BPSO-AHDL-IDS: Binary Particle Swarm Optimization-Based Automated Hybrid Deep Learning Model for Intrusion Detection of Internet of Things
Kang‐Di Lu, Yao-Wei Yang, Guo‐Qiang Zeng, Chen Peng, Guanggang Geng, Jian Weng
Abstract
The pervasive adoption of Internet-of-Things (IoT) systems has exposed critical vulnerabilities in cyber-security frameworks due to their decentralized deployment in unattended environments. While deep learning-based intrusion detection systems (IDSs) offer promising solutions, the design of hyper-parameters and neural architectures in existing models imposes prohibitive computational costs and expert dependency. To address these limitations, this work proposes an innovative automated hybrid deep learning method for IDS by employing a binary particle swarm optimization (BPSO) algorithm called BPSO-AHDL-IDS to effectively address the intrusion detection tasks of IoT. In BPSO-AHDL-IDS, the combination of convolutional neural network and recurrent neural network is considered as the hybrid deep learning model to extract features of the IoT dataset for accurate detection of intrusions. First, an efficient binary encoding mechanism is developed to describe the hyper-parameters and neural architectures of the hybrid deep learning model. Then, an efficient BPSO-based evolutionary operation is introduced to evolve the hyper-parameters and neural architectures to discover the optimized hybrid deep learning model. The performance of the proposed BPSO-AHDL-IDS method is testified by employing four datasets gathered from different IoT scenarios. It achieves accuracy of 0.9832, 0.9959, and 0.9897, precision of 0.9700, 0.9788, and 0.9843, recall of 0.9724, 0.9822, and 0.965, and <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">F</i><sub xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">1</sub>-score of 0.9712, 0.9804, and 0.9744 on Bot-IoT, ToN-IoT, and Gas Pipeline datasets, respectively. On SWaT dataset, it achieves a precision of 0.9962, a recall of 0.9969, and an <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">F</i><sub xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">1</sub>-score of 0.9965, respectively. The experimental results show the superiority of the proposed BPSO-AHDL-IDS method to machine learning methods, state-of-the-art manually designed and automated deep learning-based IDSs in terms of <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">accuracy, precision, recall</i>, and <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">F</i><sub xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">1</sub>-<italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">score</i>.