Cyberatttack Detection and Classification in IIoT systems using XGBoost and Gaussian Naïve Bayes: A Comparative Study
Received: 27 April 2024 | Revised: 11 May 2024 | Accepted: 20 May 2024 | Online: 2 August 2024
Corresponding author: Mordi Alenazi
Abstract
The Industrial Internet of Things (IIoT) is experiencing rapid expansion, forming a vast network of interconnected devices, sensors, and machines that generate large volumes of data. In the context of Industry 5.0, ensuring the accuracy and reliability of this data is essential. This paper addresses the challenges of detecting and classifying cyberattacks within the IIoT by employing advanced analytical techniques. Specifically, we explore the application of Machine Learning (ML) algorithms, focusing on the comparison between the XGBoost and Naïve Bayes models. Our study uses the KDD-99 and NSL KDD datasets to evaluate the performance of these models in terms of accuracy, precision, recall, and F1 score. The results demonstrate that the XGBoost model significantly outperforms the Naïve Bayes model across all metrics, achieving an accuracy of 99%. This study contributes to the improvement of intrusion detection and classification of cyberattacks in IIoT environments.
Keywords:
cyberattacks in IIoT, XGBoost, Naïve BayesDownloads
References
S. Pal and Z. Jadidi, "Analysis of Security Issues and Countermeasures for the Industrial Internet of Things," Applied Sciences, vol. 11, no. 20, Jan. 2021, Art. no. 9393.
S. F. Tan and A. Samsudin, "Recent Technologies, Security Countermeasure and Ongoing Challenges of Industrial Internet of Things (IIoT): A Survey," Sensors, vol. 21, no. 19, Jan. 2021, Art. no. 6647.
A. J. G. de Azambuja, C. Plesker, K. Schützer, R. Anderl, B. Schleich, and V. R. Almeida, "Artificial Intelligence-Based Cyber Security in the Context of Industry 4.0—A Survey," Electronics, vol. 12, no. 8, Jan. 2023, Art. no. 1920.
S. H. Javed, M. B. Ahmad, M. Asif, S. H. Almotiri, K. Masood, and M. A. A. Ghamdi, "An Intelligent System to Detect Advanced Persistent Threats in Industrial Internet of Things (I-IoT)," Electronics, vol. 11, no. 5, Jan. 2022, Art. no. 742.
T. N. I. Alrumaih, M. J. F. Alenazi, N. A. AlSowaygh, A. A. Humayed, and I. A. Alablani, "Cyber resilience in industrial networks: A state of the art, challenges, and future directions," Journal of King Saud University - Computer and Information Sciences, vol. 35, no. 9, Oct. 2023, Art. no. 101781.
A.-A. Bouramdane, "Cyberattacks in Smart Grids: Challenges and Solving the Multi-Criteria Decision-Making for Cybersecurity Options, Including Ones That Incorporate Artificial Intelligence, Using an Analytical Hierarchy Process," Journal of Cybersecurity and Privacy, vol. 3, no. 4, pp. 662–705, Dec. 2023.
A. Salam, F. Ullah, F. Amin, and M. Abrar, "Deep Learning Techniques for Web-Based Attack Detection in Industry 5.0: A Novel Approach," Technologies, vol. 11, no. 4, Aug. 2023, Art. no. 107.
M. Ahsan, K. E. Nygard, R. Gomes, M. M. Chowdhury, N. Rifat, and J. F. Connolly, "Cybersecurity Threats and Their Mitigation Approaches Using Machine Learning—A Review," Journal of Cybersecurity and Privacy, vol. 2, no. 3, pp. 527–555, Sep. 2022.
M. A. Ferrag, O. Friha, L. Maglaras, H. Janicke, and L. Shu, "Federated Deep Learning for Cyber Security in the Internet of Things: Concepts, Applications, and Experimental Analysis," IEEE Access, vol. 9, pp. 138509–138542, 2021.
I. H. Sarker, "Deep Cybersecurity: A Comprehensive Overview from Neural Network and Deep Learning Perspective," SN Computer Science, vol. 2, no. 3, Mar. 2021, Art. no. 154.
J. Zhang, L. Pan, Q.-L. Han, C. Chen, S. Wen, and Y. Xiang, "Deep Learning Based Attack Detection for Cyber-Physical System Cybersecurity: A Survey," IEEE/CAA Journal of Automatica Sinica, vol. 9, no. 3, pp. 377–391, Mar. 2022.
M. A. Ferrag, L. Maglaras, S. Moschoyiannis, and H. Janicke, "Deep learning for cyber security intrusion detection: Approaches, datasets, and comparative study," Journal of Information Security and Applications, vol. 50, Feb. 2020, Art. no. 102419.
A. G. Putrada, N. Alamsyah, S. F. Pane, and M. N. Fauzan, "XGBoost for IDS on WSN Cyber Attacks with Imbalanced Data," in International Symposium on Electronics and Smart Devices, Bandung, Indonesia, Nov. 2022, pp. 1–7.
J. L. Leevy, J. Hancock, R. Zuech, and T. M. Khoshgoftaar, "Detecting cybersecurity attacks across different network features and learners," Journal of Big Data, vol. 8, no. 1, Feb. 2021, Art. no. 38.
R. Alenezi and S. A. Ludwig, "Explainability of Cybersecurity Threats Data Using SHAP," in Symposium Series on Computational Intelligence, Orlando, FL, USA, Dec. 2021, pp. 1–10.
G. Abdiyeva-Aliyeva, J. Aliyev, and U. Sadigov, "Application of classification algorithms of Machine learning in cybersecurity," Procedia Computer Science, vol. 215, pp. 909–919, Jan. 2022.
N. A. Alsharif, S. Mishra, and M. Alshehri, "IDS in IoT using Machine Learning and Blockchain," Engineering, Technology & Applied Science Research, vol. 13, no. 4, pp. 11197–11203, Aug. 2023.
K. Aldriwish, "A Deep Learning Approach for Malware and Software Piracy Threat Detection," Engineering, Technology & Applied Science Research, vol. 11, no. 6, pp. 7757–7762, Dec. 2021.
R. Alsulami, B. Alqarni, R. Alshomrani, F. Mashat, and T. Gazdar, "IoT Protocol-Enabled IDS based on Machine Learning," Engineering, Technology & Applied Science Research, vol. 13, no. 6, pp. 12373–12380, Dec. 2023.
A. B. Garcia, R. F. Babiceanu, and R. Seker, "Artificial Intelligence and Machine Learning Approaches For Aviation Cybersecurity: An Overview," in Integrated Communications Navigation and Surveillance Conference, Dulles, VA, USA, Apr. 2021, pp. 1–8.
A. Sentuna, A. Alsadoon, P. W. C. Prasad, M. Saadeh, and O. H. Alsadoon, "A Novel Enhanced Naïve Bayes Posterior Probability (ENBPP) Using Machine Learning: Cyber Threat Analysis," Neural Processing Letters, vol. 53, no. 1, pp. 177–209, Feb. 2021.
S. Ismail and H. Reza, "Evaluation of Naïve Bayesian Algorithms for Cyber-Attacks Detection in Wireless Sensor Networks," in IEEE World AI IoT Congress, Seattle, WA, USA, Jun. 2022, pp. 283–289.
O. Illiashenko, V. Kharchenko, I. Babeshko, H. Fesenko, and F. Di Giandomenico, "Security-Informed Safety Analysis of Autonomous Transport Systems Considering AI-Powered Cyberattacks and Protection," Entropy, vol. 25, no. 8, Aug. 2023, Art. no. 1123.
"SIGKDD : KDD Cup 1999 : Computer network intrusion detection." https://www.kdd.org/kdd-cup/view/kdd-cup-1999/Dat.
"NSL-KDD." https://www.kaggle.com/datasets/hassan06/nslkdd.
M. G. Raj and S. K. Pani, "Intrusion Detection System using Long Short Term Memory Classification, Artificial Raindrop Algorithm and Harmony Search Algorithm," International Journal of Advanced Computer Science and Applications, vol. 13, no. 12, pp. 95–103, 2022.
Downloads
How to Cite
License
Copyright (c) 2024 Mordi Alenazi, Shailendra Mishra
This work is licensed under a Creative Commons Attribution 4.0 International License.
Authors who publish with this journal agree to the following terms:
- Authors retain the copyright and grant the journal the right of first publication with the work simultaneously licensed under a Creative Commons Attribution License that allows others to share the work with an acknowledgement of the work's authorship and initial publication in this journal.
- Authors are able to enter into separate, additional contractual arrangements for the non-exclusive distribution of the journal's published version of the work (e.g., post it to an institutional repository or publish it in a book), with an acknowledgement of its initial publication in this journal.
- Authors are permitted and encouraged to post their work online (e.g., in institutional repositories or on their website) after its publication in ETASR with an acknowledgement of its initial publication in this journal.
