arXiv:2505.10600cs.LGcs.AI2025-05被引 7

针对物联网攻击检测中数据极度不平衡的问题,提出混合采样方法提升检测精度。

Enhancing IoT Cyber Attack Detection in the Presence of Highly Imbalanced Data

  • 采用混合采样技术缓解数据不平衡问题,增强模型对罕见攻击的识别能力。
  • 随机森林模型在测试集上达到99.61%准确率和0.9994 AUC,表现最优。
  • 适合关注物联网安全、数据不平衡场景下攻击检测的研究者与工程师。

随着物联网网络数量激增,网络风险呈指数级增长,亟需高效的入侵检测系统(IDS)应对高度不平衡的数据集。传统机器学习模型在正常数据远多于攻击数据时容易漏检。本研究使用的数据集包含94,659个正常样本和仅28个攻击样本,严重失衡。为此,提出混合采样技术以改善检测准确性。评估了随机森林、软投票、支持向量机(SVC)、K近邻(KNN)、多层感知机(MLP)和逻辑回归等多种模型。结果表明,随机森林取得最佳性能,卡帕系数达0.9903,测试准确率为0.9961,AUC为0.9994;软投票模型也表现优异,准确率0.9952,AUC达0.9997,验证了集成学习的优势。研究表明,结合混合采样与强模型及特征选择,能显著提升物联网环境下的攻击检测能力,尤其在高度不平衡数据场景中。

原文摘要 · Abstract (English)

Due to the rapid growth in the number of Internet of Things (IoT) networks, the cyber risk has increased exponentially, and therefore, we have to develop effective IDS that can work well with highly imbalanced datasets. A high rate of missed threats can be the result, as traditional machine learning models tend to struggle in identifying attacks when normal data volume is much higher than the volume of attacks. For example, the dataset used in this study reveals a strong class imbalance with 94,659 instances of the majority class and only 28 instances of the minority class, making it quite challenging to determine rare attacks accurately. The challenges presented in this research are addressed by hybrid sampling techniques designed to improve data imbalance detection accuracy in IoT domains. After applying these techniques, we evaluate the performance of several machine learning models such as Random Forest, Soft Voting, Support Vector Classifier (SVC), K-Nearest Neighbors (KNN), Multi-Layer Perceptron (MLP), and Logistic Regression with respect to the classification of cyber-attacks. The obtained results indicate that the Random Forest model achieved the best performance with a Kappa score of 0.9903, test accuracy of 0.9961, and AUC of 0.9994. Strong performance is also shown by the Soft Voting model, with an accuracy of 0.9952 and AUC of 0.9997, indicating the benefits of combining model predictions. Overall, this work demonstrates the value of hybrid sampling combined with robust model and feature selection for significantly improving IoT security against cyber-attacks, especially in highly imbalanced data environments.

物联网安全异常检测不平衡数据机器学习

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。