intrusion Detection in IoT Networks: Dataset Design and Machine Learning Analysis
This study explores the development of robust Intrusion Detection Systems (IDS) to enhance cybersecurity in Wireless Sensor Networks (WSNs) within the evolving Internet of Things (IoT) ecosystem. It leverages a publicly available dataset derived from UNSW-NB15, retrieved from a GitHub repository, capturing diverse network traffic attributes (dttl, swin, dwin, tcprtt, synack, ackdat), protocol-specific indicators (proto tcp, proto udp), and service-specific attributes (service dns). These features enable precise analysis of TCP/IP headers and traffic patterns, supporting multi-class classification into four categories: Analysis, Denial of Service (DoS), Exploits, and Normal. Advanced machine learning algorithms, including Random Forest, Support Vector Machines (SVM), and K-Nearest Neighbors (KNN), were applied with systematic preprocessing (including KNN-based imputation, normalization, and one-hot encoding), feature selection using Random Forest importance, and 5-fold cross-validation. The best performance was achieved by Random Forest (accuracy, precision, recall, and F1-score of 99.9877%), followed by KNN (99.9754%) and SVM (99.9630%). The study demonstrates that combining well-structured models with relevant protocol-level features and robust evaluation strategies can significantly enhance intrusion detection capabilities in IoT-based environments. It reinforces the value of using modern public datasets and interpretable algorithms for building scalable and reliable IDS solutions.
Reference:
DOI: 10.36244/ICJ.2025.2.8
Please cite this paper the following way:
Mansour Lmkaiti, Ibtissam Larhlimi, Maryem Lachgar, Houda Moudni and Hicham Mouncif "Framework for Intrusion Detection in IoT Networks: Dataset Design and Machine Learning Analysis", Infocommunications Journal, Vol. XVII, No 2, June 2025, pp. x-y., https://doi.org/10.36244/ICJ.2025.2.1
Past international events
IEEE NOMS 2022 - IEEE/IFIP Network Operations and Management Symposium
April 25-29, Budapest
https://noms2022.ieee-noms.org/
SSW11 2021 - Speech Synthesis Workshop
August 26-28, Budapest
https://ssw11.hte.hu/
IEEE NOMS 2020 - IEEE/IFIP Network Operations and Management Symposium
April 20-24, Budapest
https://noms2020.ieee-noms.org/
SDL 2017 - 18th International System Design Languages Forum Model-driven dependability engineering
October 9-11, Budapest
http://www.sdl2017.hte.hu/
ONDM 2017 - 21st International Conference on Optical Network Design and Modeling
May 15-17, Budapest
http://www.ondm2017.hte.hu
SPECOM 2016 - 18th International Conference on Speech and Computer
August 23-27, Budapest
http://www.specom2016.hte.hu/
EUSIPCO 2016 - 24th European Signal Processing Conference
29 August - 2 September, Budapest
http://www.eusipco2016.org
IEEE HPSR 2015 - 2015 IEEE 16th International Conference on High Performance Switching and Routing
July 1-4, Budapest
http://www.ieee-hpsr.org
21th European Wireless Conference
May 20-22, 2015 Budapest
http://ew2015.european-wireless.org
IEEE PerCom - IEEE International Conference on Pervasive Computing and Communications
March 24-28, 2014, Budapest, Hungary
http://www.percom.org/2014
IEEE ICC2013 - IEEE International Conference on Communications
June 9-13, 2013, Budapest, Hungary
http://www.ieee-icc.org/2013