A Lightweight Model for DDoS Attack Detection Using Machine Learning Techniques
The study in this paper characterizes lightweight IoT networks as being established by devices with few computer resources, such as reduced battery life, processing power, memory, and, more critically, minimal security and protection, which are easily vulnerable to DDoS attacks and propagating malwa...
| Main Authors: | , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
MDPI AG
2023-09-01
|
| Series: | Applied Sciences |
| Subjects: | |
| Online Access: | https://www.mdpi.com/2076-3417/13/17/9937 |
| _version_ | 1827728249585664000 |
|---|---|
| author | Sapna Sadhwani Baranidharan Manibalan Raja Muthalagu Pranav Pawar |
| author_facet | Sapna Sadhwani Baranidharan Manibalan Raja Muthalagu Pranav Pawar |
| author_sort | Sapna Sadhwani |
| collection | DOAJ |
| description | The study in this paper characterizes lightweight IoT networks as being established by devices with few computer resources, such as reduced battery life, processing power, memory, and, more critically, minimal security and protection, which are easily vulnerable to DDoS attacks and propagating malware. A DDoS attack detection model is crucial for attacks in various industries, ensuring the availability and reliability of their networks and systems. The model distinguishes between legitimate and malicious traffic by analyzing network traffic patterns and identifying anomalies. This safeguards critical infrastructure, preserves business continuity, and protects the user experience, minimizing the impact of DDoS attacks. Numerous scholars have studied the notion that protecting lightweight IoT networks essentially requires improving intrusion detection systems. This research is valuable, as it follows a tailored pre-processing methodology specific to IoT network challenges, addressing a pressing need in cybersecurity by focusing on a growing concern related to IoT devices and DDoS attacks, enhancing the security of essential network systems in various industries by effectively detecting DDoS attacks, and developing a lightweight intrusion detection system that aligns with the limited resources of IoT devices. This manuscript proposes a compact and lightweight intrusion detection system that blends machine learning classifiers with a fresh approach to data pre-processing. The handling of missing values, data standardization using Standard Scalar, feature selection using ExtraTreeClassifier wherein only the 15 best features are extracted, and anomaly detection using a classifier are performed. The network dataset of TON-IOT and BOT-IOT datasets is used for experiments, specifically binary classifications and multiple-class classification for the experiment with DDoS and all attacks, respectively. There is an imbalance between the TON-IOT and BOT-IOT attack classes. In trials using the TON-IOT and BOT-IOT datasets, the classes were balanced using several iterations of the SMOTE approach. This research provides a number of classifier types, namely logistic regression, random forest, naïve bayes, artificial neural network, and k nearest neighbor algorithms, which are used to build a lightweight intrusion detection system that is ideally suited for protecting against DDoS attacks in IoT networks. The time taken to train and predict the DDoS attacks is also implemented. Random forest performed well under TON-IOT and naïve bayes performed well under BOT-IOT under binary and multiple-class classification, achieving an accuracy of 100% with less training and prediction time. |
| first_indexed | 2024-03-10T23:26:43Z |
| format | Article |
| id | doaj.art-63f3a3aec7b0473e807e490f324eae99 |
| institution | Directory Open Access Journal |
| issn | 2076-3417 |
| language | English |
| last_indexed | 2024-03-10T23:26:43Z |
| publishDate | 2023-09-01 |
| publisher | MDPI AG |
| record_format | Article |
| series | Applied Sciences |
| spelling | doaj.art-63f3a3aec7b0473e807e490f324eae992023-11-19T07:53:49ZengMDPI AGApplied Sciences2076-34172023-09-011317993710.3390/app13179937A Lightweight Model for DDoS Attack Detection Using Machine Learning TechniquesSapna Sadhwani0Baranidharan Manibalan1Raja Muthalagu2Pranav Pawar3Department of Computer Science, Birla Institute of Technology and Science Pilani, Dubai Campus, Dubai International Academic City, Dubai 345055, United Arab EmiratesDepartment of Computer Science, Birla Institute of Technology and Science Pilani, Dubai Campus, Dubai International Academic City, Dubai 345055, United Arab EmiratesDepartment of Computer Science, Birla Institute of Technology and Science Pilani, Dubai Campus, Dubai International Academic City, Dubai 345055, United Arab EmiratesDepartment of Computer Science, Birla Institute of Technology and Science Pilani, Dubai Campus, Dubai International Academic City, Dubai 345055, United Arab EmiratesThe study in this paper characterizes lightweight IoT networks as being established by devices with few computer resources, such as reduced battery life, processing power, memory, and, more critically, minimal security and protection, which are easily vulnerable to DDoS attacks and propagating malware. A DDoS attack detection model is crucial for attacks in various industries, ensuring the availability and reliability of their networks and systems. The model distinguishes between legitimate and malicious traffic by analyzing network traffic patterns and identifying anomalies. This safeguards critical infrastructure, preserves business continuity, and protects the user experience, minimizing the impact of DDoS attacks. Numerous scholars have studied the notion that protecting lightweight IoT networks essentially requires improving intrusion detection systems. This research is valuable, as it follows a tailored pre-processing methodology specific to IoT network challenges, addressing a pressing need in cybersecurity by focusing on a growing concern related to IoT devices and DDoS attacks, enhancing the security of essential network systems in various industries by effectively detecting DDoS attacks, and developing a lightweight intrusion detection system that aligns with the limited resources of IoT devices. This manuscript proposes a compact and lightweight intrusion detection system that blends machine learning classifiers with a fresh approach to data pre-processing. The handling of missing values, data standardization using Standard Scalar, feature selection using ExtraTreeClassifier wherein only the 15 best features are extracted, and anomaly detection using a classifier are performed. The network dataset of TON-IOT and BOT-IOT datasets is used for experiments, specifically binary classifications and multiple-class classification for the experiment with DDoS and all attacks, respectively. There is an imbalance between the TON-IOT and BOT-IOT attack classes. In trials using the TON-IOT and BOT-IOT datasets, the classes were balanced using several iterations of the SMOTE approach. This research provides a number of classifier types, namely logistic regression, random forest, naïve bayes, artificial neural network, and k nearest neighbor algorithms, which are used to build a lightweight intrusion detection system that is ideally suited for protecting against DDoS attacks in IoT networks. The time taken to train and predict the DDoS attacks is also implemented. Random forest performed well under TON-IOT and naïve bayes performed well under BOT-IOT under binary and multiple-class classification, achieving an accuracy of 100% with less training and prediction time.https://www.mdpi.com/2076-3417/13/17/9937machine learningBOT-IOTTON-IOTDDoSSMOTEIoT |
| spellingShingle | Sapna Sadhwani Baranidharan Manibalan Raja Muthalagu Pranav Pawar A Lightweight Model for DDoS Attack Detection Using Machine Learning Techniques Applied Sciences machine learning BOT-IOT TON-IOT DDoS SMOTE IoT |
| title | A Lightweight Model for DDoS Attack Detection Using Machine Learning Techniques |
| title_full | A Lightweight Model for DDoS Attack Detection Using Machine Learning Techniques |
| title_fullStr | A Lightweight Model for DDoS Attack Detection Using Machine Learning Techniques |
| title_full_unstemmed | A Lightweight Model for DDoS Attack Detection Using Machine Learning Techniques |
| title_short | A Lightweight Model for DDoS Attack Detection Using Machine Learning Techniques |
| title_sort | lightweight model for ddos attack detection using machine learning techniques |
| topic | machine learning BOT-IOT TON-IOT DDoS SMOTE IoT |
| url | https://www.mdpi.com/2076-3417/13/17/9937 |
| work_keys_str_mv | AT sapnasadhwani alightweightmodelforddosattackdetectionusingmachinelearningtechniques AT baranidharanmanibalan alightweightmodelforddosattackdetectionusingmachinelearningtechniques AT rajamuthalagu alightweightmodelforddosattackdetectionusingmachinelearningtechniques AT pranavpawar alightweightmodelforddosattackdetectionusingmachinelearningtechniques AT sapnasadhwani lightweightmodelforddosattackdetectionusingmachinelearningtechniques AT baranidharanmanibalan lightweightmodelforddosattackdetectionusingmachinelearningtechniques AT rajamuthalagu lightweightmodelforddosattackdetectionusingmachinelearningtechniques AT pranavpawar lightweightmodelforddosattackdetectionusingmachinelearningtechniques |