145168 20260217205530.0 doi 10.1016/j.iot.2024.101367 sideral 139983 ART-2024-139983 eng García, José Universidad de Zaragoza (orcid)0000-0001-9485-7678 Empirical evaluation of feature selection methods for machine learning based intrusion detection in IoT scenarios 2024 Access copy available to the general public Unrestricted This paper delves into the critical need for enhanced security measures within the Internet of Things (IoT) landscape due to inherent vulnerabilities in IoT devices, rendering them susceptible to various forms of cyber-attacks. The study emphasizes the importance of Intrusion Detection Systems (IDS) for continuous threat monitoring. The objective of this study was to conduct a comprehensive evaluation of feature selection (FS) methods using various machine learning (ML) techniques for classifying traffic flows within datasets containing intrusions in IoT environments. An extensive benchmark analysis of ML techniques and FS methods was performed, assessing feature selection under different approaches including Filter Feature Ranking (FFR), Filter-Feature Subset Selection (FSS), and Wrapper-based Feature Selection (WFS). FS becomes pivotal in handling vast IoT data by reducing irrelevant attributes, addressing the curse of dimensionality, enhancing model interpretability, and optimizing resources in devices with limited capacity. Key findings indicate the outperformance for traffic flows classification of certain tree-based algorithms, such as J48 or PART, against other machine learning techniques (naive Bayes, multi-layer perceptron, logistic, adaptive boosting or k-Nearest Neighbors), showcasing a good balance between performance and execution time. FS methods' advantages and drawbacks are discussed, highlighting the main differences in results obtained among different FS approaches. Filter-feature Subset Selection (FSS) approaches such as CFS could be more suitable than Filter Feature Ranking (FFR), which may select correlated attributes, or than Wrapper-based Feature Selection (WFS) methods, which may tailor attribute subsets for specific ML techniques and have lengthy execution times. In any case, reducing attributes via FS has allowed optimization of classification without compromising accuracy. In this study, F1 score classification results above 0.99, along with a reduction of over 60% in the number of attributes, have been achieved in most experiments conducted across four datasets, both in binary and multiclass modes. This work emphasizes the importance of a balanced attribute selection process, taking into account threat detection capabilities and computational complexity. info:eu-repo/grantAgreement/ES/DGA/T31-20R info:eu-repo/grantAgreement/ES/MCINN/PID2022-136476OB-I00 info:eu-repo/grantAgreement/ES/UZ/UZ2021-TEC-01 info:eu-repo/semantics/openAccess by https://creativecommons.org/licenses/by/4.0/deed.es 7.6 2024 COMPUTER SCIENCE, INFORMATION SYSTEMS 16 / 258 = 0.062 2024 Q1 T1 TELECOMMUNICATIONS 13 / 120 = 0.108 2024 Q1 T1 ENGINEERING, ELECTRICAL & ELECTRONIC 33 / 368 = 0.09 2024 Q1 T1 1.527 2024 Artificial Intelligence 2024 Q1 Computer Science (miscellaneous) 2024 Q1 Computer Science Applications 2024 Q1 Software 2024 Q1 Hardware and Architecture 2024 Q1 Information Systems 2024 Q1 Management of Technology and Innovation 2024 Q1 Engineering (miscellaneous) 2024 Q1 12.4 2024 info:eu-repo/semantics/article info:eu-repo/semantics/publishedVersion Entrena, Jorge Alesanco, Álvaro Universidad de Zaragoza (orcid)0000-0002-5254-1402 5008 560 Universidad de Zaragoza Dpto. Ingeniería Electrón.Com. Área Ingeniería Telemática 28 (2024), 101367 [18 pp.] Internet of Things (Netherlands) 2542-6605 1687436 http://zaguan.unizar.es/record/145168/files/texto_completo.pdf Versión publicada 1870827 http://zaguan.unizar.es/record/145168/files/texto_completo.jpg?subformat=icon icon Versión publicada oai:zaguan.unizar.es:145168 articulos driver 2026-02-17-20:32:03 ARTICLE