Hybrid Grey Wolf and Dipper Throated Optimization in Network Intrusion Detection Systems  

作　　者：Reem Alkanhel Doaa Sami Khafaga El-Sayed M.El-kenawy Abdelaziz A.Abdelhamid Abdelhameed Ibrahim Rashid Amin Mostafa Abotaleb B.M.El-den 

机构地区：[1]Department of Information Technology,College of Computer and Information Sciences,Princess Nourah bint Abdulrahman University,P.O.Box 84428,Riyadh,11671,Saudi Arabia [2]Department of Computer Sciences,College of Computer and Information Sciences,Princess Nourah bint Abdulrahman University,P.O.Box 84428,Riyadh,11671,Saudi Arabia [3]Department of Communications and Electronics,Delta Higher Institute of Engineering and Technology,Mansoura,35111,Egypt [4]Department of Computer Science,Faculty of Computer and Information Sciences,Ain Shams University,Cairo,11566,Egypt [5]Department of Computer Science,College of Computing and Information Technology,Shaqra University,11961,Saudi Arabia [6]Computer Engineering and Control Systems Department,Faculty of Engineering,Mansoura University,Mansoura,35516,Egypt [7]Department of Computer Science,University of Engineering and Technology,Taxila,Pakistan [8]Department of System Programming,South Ural State University,Chelyabinsk,454080,Russia

出　　处：《Computers, Materials & Continua》2023年第2期2695-2709,共15页计算机、材料和连续体（英文）

基　　金：Princess Nourah bint Abdulrahman University Researchers Supporting Project number(PNURSP2022R323),PrincessNourah bint Abdulrahman University,Riyadh,Saudi Arabia.

摘　　要：The Internet of Things(IoT)is a modern approach that enables connection with a wide variety of devices remotely.Due to the resource constraints and open nature of IoT nodes,the routing protocol for low power and lossy(RPL)networks may be vulnerable to several routing attacks.That’s why a network intrusion detection system(NIDS)is needed to guard against routing assaults on RPL-based IoT networks.The imbalance between the false and valid attacks in the training set degrades the performance of machine learning employed to detect network attacks.Therefore,we propose in this paper a novel approach to balance the dataset classes based on metaheuristic optimization applied to locality-sensitive hashing and synthetic minority oversampling technique(LSH-SMOTE).The proposed optimization approach is based on a new hybrid between the grey wolf and dipper throated optimization algorithms.To prove the effectiveness of the proposed approach,a set of experiments were conducted to evaluate the performance of NIDS for three cases,namely,detection without dataset balancing,detection with SMOTE balancing,and detection with the proposed optimized LSHSOMTE balancing.Experimental results showed that the proposed approach outperforms the other approaches and could boost the detection accuracy.In addition,a statistical analysis is performed to study the significance and stability of the proposed approach.The conducted experiments include seven different types of attack cases in the RPL-NIDS17 dataset.Based on the 2696 CMC,2023,vol.74,no.2 proposed approach,the achieved accuracy is(98.1%),sensitivity is(97.8%),and specificity is(98.8%).

关 键 词：Metaheuristics grey wolf optimization dipper throated optimization dataset balancing locality sensitive hashing SMOTE 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]