Machine Learning-Based IoT-Botnet Attack Detection with Sequential Architecture

Sensors

Yaokai Feng¹  Rudy Hartanto²  PaulusInsap Santosa²  YanNaung Soe³  Kouichi Sakurai³ 

[1] Department of Advanced Information Technology, Kyushu University, Fukuoka 819-0395, Japan;Department of Electrical and Information Engineering, Universitas Gadjah Mada, Yogyakarta 55281, Indonesia;Department of Informatics, Kyushu University, Fukuoka 819-0395, Japan;

关键词: IoT;    botnets;    machine learning;    IDS;    feature selection;   

DOI  :  10.3390/s20164372

来源: DOAJ

【 摘 要 】

With the rapid development and popularization of Internet of Things (IoT) devices, an increasing number of cyber-attacks are targeting such devices. It was said that most of the attacks in IoT environments are botnet-based attacks. Many security weaknesses still exist on the IoT devices because most of them have not enough memory and computational resource for robust security mechanisms. Moreover, many existing rule-based detection systems can be circumvented by attackers. In this study, we proposed a machine learning (ML)-based botnet attack detection framework with sequential detection architecture. An efficient feature selection approach is adopted to implement a lightweight detection system with a high performance. The overall detection performance achieves around 99% for the botnet attack detection using three different ML algorithms, including artificial neural network (ANN), J48 decision tree, and Naïve Bayes. The experiment result indicates that the proposed architecture can effectively detect botnet-based attacks, and also can be extended with corresponding sub-engines for new kinds of attacks.

【 授权许可】

Unknown