<p>The Internet of Things (IoT) generates high-volume network traffic that is heterogeneous and highly imbalanced, creating a critical need for intrusion detection systems (IDS) that remain accurate under resource-constrained edge gateways. This study presents an optimized gradient-boosting IDS framework evaluated on the CICIoT2023 benchmark. The pipeline integrates stratified undersampling to mitigate class imbalance and gain-based feature selection to remove redundant flow attributes. We evaluate the framework across three tasks: binary detection, 8-class attack-family classification, and 34-class fine-grained classification. Across all tasks, the evaluated models achieved strong detection performance with low inference latency; specifically, XGBoost attained 99.61% accuracy and a 0.995 macro-F1 score in binary detection with 0.355 µs/sample inference time. Feature selection reduced the input space from 46 to 23 dimensions, and an ablation study showed that this reduction decreased inference latency by 30–51% and training time by 33–40% while keeping accuracy variation within ± 0.014% points. These results indicate an accuracy–efficiency trade-off suitable for real-time deployment. All datasets, code, and results are publicly available to facilitate reproducibility.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

An optimized gradient boosting framework for IoT intrusion detection: a comprehensive evaluation on the CICIoT2023 dataset

  • Salah A. Almahaqeri,
  • Mohammed Hashem Almourish,
  • Adel A. Nasser,
  • Abed Saif Ahmed Alghawli,
  • Amani A. K. Elsayed,
  • Ali N. Alhejoj

摘要

The Internet of Things (IoT) generates high-volume network traffic that is heterogeneous and highly imbalanced, creating a critical need for intrusion detection systems (IDS) that remain accurate under resource-constrained edge gateways. This study presents an optimized gradient-boosting IDS framework evaluated on the CICIoT2023 benchmark. The pipeline integrates stratified undersampling to mitigate class imbalance and gain-based feature selection to remove redundant flow attributes. We evaluate the framework across three tasks: binary detection, 8-class attack-family classification, and 34-class fine-grained classification. Across all tasks, the evaluated models achieved strong detection performance with low inference latency; specifically, XGBoost attained 99.61% accuracy and a 0.995 macro-F1 score in binary detection with 0.355 µs/sample inference time. Feature selection reduced the input space from 46 to 23 dimensions, and an ablation study showed that this reduction decreased inference latency by 30–51% and training time by 33–40% while keeping accuracy variation within ± 0.014% points. These results indicate an accuracy–efficiency trade-off suitable for real-time deployment. All datasets, code, and results are publicly available to facilitate reproducibility.