{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,19]],"date-time":"2025-12-19T22:02:35Z","timestamp":1766181755223,"version":"3.40.5"},"reference-count":48,"publisher":"SAGE Publications","issue":"10","license":[{"start":{"date-parts":[[2021,10,1]],"date-time":"2021-10-01T00:00:00Z","timestamp":1633046400000},"content-version":"unspecified","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["journals.sagepub.com"],"crossmark-restriction":true},"short-container-title":["International Journal of Distributed Sensor Networks"],"published-print":{"date-parts":[[2021,10]]},"abstract":"<jats:p> Intrusion detection systems play a vital role in traffic flow monitoring on Internet of Things networks by providing a secure network traffic environment and blocking unwanted traffic packets. Various intrusion detection systems approaches have been proposed previously based on data mining, fuzzy techniques, genetic, neurogenetic, particle swarm intelligence, rough sets, and conventional machine learning. However, these methods are not energy efficient and do not perform accurately due to the inappropriate feature selection or the use of full features of datasets. In general, datasets contain more than 10 features. Any machine learning\u2013based lightweight intrusion detection systems trained with full features turn into an inefficient and heavyweight intrusion detection systems. This case challenges Internet of Things networks that suffer from power efficiency problems. Therefore, lightweight (energy-efficient), accurate, and high-performance intrusion detection systems are paramount instead of inefficient and heavyweight intrusion detection systems. To address these challenges, a new approach that can help to determine the most effective and optimal feature pairs of datasets which enable the development of lightweight intrusion detection systems was proposed. For this purpose, 10 machine learning algorithms and the recent BoT-IoT (2018) dataset were selected. Twelve best features recommended by the developers of this dataset were used in this study. Sixty-six unique feature pairs were generated from the 12 best features. Next, 10 full-feature-based intrusion detection systems were developed by training the 10 machine learning algorithms with the 12 full features. Similarly, 660 feature-pair-based lightweight intrusion detection systems were developed by training the 10 machine learning algorithms via each feature pair out of the 66 feature pairs. Moreover, the 10 intrusion detection systems trained with 12 best features and the 660 intrusion detection systems trained via 66 feature pairs were compared to each other based on the machine learning algorithmic groups. Then, the feature-pair-based lightweight intrusion detection systems that achieved the accuracy level of the 10 full-feature-based intrusion detection systems were selected. This way, the optimal and efficient feature pairs and the lightweight intrusion detection systems were determined. The most lightweight intrusion detection systems achieved more than 90% detection accuracy. <\/jats:p>","DOI":"10.1177\/15501477211052202","type":"journal-article","created":{"date-parts":[[2021,10,30]],"date-time":"2021-10-30T07:30:40Z","timestamp":1635579040000},"page":"155014772110522","update-policy":"https:\/\/doi.org\/10.1177\/sage-journals-update-policy","source":"Crossref","is-referenced-by-count":10,"title":["Toward lightweight intrusion detection systems using the optimal and efficient feature pairs of the Bot-IoT 2018 dataset"],"prefix":"10.1177","volume":"17","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9638-0233","authenticated-orcid":false,"given":"Erman","family":"\u00d6zer","sequence":"first","affiliation":[{"name":"Department of Computer Engineering, Sakarya University, Sakarya, Turkey"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Murat","family":"\u0130skefiyeli","sequence":"additional","affiliation":[{"name":"Department of Computer Engineering, Sakarya University, Sakarya, Turkey"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4270-1986","authenticated-orcid":false,"given":"Jahongir","family":"Azimjonov","sequence":"additional","affiliation":[{"name":"Department of Computer Engineering, Sakarya University, Sakarya, Turkey"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"179","published-online":{"date-parts":[[2021,10,30]]},"reference":[{"key":"bibr1-15501477211052202","doi-asserted-by":"publisher","DOI":"10.3390\/s18092796"},{"key":"bibr2-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1016\/j.adhoc.2014.12.006"},{"first-page":"69","volume-title":"2010 international conference on advances in energy engineering","author":"Yun M","key":"bibr3-15501477211052202"},{"key":"bibr4-15501477211052202","first-page":"1","volume":"5","author":"Said O","year":"2013","journal-title":"Int J Comput Netw"},{"key":"bibr5-15501477211052202","doi-asserted-by":"publisher","DOI":"10.4236\/jcc.2015.35021"},{"first-page":"257","volume-title":"2012 10th international conference on Frontiers of Information Technology","author":"Khan R","key":"bibr6-15501477211052202"},{"key":"bibr7-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1186\/s13677-018-0123-6"},{"key":"bibr8-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1109\/MPRV.2006.2"},{"key":"bibr9-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1109\/MPRV.2011.55"},{"key":"bibr10-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1109\/MP.2005.1368913"},{"key":"bibr11-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1109\/MWC.2005.1404569"},{"first-page":"731","volume-title":"In: 38th annual IEEE conference on local computer networks, Sydney, NSW, Australia","author":"Crosby GV","key":"bibr12-15501477211052202"},{"first-page":"24","volume-title":"2013 IEEE international conference on bioinformatics and biomedicine","author":"Drira W","key":"bibr13-15501477211052202"},{"key":"bibr14-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2019.05.041"},{"key":"bibr15-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1109\/MWC.2017.1600421"},{"key":"bibr16-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1007\/s11227-021-03733-4"},{"key":"bibr17-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2017.201"},{"key":"bibr18-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2019.05.014"},{"key":"bibr19-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2017.02.009"},{"key":"bibr20-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2014.01.012"},{"first-page":"1","volume-title":"SoutheastCon 2017","author":"Fraley JB","key":"bibr21-15501477211052202"},{"key":"bibr22-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2019.102526"},{"volume-title":"AAAI workshops","author":"Raff E","key":"bibr23-15501477211052202"},{"key":"bibr24-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1016\/j.engappai.2015.05.008"},{"key":"bibr25-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2749538"},{"first-page":"134","volume-title":"2015 IEEE conference on communications and network security (CNS)","author":"Bekerman D","key":"bibr26-15501477211052202"},{"key":"bibr27-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2015.2458581"},{"issue":"1","key":"bibr28-15501477211052202","first-page":"2","volume":"18","author":"Kheir N.","year":"2013","journal-title":"J Inf Secur Appl"},{"key":"bibr29-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-015-0244-0"},{"key":"bibr30-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2013.08.008"},{"key":"bibr31-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1016\/j.engappai.2016.12.016"},{"key":"bibr32-15501477211052202","doi-asserted-by":"publisher","DOI":"10.3233\/JCS-2010-0410"},{"first-page":"2337","volume-title":"2014 international conference on advances in computing, communications and informatics (ICACCI)","author":"Uppal D","key":"bibr33-15501477211052202"},{"key":"bibr34-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2976624"},{"key":"bibr35-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.2970501"},{"key":"bibr36-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3023616"},{"key":"bibr37-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3056614"},{"key":"bibr38-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1016\/j.jpdc.2020.06.012"},{"key":"bibr39-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2996214"},{"key":"bibr40-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1007\/s12065-019-00293-8"},{"key":"bibr41-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-15-0199-9_62"},{"key":"bibr42-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1038\/sdata.2016.18"},{"key":"bibr43-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2019.06.005"},{"key":"bibr44-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1017\/S0960129512000783"},{"issue":"85","key":"bibr45-15501477211052202","first-page":"2825","volume":"12","author":"Pedregosa F","year":"2011","journal-title":"J Mach Learn Res"},{"key":"bibr46-15501477211052202","doi-asserted-by":"publisher","DOI":"10.1109\/MCSE.2011.37"},{"key":"bibr47-15501477211052202","first-page":"1","volume":"14","author":"McKinney W.","year":"2011","journal-title":"Python High Perform Sci Comput"},{"key":"bibr48-15501477211052202","first-page":"91","volume-title":"Astronomical data analysis software and systems XIV ASP conference series","volume":"347","author":"Barrett P","year":"2005"}],"container-title":["International Journal of Distributed Sensor Networks"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/journals.sagepub.com\/doi\/pdf\/10.1177\/15501477211052202","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/journals.sagepub.com\/doi\/full-xml\/10.1177\/15501477211052202","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/journals.sagepub.com\/doi\/pdf\/10.1177\/15501477211052202","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,10,30]],"date-time":"2021-10-30T07:31:03Z","timestamp":1635579063000},"score":1,"resource":{"primary":{"URL":"http:\/\/journals.sagepub.com\/doi\/10.1177\/15501477211052202"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,10]]},"references-count":48,"journal-issue":{"issue":"10","published-print":{"date-parts":[[2021,10]]}},"alternative-id":["10.1177\/15501477211052202"],"URL":"https:\/\/doi.org\/10.1177\/15501477211052202","relation":{},"ISSN":["1550-1477","1550-1477"],"issn-type":[{"type":"print","value":"1550-1477"},{"type":"electronic","value":"1550-1477"}],"subject":[],"published":{"date-parts":[[2021,10]]}}}