A resource efficient IoT intrusion detection model using hybrid feature selection for edge computing

Abstract

The Internet of Things (IoT) devices have grown at a very fast rate, which has led to escalated security threats. Most of the current IoT oriented lightweight intrusion detection systems do not maintain a high rate of detection performance with heterogeneous and imbalanced traffic, or the expense of increased computation and memory occurs with high detection rate. To resolve this problem, this paper presents a resource efficient IoT attack detection framework called BGL-RID (Boruta-Greedy LightGBM Resource-Efficient IoT Detection). The framework applies a hybrid feature selection pipeline that integrates both Boruta and Greedy Forward Selection (GFS) to remove unnecessary features and only include the most useful features in the pipeline. The Synthetic Minority Oversampling Technique (SMOTE) is used to deal with the issue of class imbalance. Performance is measured based on accuracy and efficiency ratio, which indicates efficiency between quality of detection and resource consumption. The performance of the proposed BGL-RID model has been tested on benchmark, edge collected and IoT specific datasets namely TONIoT, proxy-labeled Raspberry Pi, CICIDS2018, and CICIoT2023. Experimental results demonstrate strong performance across these datasets. For binary and multiclass classifications, BGL-RID attained 99.72% and 98.94% accuracy on TONIoT dataset respectively. It also attained 99.91%, 99.94%, and 98.88% accuracy on the Raspberry Pi, CICIDS2018, and the IoT-specific CICIoT2023 datasets respectively. Besides having high detection rates, the model also achieves the highest efficiency ratio across different datasets, showing that it is robust and scalable, with minimal computation and memory requirements, suggesting its potential suitability for resource-constrained IoT applications.