Enhancing IoT Security: A Novel Feature Engineering Approach for ML-Based Intrusion Detection Systems

TL;DR

This paper introduces a hybrid quantum-inspired algorithm to improve feature selection in ML-based IoT intrusion detection systems, enhancing accuracy and reducing costs in edge environments.

Contribution

It proposes a novel hybrid Binary Quantum-inspired Artificial Bee Colony and Genetic Programming method for feature engineering in IoT IDS, addressing noise and redundancy issues.

Findings

Improved detection accuracy on NSL-KDD, UNSW-NB15, and BoT-IoT datasets.

Reduced computational costs through effective feature selection.

Enhanced edge-level IoT security performance.

Abstract

The integration of Internet of Things (IoT) applications in our daily lives has led to a surge in data traffic, posing significant security challenges. IoT applications using cloud and edge computing are at higher risk of cyberattacks because of the expanded attack surface from distributed edge and cloud services, the vulnerability of IoT devices, and challenges in managing security across interconnected systems leading to oversights. This led to the rise of ML-based solutions for intrusion detection systems (IDSs), which have proven effective in enhancing network security and defending against diverse threats. However, ML-based IDS in IoT systems encounters challenges, particularly from noisy, redundant, and irrelevant features in varied IoT datasets, potentially impacting its performance. Therefore, reducing such features becomes crucial to enhance system performance and minimize computational costs. This paper focuses on improving the effectiveness of ML-based IDS at the edge level by introducing a novel method to find a balanced trade-off between cost and accuracy through the creation of informative features in a two-tier edge-user IoT environment. A hybrid Binary Quantum-inspired Artificial Bee Colony and Genetic Programming algorithm is utilized for this purpose. Three IoT intrusion detection datasets, namely NSL-KDD, UNSW-NB15, and BoT-IoT, are used for the evaluation of the proposed approach.