An Intrusion Detection System Based on HiTar-2024 Dataset Generation from LOG Files for Smart Industrial Internet-of-Things Environment  

作　　者：Tarak Dhaouadi Hichem Mrabet Adeeb Alhomoud Abderrazak Jemai 

机构地区：[1]SER’Com Laboratory,Tunisia Polytechnic School,University of Carthage,Tunis,2078,Tunisia [2]Computer Sciences Department,Faculty of Sciences of Tunis,University of Tunis El Manar,Tunis,1001,Tunisia [3]Department of Science,College of Science and Theoretical Studies,Saudi Electronic University,Riyadh,11673,Saudi Arabia [4]Computer Sciences Department,INSAT,University of Carthage,Tunis,1080,Tunisia

出　　处：《Computers, Materials & Continua》2025年第3期4535-4554,共20页计算机、材料和连续体(英文)

摘　　要：The increasing adoption of Industrial Internet of Things(IIoT)systems in smart manufacturing is leading to raise cyberattack numbers and pressing the requirement for intrusion detection systems(IDS)to be effective.However,existing datasets for IDS training often lack relevance to modern IIoT environments,limiting their applicability for research and development.To address the latter gap,this paper introduces the HiTar-2024 dataset specifically designed for IIoT systems.As a consequence,that can be used by an IDS to detect imminent threats.Likewise,HiTar-2024 was generated using the AREZZO simulator,which replicates realistic smart manufacturing scenarios.The generated dataset includes five distinct classes:Normal,Probing,Remote to Local(R2L),User to Root(U2R),and Denial of Service(DoS).Furthermore,comprehensive experiments with popular Machine Learning(ML)models using various classifiers,including BayesNet,Logistic,IBK,Multiclass,PART,and J48 demonstrate high accuracy,precision,recall,and F1-scores,exceeding 0.99 across all ML metrics.The latter result is reached thanks to the rigorous applied process to achieve this quite good result,including data pre-processing,features extraction,fixing the class imbalance problem,and using a test option for model robustness.This comprehensive approach emphasizes meticulous dataset construction through a complete dataset generation process,a careful labelling algorithm,and a sophisticated evaluation method,providing valuable insights to reinforce IIoT system security.Finally,the HiTar-2024 dataset is compared with other similar datasets in the literature,considering several factors such as data format,feature extraction tools,number of features,attack categories,number of instances,and ML metrics.

关 键 词：Intrusion detection system industrial IoT machine learning security cyber-attacks DATASET 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]