Anomaly detection using deep neural network for IoT architecture
The revolutionary idea of the internet of things (IoT) architecture has gained enormous popularity over the last decade, resulting in an exponential growth in the IoT networks, connected devices, and the data processed therein. Since IoT devices generate and exchange sensitive data over the traditio...
Saved in:
| Main Authors: | , , , , , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
MDPI AG, Basel, Switzerland
2021
|
| Subjects: | |
| Online Access: | https://eprints.ums.edu.my/id/eprint/42437/1/FULL%20TEXT.pdf https://eprints.ums.edu.my/id/eprint/42437/ https://doi.org/10.3390/app11157050 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| id |
my.ums.eprints.42437 |
|---|---|
| record_format |
eprints |
| spelling |
my.ums.eprints.424372024-12-30T01:48:06Z https://eprints.ums.edu.my/id/eprint/42437/ Anomaly detection using deep neural network for IoT architecture Zeeshan Ahmad Adnan Shahid Khan Kashif Nisar Iram Haider Rosilah Hassan Muhammad Reazul Haque Seleviawati Tarmizi Joel J. P. C. Rodrigues QA75.5-76.95 Electronic computers. Computer science TK7885-7895 Computer engineering. Computer hardware The revolutionary idea of the internet of things (IoT) architecture has gained enormous popularity over the last decade, resulting in an exponential growth in the IoT networks, connected devices, and the data processed therein. Since IoT devices generate and exchange sensitive data over the traditional internet, security has become a prime concern due to the generation of zero-day cyberattacks. A network-based intrusion detection system (NIDS) can provide the much-needed efficient security solution to the IoT network by protecting the network entry points through constant network traffic monitoring. Recent NIDS have a high false alarm rate (FAR) in detecting the anomalies, including the novel and zero-day anomalies. This paper proposes an efficient anomaly detection mechanism using mutual information (MI), considering a deep neural network (DNN) for an IoT network. A comparative analysis of different deep-learning models such as DNN, Convolutional Neural Network, Recurrent Neural Network, and its different variants, such as Gated Recurrent Unit and Long Short-term Memory is performed considering the IoT-Botnet 2020 dataset. Experimental results show the improvement of 0.57–2.6% in terms of the model’s accuracy, while at the same time reducing the FAR by 0.23–7.98% to show the effectiveness of the DNN-based NIDS model compared to the well-known deep learning models. It was also observed that using only the 16–35 best numerical features selected using MI instead of 80 features of the dataset result in almost negligible degradation in the model’s performance but helped in decreasing the overall model’s complexity. In addition, the overall accuracy of the DL-based models is further improved by almost 0.99–3.45% in terms of the detection accuracy considering only the top five categorical and numerical features. MDPI AG, Basel, Switzerland 2021 Article NonPeerReviewed text en https://eprints.ums.edu.my/id/eprint/42437/1/FULL%20TEXT.pdf Zeeshan Ahmad and Adnan Shahid Khan and Kashif Nisar and Iram Haider and Rosilah Hassan and Muhammad Reazul Haque and Seleviawati Tarmizi and Joel J. P. C. Rodrigues (2021) Anomaly detection using deep neural network for IoT architecture. Applied Sciences, 11. pp. 1-19. https://doi.org/10.3390/app11157050 |
| institution |
Universiti Malaysia Sabah |
| building |
UMS Library |
| collection |
Institutional Repository |
| continent |
Asia |
| country |
Malaysia |
| content_provider |
Universiti Malaysia Sabah |
| content_source |
UMS Institutional Repository |
| url_provider |
http://eprints.ums.edu.my/ |
| language |
English |
| topic |
QA75.5-76.95 Electronic computers. Computer science TK7885-7895 Computer engineering. Computer hardware |
| spellingShingle |
QA75.5-76.95 Electronic computers. Computer science TK7885-7895 Computer engineering. Computer hardware Zeeshan Ahmad Adnan Shahid Khan Kashif Nisar Iram Haider Rosilah Hassan Muhammad Reazul Haque Seleviawati Tarmizi Joel J. P. C. Rodrigues Anomaly detection using deep neural network for IoT architecture |
| description |
The revolutionary idea of the internet of things (IoT) architecture has gained enormous popularity over the last decade, resulting in an exponential growth in the IoT networks, connected devices, and the data processed therein. Since IoT devices generate and exchange sensitive data over the traditional internet, security has become a prime concern due to the generation of zero-day cyberattacks. A network-based intrusion detection system (NIDS) can provide the much-needed efficient security solution to the IoT network by protecting the network entry points through constant network traffic monitoring. Recent NIDS have a high false alarm rate (FAR) in detecting the anomalies, including the novel and zero-day anomalies. This paper proposes an efficient anomaly detection mechanism using mutual information (MI), considering a deep neural network (DNN) for an IoT network. A comparative analysis of different deep-learning models such as DNN, Convolutional Neural Network, Recurrent Neural Network, and its different variants, such as Gated Recurrent Unit and Long Short-term Memory is performed considering the IoT-Botnet 2020 dataset. Experimental results show the improvement of 0.57–2.6% in terms of the model’s accuracy, while at the same time reducing the FAR by 0.23–7.98% to show the effectiveness of the DNN-based NIDS model compared to the well-known deep learning models. It was also observed that using only the 16–35 best numerical features selected using MI instead of 80 features of the dataset result in almost negligible degradation in the model’s performance but helped in decreasing the overall model’s complexity. In addition, the overall accuracy of the DL-based models is further improved by almost 0.99–3.45% in terms of the detection accuracy considering only the top five categorical and numerical features. |
| format |
Article |
| author |
Zeeshan Ahmad Adnan Shahid Khan Kashif Nisar Iram Haider Rosilah Hassan Muhammad Reazul Haque Seleviawati Tarmizi Joel J. P. C. Rodrigues |
| author_facet |
Zeeshan Ahmad Adnan Shahid Khan Kashif Nisar Iram Haider Rosilah Hassan Muhammad Reazul Haque Seleviawati Tarmizi Joel J. P. C. Rodrigues |
| author_sort |
Zeeshan Ahmad |
| title |
Anomaly detection using deep neural network for IoT architecture |
| title_short |
Anomaly detection using deep neural network for IoT architecture |
| title_full |
Anomaly detection using deep neural network for IoT architecture |
| title_fullStr |
Anomaly detection using deep neural network for IoT architecture |
| title_full_unstemmed |
Anomaly detection using deep neural network for IoT architecture |
| title_sort |
anomaly detection using deep neural network for iot architecture |
| publisher |
MDPI AG, Basel, Switzerland |
| publishDate |
2021 |
| url |
https://eprints.ums.edu.my/id/eprint/42437/1/FULL%20TEXT.pdf https://eprints.ums.edu.my/id/eprint/42437/ https://doi.org/10.3390/app11157050 |
| _version_ |
1819911299349348352 |
| score |
13.223943 |