{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,13]],"date-time":"2025-11-13T11:06:15Z","timestamp":1763031975302,"version":"3.45.0"},"reference-count":35,"publisher":"Springer Science and Business Media LLC","issue":"13","license":[{"start":{"date-parts":[[2025,9,19]],"date-time":"2025-09-19T00:00:00Z","timestamp":1758240000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,9,19]],"date-time":"2025-09-19T00:00:00Z","timestamp":1758240000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Cluster Comput"],"published-print":{"date-parts":[[2025,11]]},"DOI":"10.1007\/s10586-025-05533-4","type":"journal-article","created":{"date-parts":[[2025,9,19]],"date-time":"2025-09-19T19:54:30Z","timestamp":1758311670000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Optimized feature selection for IoT intrusion detection using firefly and Harris Hawk Optimization algorithms with a new multi-objective fitness function"],"prefix":"10.1007","volume":"28","author":[{"given":"Ghada","family":"AL Mukhaini","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mohammed","family":"Anbar","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Selvakumar","family":"Manickam","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tamara","family":"Al-Shurbaji","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,9,19]]},"reference":[{"key":"5533_CR1","doi-asserted-by":"crossref","unstructured":"Asharf, J., Moustafa, N., Khurshid, H. et\u00a0al.: A review of intrusion detection systems using machine and deep learning in internet of things: Challenges, solutions and future directions. Electronics (Switzerland) 9 (2020)","DOI":"10.3390\/electronics9071177"},{"key":"5533_CR2","doi-asserted-by":"publisher","first-page":"115668","DOI":"10.1109\/ACCESS.2023.3322369","volume":"11","author":"L Almuqren","year":"2023","unstructured":"Almuqren, L., Alqahtani, H., Aljameel, S.S., et al.: Hybrid metaheuristics with machine learning based botnet detection in cloud assisted internet of things environment. IEEE Access 11, 115668\u2013115676 (2023)","journal-title":"IEEE Access"},{"key":"5533_CR3","doi-asserted-by":"publisher","first-page":"144","DOI":"10.1016\/j.future.2019.04.038","volume":"100","author":"HA Khattak","year":"2019","unstructured":"Khattak, H.A., Shah, M.A., Khan, S., et al.: Perception layer security in internet of things. Future Generation Computer Systems 100, 144\u2013164 (2019)","journal-title":"Future Generation Computer Systems"},{"key":"5533_CR4","doi-asserted-by":"publisher","first-page":"2483","DOI":"10.1109\/JIOT.2017.2767291","volume":"5","author":"M Frustaci","year":"2018","unstructured":"Frustaci, M., Pace, P., Aloi, G., Fortino, G.: Evaluating critical security issues of the iot world: Present and future challenges. IEEE Internet Things J 5, 2483\u20132495 (2018)","journal-title":"IEEE Internet Things J"},{"key":"5533_CR5","doi-asserted-by":"publisher","first-page":"55","DOI":"10.1007\/978-3-319-22168-7_3","volume":"36","author":"MR Abdmeziem","year":"2016","unstructured":"Abdmeziem, M.R., Tandjaoui, D., Romdhani, I.: Architecting the internet of things: State of the art. Studies in Systems, Decision and Control 36, 55\u201375 (2016)","journal-title":"Studies in Systems, Decision and Control"},{"key":"5533_CR6","doi-asserted-by":"publisher","first-page":"1173","DOI":"10.1016\/j.jksuci.2018.11.009","volume":"32","author":"EM Mashhour","year":"2020","unstructured":"Mashhour, E.M., El Houby, E.M.F., Wassif, K.T., Salah, A.I.: A novel classifier based on firefly algorithm. Journal of King Saud University - Computer and Information Sciences 32, 1173\u20131181 (2020)","journal-title":"Journal of King Saud University - Computer and Information Sciences"},{"key":"5533_CR7","doi-asserted-by":"publisher","first-page":"148","DOI":"10.1016\/j.cose.2018.11.005","volume":"81","author":"B Selvakumar","year":"2019","unstructured":"Selvakumar, B., Muneeswaran, K.: Firefly algorithm based feature selection for network intrusion detection. Comput Secur 81, 148\u2013155 (2019)","journal-title":"Comput Secur"},{"key":"5533_CR8","doi-asserted-by":"publisher","first-page":"849","DOI":"10.1016\/j.future.2019.02.028","volume":"97","author":"AA Heidari","year":"2019","unstructured":"Heidari, A.A., Mirjalili, S., Faris, H., et al.: Harris hawks optimization: Algorithm and applications. Future Generation Computer Systems 97, 849\u2013872 (2019)","journal-title":"Future Generation Computer Systems"},{"key":"5533_CR9","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2022.107901","volume":"100","author":"H Bangui","year":"2022","unstructured":"Bangui, H., Buhnova, B.: Lightweight intrusion detection for edge computing networks using deep forest and bio-inspired algorithms. Computers and Electrical Engineering 100, 107901 (2022)","journal-title":"Computers and Electrical Engineering"},{"key":"5533_CR10","first-page":"63","volume":"7","author":"A Davahli","year":"2020","unstructured":"Davahli, A., Shamsi, M., Abaei, G.: A lightweight anomaly detection model using svm for wsns in iot through a hybrid feature selection algorithm based on ga and gwo. Journal of Computing and Security 7, 63\u201379 (2020)","journal-title":"Journal of Computing and Security"},{"key":"5533_CR11","doi-asserted-by":"crossref","unstructured":"Kareem, S.S., Mostafa, R.R., Hashim, F.A., El-Bakry, H.M.: An effective feature selection model using hybrid metaheuristic algorithms for iot intrusion detection. Sensors 22 (2022)","DOI":"10.3390\/s22041396"},{"key":"5533_CR12","doi-asserted-by":"crossref","unstructured":"Hijazi, N., Aloqaily, M., Ouni, B. et\u00a0al.: Harris hawks feature selection in distributed machine learning for secure iot environments (2022). Paper presented at ICC 2023 - IEEE International Conference on Communications, Rome, Italy, 28 May - 01 June 2023","DOI":"10.1109\/ICC45041.2023.10279042"},{"key":"5533_CR13","doi-asserted-by":"publisher","first-page":"1899","DOI":"10.1007\/s11277-023-10687-8","volume":"132","author":"R Gangula","year":"2023","unstructured":"Gangula, R., Vutukuru, M.M., Kumar, M.R.: Intrusion attack detection using firefly optimization algorithm and ensemble classification model. Wirel Pers Commun 132, 1899\u20131916 (2023)","journal-title":"Wirel Pers Commun"},{"key":"5533_CR14","doi-asserted-by":"crossref","unstructured":"Kurniabudi, S.D.D. et\u00a0al.: Improvement of attack detection performance on the internet of things with pso-search and random forest. J Comput Sci 64 (2022)","DOI":"10.1016\/j.jocs.2022.101833"},{"key":"5533_CR15","doi-asserted-by":"publisher","first-page":"4469","DOI":"10.1007\/s10586-023-04187-4","volume":"27","author":"MIT Hussan","year":"2023","unstructured":"Hussan, M.I.T., Reddy, G.V., Anitha, P.T., et al.: Ddos attack detection in iot environment using optimized elman recurrent neural networks based on chaotic bacterial colony optimization. Cluster Computing 27, 4469\u20134490 (2023)","journal-title":"Cluster Computing"},{"key":"5533_CR16","doi-asserted-by":"publisher","first-page":"2673","DOI":"10.1007\/s10586-023-04102-x","volume":"27","author":"AV Hanafi","year":"2023","unstructured":"Hanafi, A.V., Ghaffari, A., Rezaei, H., et al.: Intrusion detection in internet of things using improved binary golden jackal optimization algorithm and lstm. Cluster Computing 27, 2673\u20132690 (2023)","journal-title":"Cluster Computing"},{"key":"5533_CR17","doi-asserted-by":"crossref","unstructured":"Rabie, O.B.J., Selvarajan, S., Hasanin, T. et\u00a0al.: A novel iot intrusion detection framework using decisive red fox optimization and descriptive back propagated radial basis function models. Sci Rep 14 (2024)","DOI":"10.1038\/s41598-024-51154-z"},{"key":"5533_CR18","doi-asserted-by":"publisher","first-page":"142","DOI":"10.1016\/j.chemolab.2018.12.003","volume":"184","author":"NA Al-Thanoon","year":"2019","unstructured":"Al-Thanoon, N.A., Qasim, O.S., Algamal, Z.Y.: A new hybrid firefly algorithm and particle swarm optimization for tuning parameter estimation in penalized support vector machine with application in chemometrics. Chemometrics and Intelligent Laboratory Systems 184, 142\u2013152 (2019)","journal-title":"Chemometrics and Intelligent Laboratory Systems"},{"key":"5533_CR19","doi-asserted-by":"crossref","unstructured":"Ullah, I., Mahmoud, Q.H.: in A scheme for generating a dataset for anomalous activity detection in iot networks (eds Kobti, Z. & Wu, D.) Advances in Artificial Intelligence, Vol. 12109 of Lecture Notes in Computer Science 508\u2013520 (Springer, Cham, 2020). https:\/\/link.springer.com\/chapter\/10.1007\/978-3-030-47358-7_52","DOI":"10.1007\/978-3-030-47358-7_52"},{"key":"5533_CR20","first-page":"93","volume":"13","author":"T Ahmad","year":"2019","unstructured":"Ahmad, T., Aziz, M.: Data preprocessing and feature selection for machine learning intrusion detection systems. ICIC Express Letters ICIC International 13, 93\u2013101 (2019)","journal-title":"ICIC Express Letters ICIC International"},{"key":"5533_CR21","doi-asserted-by":"publisher","first-page":"761","DOI":"10.1007\/s10207-019-00434-1","volume":"18","author":"M Aamir","year":"2019","unstructured":"Aamir, M., Zaidi, S.M.A.: Ddos attack detection with feature engineering and machine learning: the framework and performance evaluation. International Journal of Information Security 18, 761\u2013785 (2019)","journal-title":"International Journal of Information Security"},{"key":"5533_CR22","unstructured":"Karatas, G.: The effects of normalization and standardization on internet of things attack detection. European Journal of Science and Technology29, 187\u2013192 (2020). https:\/\/dergipark.org.tr\/en\/download\/article-file\/2057090"},{"key":"5533_CR23","doi-asserted-by":"crossref","unstructured":"Jolliffe, I.T., Cadima, J.: Principal component analysis: a review and recent developments. Philosophical Transactions of the Royal Society A: Mathematical, Physical and Engineering Sciences 374 (2016)","DOI":"10.1098\/rsta.2015.0202"},{"key":"5533_CR24","unstructured":"Zhang, Z.: Missing data imputation: focusing on single imputation. Annals of Translational Medicine 4 (2016)"},{"key":"5533_CR25","doi-asserted-by":"publisher","first-page":"1263","DOI":"10.1109\/TKDE.2008.239","volume":"21","author":"H He","year":"2009","unstructured":"He, H., Garcia, E.A.: Learning from imbalanced data. IEEE Transactions on Knowledge and Data Engineering 21, 1263\u20131284 (2009)","journal-title":"IEEE Transactions on Knowledge and Data Engineering"},{"key":"5533_CR26","doi-asserted-by":"crossref","unstructured":"Hikal, N.A., Elgayar, M.M.: in Enhancing iot botnets attack detection using machine learning-ids and ensemble data preprocessing technique 89\u2013102 (2020)","DOI":"10.1007\/978-981-15-3075-3_6"},{"key":"5533_CR27","doi-asserted-by":"publisher","first-page":"275","DOI":"10.1007\/s00521-022-07755-8","volume":"35","author":"X Yong","year":"2022","unstructured":"Yong, X.: Gao y lin (2023) improved firefly algorithm for feature selection with the relieff-based initialization and the weighted voting mechanism. Neural Comput Appl 35, 275\u2013301 (2022)","journal-title":"Neural Comput Appl"},{"key":"5533_CR28","doi-asserted-by":"crossref","unstructured":"Mahmood, M.R.: Two feature selection methods comparison chi-square and relief-f for facial expression recognition. Journal of Physics: Conference Series 1804 (2021)","DOI":"10.1088\/1742-6596\/1804\/1\/012056"},{"key":"5533_CR29","doi-asserted-by":"publisher","first-page":"189","DOI":"10.1016\/j.jbi.2018.07.014","volume":"85","author":"RJ Urbanowicz","year":"2018","unstructured":"Urbanowicz, R.J., Meeker, M., La Cava, W., Olson, R.S., Moore, J.H.: Relief-based feature selection: Introduction and review. Journal of Biomedical Informatics 85, 189\u2013203 (2018)","journal-title":"Journal of Biomedical Informatics"},{"key":"5533_CR30","unstructured":"Elamparithi, P. et\u00a0al.: A machine learning approach for detecting ddos attack in iot network using random forest classifier. International Journal of Intelligent Systems and Applications in Engineering 12, 495\u2013502 (2024). https:\/\/ijisae.org\/index.php\/IJISAE\/article\/view\/3649"},{"key":"5533_CR31","doi-asserted-by":"crossref","unstructured":"Ying, X.: An overview of overfitting and its solutions. Journal of Physics: Conference Series 1168 (2019)","DOI":"10.1088\/1742-6596\/1168\/2\/022022"},{"key":"5533_CR32","unstructured":"Thakkar, K.: Model overfitting- cross validation - operations research bit - medium (2024). https:\/\/medium.com\/operations-research-bit\/model-overfitting-cross-validation-a4627fcb9849. Medium, September 27"},{"key":"5533_CR33","doi-asserted-by":"crossref","unstructured":"Coman, E.N. et\u00a0al.: The paired t-test as a simple latent change score model. Frontiers in Psychology4 (2013)","DOI":"10.3389\/fpsyg.2013.00738"},{"key":"5533_CR34","doi-asserted-by":"crossref","unstructured":"Altman, D.G., Bland, J.M.: How to obtain the confidence interval from a p value. BMJ 343 (2011). https:\/\/www.bmj.com\/content\/343\/bmj.d2090","DOI":"10.1136\/bmj.d2090"},{"key":"5533_CR35","unstructured":"Pawar, S.: The rise of iot attacks: Endpoint protection via trending technologies. EC-Council Cybersecurity Exchange (2024). Retrieved from https:\/\/www.eccouncil.org\/cybersecurity-exchange\/ethical-hacking\/the-rise-of-iot-attacks-endpoint-protection-via-trending-technologies\/"}],"container-title":["Cluster Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10586-025-05533-4.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10586-025-05533-4\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10586-025-05533-4.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,13]],"date-time":"2025-11-13T11:01:45Z","timestamp":1763031705000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10586-025-05533-4"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9,19]]},"references-count":35,"journal-issue":{"issue":"13","published-print":{"date-parts":[[2025,11]]}},"alternative-id":["5533"],"URL":"https:\/\/doi.org\/10.1007\/s10586-025-05533-4","relation":{},"ISSN":["1386-7857","1573-7543"],"issn-type":[{"type":"print","value":"1386-7857"},{"type":"electronic","value":"1573-7543"}],"subject":[],"published":{"date-parts":[[2025,9,19]]},"assertion":[{"value":"19 December 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"8 May 2025","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"11 May 2025","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"19 September 2025","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"14 November 2025","order":6,"name":"change_date","label":"Change Date","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"Update","order":7,"name":"change_type","label":"Change Type","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"The original online version of this article was revised: The affiliation \u201cHonorary Research Fellow at the Cybersecurity Research Centre (CYRES), Universiti Sains Malaysia, Pulau Pinang 11800, Malaysia\u201d has been corrected to \u201cCybersecurity Research Centre (CYRES), Universiti Sains Malaysia, Pulau Pinang, 11800, Malaysia\u201d.","order":8,"name":"change_details","label":"Change Details","group":{"name":"ArticleHistory","label":"Article History"}}],"article-number":"827"}}