Machine-Learning-Based Darknet Traffic Detection System for IoT Applications

Abstract

The massive modern technical revolution in electronics, cognitive computing, and sensing has provided critical infrastructure for the development of today’s Internet of Things (IoT) for a wide range of applications. However, because endpoint devices’ computing, storage, and communication capabilities are limited, IoT infrastructures are exposed to a wide range of cyber-attacks. As such, Darknet or blackholes (sinkholes) attacks are significant, and recent attack vectors that are launched against several IoT communication services. Since Darknet address space evolved as a reserved internet address space that is not contemplated to be used by legitimate hosts globally, any communication traffic is speculated to be unsolicited and distinctively deemed a probe, backscatter, or misconfiguration. Thus, in this paper, we develop, investigate, and evaluate the performance of machine-learning-based Darknet traffic detection systems (DTDS) in IoT networks. Mainly, we make use of six supervised machine-learning techniques, including bagging decision tree ensembles (BAG-DT), AdaBoost decision tree ensembles (ADA-DT), RUSBoosted decision tree ensembles (RUS-DT), optimizable decision tree (O-DT), optimizable k-nearest neighbor (O-KNN), and optimizable discriminant (O-DSC). We evaluate the implemented DTDS models on a recent and comprehensive dataset, known as the CIC-Darknet-2020 dataset, composed of contemporary actual IoT communication traffic involving four different classes that combine VPN and Tor traffic in a single dataset covering a wide range of captured cyber-attacks and hidden services provided by the Darknet. Our empirical performance analysis demonstrates that bagging ensemble techniques (BAG-DT) offer better accuracy and lower error rates than other implemented supervised learning techniques, scoring a 99.50% of classification accuracy with a low inferencing overhead of 9.09 µ second. Finally, we also contrast our BAG-DT-DTDS with other existing DTDS models and demonstrate that our best results are improved by (1.9~27%) over the former state-of-the-art models.

Hyper-Tuned CNN Using EVO Technique for Efficient Biomedical Image Classification

“…e classifiers in machine learning scenario can be classified as traditional ANN-based classifiers, which are Multilayer Perceptron (MLP), Extremelearning Machine (ELM) [1], and Ensemble learning [25]. In the case of ANN, the neural networks combine the behavior of different species behavior with machine learning tasks.…”

Blockchain for Modern Applications: A Survey

“…For more efficient, scalable, and secured blockchain industrial uses, additional work in the future is required. For instance, it will be interesting to investigate how machine learning (ML) techniques [ 175 , 176 , 177 ] may be used in the context of blockchain technology to increase security levels and the performances of blockchain-based systems. It will also be extremely useful to apply some formal testing techniques for blockchain-based solutions to improve their quality and increase their robustness [ 178 , 179 , 180 ].…”

ELBA-IoT: An Ensemble Learning Model for Botnet Attack Detection in IoT Networks

“…Specifically, the dividerand algorithm works as illustrated in Figure 3 below. In addition, to ensure optimum validation/testing process, we also applied k-fold cross-validation [33] during the learning process. In this approach, the dataset is arbitrarily split into k laminated folds, with each fold used as a test/validate dataset once while the other folds are consolidated together for use as a training dataset for the machine learning model generation.…”