Machine Learning Algorithms for Anomaly Detection in IoT Networks – A Review
Main Article Content
Abstract
Internet of Things (IoT) wide applications has significantly increased the need for robust anomaly detection to safeguard against countless security breaches. This paper presents a review that examines the effectiveness of hybrid solutions incorporating supervised and unsupervised machine learning models for enhancing IoT security. The review consolidates insights from a range of studies employing models such as Random Forest (RF), Support Vector Machine (SVM), k-nearest Neighbors (k-NN), and Gaussian Mixture Models (GMM). It integrates the findings of diverse research, emphasizing improvements in terms of detection accuracy and computational demands. The study delineates challenges in the field to evaluate the efficacy of hybrid techniques and their potential for immediate IoT security applications. Moreover, future research directions encompass the exploration of new algorithms and the integration of these approaches within dynamic IoT data streams.
Downloads
Article Details

Authors retain copyright and grant the journal right of first publication with the work simultaneously licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License that allows others to share the work with an acknowledgement of the work's authorship and initial publication in this journal.
References
2. M. S. Eddine, M. A. Ferrag, O. Friha, and L. Maglaras, "Easbf: An efficient authentication scheme over blockchain for fog computing-enabled internet of vehicles," Journal of Information Security and Applications, vol. 59, pp. 102802, 2021. doi: [10.1016/j.jisa.2021.102802](https://doi.org/10.1016/j.jisa.2021.102802).
3. M. A. Alsoufi et al., "Anomaly-based intrusion detection systems in IoT using deep learning: A systematic literature review," Applied Sciences, vol. 11, no. 18, pp. 8383, 2021. doi: [10.3390/app11188383](https://doi.org/10.3390/app11188383).
4. L. Njilla, L. Pearlstein, X. Wu, A. Lutz, and S. Ezekiel, "Internet of Things anomaly detection using machine learning," in Proceedings of the 2019 IEEE Applied Imagery Pattern Recognition Workshop (AIPR), pp. 1-6, 2019. doi: [10.1109/AIPR47015.2019.9174572](https://doi.org/10.1109/AIPR47015.2019.9174572).
5. M. S. Virat, S. Bindu, B. Aishwarya, B. Dhanush, and M. R. Kounte, "Security and privacy challenges in internet of things," in 2018 2nd International Conference on Trends in Electronics and Informatics (ICOEI), pp. 454-460, 2018. doi: [10.1109/ICOEI.2018.8553825](https://doi.org/10.1109/ICOEI.2018.8553825).
6. M. Alaa, A. A. Zaidan, B. B. Zaidan, M. Talal, and M. L. M. Kiah, "A review of smart home applications based on internet of things," Journal of Network and Computer Applications, vol. 97, pp. 48-65, 2017. doi: [10.1016/j.jnca.2017.08.017](https://doi.org/10.1016/j.jnca.2017.08.017).
7. P. Panagiotis, K. Taxiarxchis, K. Georgios, L. Maglaras, and M. A. Ferrag, "Intrusion detection in critical infrastructures: A literature review," Smart Cities, vol. 4, no. 3, pp. 1146-1157, 2021. doi: [10.3390/smartcities4030071](https://doi.org/10.3390/smartcities4030071).
8. L. Maglaras, T. Cruz, M. A. Ferrag, and H. Janicke, "Teaching the process of building an intrusion detection system using data from a small-scale SCADA testbed," Internet Technology Letters, vol. 3, no. 1, pp. e132, 2020. doi: [10.1002/itl2.132](https://doi.org/10.1002/itl2.132).
9. A. A. Cook, G. Mısırlı, and Z. Fan, "Anomaly detection for IoT time-series data: A survey," IEEE Internet of Things Journal, vol. 7, no. 7, pp. 6481-6494, 2020. doi: [10.1109/JIOT.2020.2992345](https://doi.org/10.1109/JIOT.2020.2992345).
10. R. Doshi, N. Apthorpe, and N. Feamster, "Machine learning DDoS detection for consumer Internet of Things devices," in Proceedings of the 2018 IEEE Security and Privacy Workshops (SPW), pp. 29-35, 2018. doi: [10.1109/SPW.2018.00013](https://doi.org/10.1109/SPW.2018.00013).
11. V. Adat and B. B. Gupta, "Security in internet of things: Issues, challenges, taxonomy, and architecture," Telecommunication Systems, vol. 67, no. 3, pp. 423-441, 2018. doi: [10.1007/s11235-017-0345-9](https://doi.org/10.1007/s11235-017-0345-9).
12. X. Yang et al., "Physical security and safety of IoT equipment: A survey of recent advances and opportunities," IEEE Transactions on Industrial Informatics, vol. 18, no. 7, pp. 4319-4330, 2022. doi: [10.1109/TII.2021.3138397](https://doi.org/10.1109/TII.2021.3138397).
13. B. Mbarek, A. Meddeb, W. B. Jaballah, and M. Mosbah, "A secure authentication mechanism for resource constrained devices," in 2015 IEEE/ACS 12th International Conference of Computer Systems and Applications (AICCSA), pp. 1-7, 2015. doi: [10.1109/AICCSA.2015.7507258](https://doi.org/10.1109/AICCSA.2015.7507258).
14. R. Fu, K. Zheng, D. Zhang, and Y. Yang, "An intrusion detection scheme based on anomaly mining in Internet of Things," in IET Conference Proceedings, 2011. doi: [10.1049/cp.2011.0295](https://doi.org/10.1049/cp.2011.0295).
15. T. Hastie, R. Tibshirani, and J. Friedman, The elements of statistical learning: Data mining, inference and prediction, 2nd ed. New York, NY, USA: Springer, 2009. doi: [10.1007/978-0-387-84858-7](https://doi.org/10.1007/978-0-387-84858-7).
16. K. P. Murphy, Machine learning: A probabilistic perspective. Cambridge, MA, USA: MIT Press, 2013.
17. A. Thakkar and R. Lohiya, "A review on machine learning and deep learning perspectives of IDS for IoT: Recent updates, security issues, and challenges," Archives of Computational Methods in Engineering, vol. 28, no. 4, pp. 2701-2721, 2021. doi: [10.1007/s11831-020-09408-8](https://doi.org/10.1007/s11831-020-09408-8).
18. M. A. Al-Garadi, A. Mohamed, and A. K. Al-Ali, "Deep and machine learning approaches for anomaly-based intrusion detection of IoT systems: A review," IEEE Communications Surveys & Tutorials, vol. 22, no. 1, pp. 106-139, 2020. doi: [10.1109/COMST.2019.2958727](https://doi.org/10.1109/COMST.2019.2958727).
19. G. S. Chadha, I. Islam, A. Schwung, and S. X. Ding, "Deep convolutional clustering-based time series anomaly detection," Sensors, vol. 21, no. 16, pp. 5488, 2021. doi: [10.3390/s21165488](https://doi.org/10.3390/s21165488).
20. J. Jiang, G. Han, L. Liu, L. Shu, and M. Guizani, "Outlier detection approaches based on machine learning in the Internet-of-Things," IEEE Wireless Communications, vol. 27, no. 2, pp. 53-59, 2020. doi: [10.1109/MWC.001.1900246](https://doi.org/10.1109/MWC.001.1900246).
21. T. Zhang, J. Hu, and W. Liu, "Machine learning approaches to network anomaly detection for the Internet of Things," IoT, vol. 1, no. 2, pp. 175-191, 2020. doi: [10.3390/iot1020012](https://doi.org/10.3390/iot1020012).
22. W. Ding, L. Zheng, and T. Zhang, "Network anomaly detection based on the PCA method in smart city IoT systems," Journal of Sensors, vol. 2021, pp. 1-12, 2021. doi: [10.1155/2021/6695830](https://doi.org/10.1155/2021/6695830).
23. J. Lee, K. Park, and Y. Kim, "IoT anomaly detection using autoencoder-based models," Sensors, vol. 20, no. 22, pp. 6404, 2020. doi: [10.3390/s20226404](https://doi.org/10.3390/s20226404).
24. X. Su, H. Shen, and S. Cheng, "Anomaly detection in IoT systems using Gaussian Mixture Model," IEEE Internet of Things Journal, vol. 6, no. 5, pp. 7822-7833, 2019. doi: [10.1109/JIOT.2019.2922551](https://doi.org/10.1109/JIOT.2019.2922551).
25. A. Nabil, H. Harb, and I. F. T. Alshaikhli, "Anomaly detection in IoT networks using machine learning techniques: A comparative study," IEEE Access, vol. 8, pp. 54195-54207, 2020. doi: [10.1109/ACCESS.2020.2978363](https://doi.org/10.1109/ACCESS.2020.2978363).
26. Y. Zeng, H. Wang, and Z. Zhou, "Anomaly detection in IoT-based smart grids using boosting algorithms," IEEE Transactions on Industrial Informatics, vol. 16, no. 9, pp. 5774-5782, 2020. doi: [10.1109/TII.2019.2955831](https://doi.org/10.1109/TII.2019.2955831).
27. V. Mothukuri et al., "Federated learning-based anomaly detection for IoT security attacks," IEEE Internet of Things Journal, vol. 8, no. 8, pp. 6348-6358, 2021. doi: [10.1109/JIOT.2021.3063856](https://doi.org/10.1109/JIOT.2021.3063856).
28. Y. Liu et al., "Deep anomaly detection for time-series data in Industrial IoT: A communication-efficient on-device federated learning approach," IEEE Internet of Things Journal, vol. 8, no. 8, pp. 6348-6358, 2021. doi: [10.1109/JIOT.2020.3043756](https://doi.org/10.1109/JIOT.2020.3043756).
29. C. Wang, J. Chen, Y. Yang, X. Ma, and J. Liu, "Poisoning attacks and countermeasures in intelligent networks: Status quo and prospects," Digital Communications and Networks, 2021. doi: [10.1016/j.dcan.2021.10.003](https://doi.org/10.1016/j.dcan.2021.10.003).
30. H. Lee et al., "Digestive neural networks: A novel defense strategy against inference attacks in federated learning," Computers & Security, vol. 109, pp. 102378, 2021. doi: [10.1016/j.cose.2021.102378](https://doi.org/10.1016/j.cose.2021.102378).
31. C. Yin, S. Zhang, J. Wang, and N. N. Xiong, "Anomaly detection based on convolutional recurrent autoencoder for IoT time series," IEEE Transactions on Systems, Man, and Cybernetics: Systems, vol. 50, no. 5, pp. 1719-1731, 2020. doi: [10.1109/TSMC.2020.2997340](https://doi.org/10.1109/TSMC.2020.2997340).
32. R. Shukla and S. Sengupta, "Scalable and robust outlier detector using hierarchical clustering and long short-term memory (LSTM) neural network for the Internet of Things," Internet of Things, vol. 9, pp. 100167, 2020. doi: [10.1016/j.iot.2020.100167](https://doi.org/10.1016/j.iot.2020.100167).
33. P. García-Teodoro, J. Díaz-Verdejo, G. Maciá-Fernández, and E. Vázquez, "Anomaly-based network intrusion detection: Techniques, systems and challenges," Computers & Security, vol. 28, no. 1-2, pp. 18-28, 2009. doi: [10.1016/j.cose.2008.08.003](https://doi.org/10.1016/j.cose.2008.08.003).
34. M. Sokolova and G. Lapalme, "A systematic analysis of performance measures for classification tasks," Information Processing & Management, vol. 45, no. 4, pp. 427-437, 2009. doi: [10.1016/j.ipm.2009.03.002](https://doi.org/10.1016/j.ipm.2009.03.002).
35. D. M. Powers, "Evaluation: From precision, recall and F-measure to ROC, informedness, markedness and correlation," Journal of Machine Learning Technologies, vol. 2, no. 1, pp. 37-63, 2011.
36. A. P. Bradley, "The use of the area under the ROC curve in the evaluation of machine learning algorithms," Pattern Recognition, vol. 30, no. 7, pp. 1145-1159, 1997. doi: [10.1016/S0031-3203(96)00142-2](https://doi.org/10.1016/S0031-3203(96)00142-2).
37. R. Kohavi, "A study of cross-validation and bootstrap for accuracy estimation and model selection," in International Joint Conference on Artificial Intelligence, vol. 14, pp. 1137-1143, 1995.
38. Z. Reitermanova, "Data splitting," in WDS'10 Proceedings of Contributed Papers, Part I, vol. 10, pp. 31-36, 2010.
39. C. Seiffert, T. M. Khoshgoftaar, J. Van Hulse, and A. Napolitano, "RUSBoost: A hybrid approach to alleviating class imbalance," IEEE Transactions on Systems, Man, and Cybernetics-Part A: Systems and Humans, vol. 40, no. 1, pp. 185-197, 2010. doi: [10.1109/TSMCA.2009.2029559](https://doi.org/10.1109/TSMCA.2009.2029559).
40. V. Chandola, A. Banerjee, and V. Kumar, "Anomaly detection: A survey," ACM Computing Surveys, vol. 41, no. 3, pp. 1-58, 2009. doi: [10.1145/1541880.1541882](https://doi.org/10.1145/1541880.1541882).
41. A. Abdelaziz, M. Elhoseny, A. S. Salama, and A. M. Riad, "Hybrid machine learning model for internet of things data anomaly detection," Future Generation Computer Systems, vol. 113, pp. 99-111, 2020. doi: [10.1016/j.future.2020.06.004](https://doi.org/10.1016/j.future.2020.06.004).
42. M. Conti, A. Dehghantanha, K. Franke, and S. Watson, "Internet of Things security and forensics: Challenges and opportunities," Future Generation Computer Systems, vol. 78, pp. 544-546, 2018. doi: [10.1016/j.future.2017.07.060](https://doi.org/10.1016/j.future.2017.07.060).
43. Y. Yuan, F. Wang, and C. Zhang, "A lightweight anomaly detection method for data collection systems in IoT," IEEE Transactions on Industrial Informatics, vol. 15, no. 5, pp. 2670-2679, 2019. doi: [10.1109/TII.2018.2879001](https://doi.org/10.1109/TII.2018.2879001).
44. D. A. B. Fernandes, J. J. P. C. Rodrigues, and L. F. Carvalho, "Toward a secure and efficient IoT network management," IEEE Network, vol. 35, no. 2, pp. 79-85, 2021. doi: [10.1109/MNET.001.2000402](https://doi.org/10.1109/MNET.001.2000402).




















