{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,11]],"date-time":"2026-05-11T10:30:09Z","timestamp":1778495409571,"version":"3.51.4"},"reference-count":36,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2024,2,1]],"date-time":"2024-02-01T00:00:00Z","timestamp":1706745600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2024,2,1]],"date-time":"2024-02-01T00:00:00Z","timestamp":1706745600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"name":"South African National Research Foundation","award":["132797 and 137951"],"award-info":[{"award-number":["132797 and 137951"]}]},{"name":"South African National Research Foundation incentive grant","award":["114911"],"award-info":[{"award-number":["114911"]}]},{"name":"South African Eskom Tertiary Education Support Programme."}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Big Data"],"abstract":"<jats:title>Abstract<\/jats:title><jats:p>Intrusion detection systems play a critical role in the mitigation of cyber-attacks on the Internet of Things (IoT) environment. Due to the integration of many devices within the IoT environment, a huge amount of data is generated. The generated data sets in most cases consist of irrelevant and redundant features that affect the performance of the existing intrusion detection systems (IDS). The selection of optimal features plays a critical role in the enhancement of intrusion detection systems. This study proposes a sequential feature selection approach using an optimized extreme learning machine (ELM) with an SVM (support vector machine) classifier. The main challenge of ELM is the selection of the input parameters, which affect its performance. In this study, the genetic algorithm (GA) is used to optimize the weights of ELM to boost its performance. After the optimization, the algorithm is applied as an estimator in the sequential forward selection (wrapper technique) to select key features. The final obtained feature subset is applied for classification using SVM. The IoT_ToN network and UNSWNB15 datasets were used to test the model's performance. The performance of the model was compared with other existing state-of-the-art classifiers such as k-nearest neighbors, gradient boosting, random forest, and decision tree. The model had the best quality of the selected feature subset. The results indicate that the proposed model had a better intrusion detection performance with 99%, and 86% accuracy for IoT_ToN network dataset and UNSWNB15 datasets, respectively. The model can be used as a promising tool for enhancing the classification performance of IDS datasets.<\/jats:p>","DOI":"10.1186\/s40537-024-00887-9","type":"journal-article","created":{"date-parts":[[2024,2,1]],"date-time":"2024-02-01T11:02:09Z","timestamp":1706785329000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":52,"title":["Hybrid wrapper feature selection method based on genetic algorithm and extreme learning machine for intrusion detection"],"prefix":"10.1186","volume":"11","author":[{"given":"Elijah M.","family":"Maseno","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zenghui","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,2,1]]},"reference":[{"key":"887_CR1","doi-asserted-by":"publisher","unstructured":"Kawamura A, Chakraborty B. A hybrid approach for optimal feature subset selection with evolutionary algorithms. Proceedings-2017 IEEE 8th International conference on awareness science and technology, ICAST 2017, 2018-Janua(iCAST), 2017. https:\/\/doi.org\/10.1109\/ICAwST.2017.8256521","DOI":"10.1109\/ICAwST.2017.8256521"},{"key":"887_CR2","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2020.113249","author":"H Alazzam","year":"2020","unstructured":"Alazzam H, Sharieh A, Sabri KE. A feature selection algorithm for intrusion detection system based on Pigeon Inspired Optimizer. Expert Syst Applicat. 2020. https:\/\/doi.org\/10.1016\/j.eswa.2020.113249.","journal-title":"Expert Syst Applicat"},{"key":"887_CR3","doi-asserted-by":"publisher","first-page":"80588","DOI":"10.1109\/ACCESS.2019.2919956","volume":"7","author":"Q Wu","year":"2019","unstructured":"Wu Q, Ma Z, Fan J, Xu G, Shen Y. A feature selection method based on hybrid improved binary quantum particle swarm optimization. IEEE Access. 2019;7:80588\u2013601. https:\/\/doi.org\/10.1109\/ACCESS.2019.2919956.","journal-title":"IEEE Access"},{"key":"887_CR4","unstructured":"Brownlee J. Data preparation for machine learning (and J. H. Sarah Martin and my technical editors Michael Sanderson and Arun Koshy, Andrei Cheremskoy (ed.); v1.1). 2020."},{"key":"887_CR5","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2022.108912","volume":"132","author":"WL Al-Yaseen","year":"2022","unstructured":"Al-Yaseen WL, Idrees AK, Almasoudy FH. Wrapper feature selection method based differential evolution and extreme learning machine for intrusion detection system. Pattern Recogn. 2022;132: 108912. https:\/\/doi.org\/10.1016\/j.patcog.2022.108912.","journal-title":"Pattern Recogn"},{"key":"887_CR6","doi-asserted-by":"publisher","unstructured":"Liu Y, Xu Z, Yang J, Wang L, Song C, Chen K. A novel meta-heuristic-based sequential forward feature selection approach for anomaly detection systems. Proceedings-2016 International conference on network and information systems for computers, ICNISC 2016, . 2017. https:\/\/doi.org\/10.1109\/ICNISC.2016.20","DOI":"10.1109\/ICNISC.2016.20"},{"issue":"September","key":"887_CR7","doi-asserted-by":"publisher","DOI":"10.1016\/j.mlwa.2021.100156","volume":"6","author":"JO Onah","year":"2021","unstructured":"Onah JO, Abdulhamid SM, Abdullahi M, Hassan IH, Al-Ghusham A. Genetic algorithm based feature selection and Na\u00efve Bayes for anomaly detection in fog computing environment. Mach Learn Applicat. 2021;6(September): 100156. https:\/\/doi.org\/10.1016\/j.mlwa.2021.100156.","journal-title":"Mach Learn Applicat"},{"key":"887_CR8","doi-asserted-by":"publisher","DOI":"10.1155\/2022\/1056490","author":"T Elemam","year":"2022","unstructured":"Elemam T, Elshrkawey M. A highly discriminative hybrid feature selection algorithm for cancer diagnosis. Sci World J. 2022. https:\/\/doi.org\/10.1155\/2022\/1056490.","journal-title":"Sci World J"},{"issue":"July","key":"887_CR9","doi-asserted-by":"publisher","DOI":"10.1016\/j.chemolab.2021.104396","volume":"217","author":"N Singh","year":"2021","unstructured":"Singh N, Singh P. A hybrid ensemble-filter wrapper feature selection approach for medical data classification. Chemom Intell Lab Syst. 2021;217(July): 104396. https:\/\/doi.org\/10.1016\/j.chemolab.2021.104396.","journal-title":"Chemom Intell Lab Syst"},{"issue":"20","key":"887_CR10","doi-asserted-by":"publisher","first-page":"31381","DOI":"10.1007\/s11042-021-10567-y","volume":"80","author":"MA Rahman","year":"2021","unstructured":"Rahman MA, Asyhari AT, Wen OW, Ajra H, Ahmed Y, Anwar F. Effective combining of feature selection techniques for machine learning enabled IoT intrusion detection. Multimed Tools Appl. 2021;80(20):31381\u201399. https:\/\/doi.org\/10.1007\/s11042-021-10567-y.","journal-title":"Multimed Tools Appl"},{"issue":"January","key":"887_CR11","doi-asserted-by":"publisher","DOI":"10.1016\/j.scs.2020.102324","volume":"61","author":"MA Rahman","year":"2020","unstructured":"Rahman MA, Asyhari AT, Leong LS, Satrya GB, Hai Tao M, Zolkipli MF. Scalable machine learning-based intrusion detection system for IoT-enabled smart cities. Sustain Cities Soc. 2020;61(January): 102324. https:\/\/doi.org\/10.1016\/j.scs.2020.102324.","journal-title":"Sustain Cities Soc"},{"key":"887_CR12","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.101863","author":"M Shafiq","year":"2020","unstructured":"Shafiq M, Tian Z, Kashif A, Du X, Guizani M. IoT malicious traffic identification using wrapper-based feature selection mechanisms. Comput Secur. 2020. https:\/\/doi.org\/10.1016\/j.cose.2020.101863.","journal-title":"Comput Secur"},{"key":"887_CR13","doi-asserted-by":"publisher","first-page":"56847","DOI":"10.1109\/ACCESS.2020.2978035","volume":"8","author":"R Vijayanand","year":"2020","unstructured":"Vijayanand R, Devaraj D. A novel feature selection method using whale optimization algorithm and genetic operators for intrusion detection system in wireless mesh network. IEEE Access. 2020;8:56847\u201354. https:\/\/doi.org\/10.1109\/ACCESS.2020.2978035.","journal-title":"IEEE Access"},{"issue":"July","key":"887_CR14","doi-asserted-by":"publisher","first-page":"76318","DOI":"10.1109\/ACCESS.2022.3192472","volume":"10","author":"WALIHM Ghanem","year":"2022","unstructured":"Ghanem WALIHM, Abduljabbar S, Ghaleb A, Jantan A, Nasser AB, Abdulla S, Saleh M, Saad AHY, Member S, Omolara AE. Cyber intrusion detection system based on a multiobjective binary bat algorithm for feature selection and enhanced bat algorithm for parameter optimization in neural networks. IEEE Access. 2022;10(July):76318\u201339. https:\/\/doi.org\/10.1109\/ACCESS.2022.3192472.","journal-title":"IEEE Access"},{"key":"887_CR15","doi-asserted-by":"publisher","first-page":"155619","DOI":"10.1109\/ACCESS.2020.3012838","volume":"8","author":"X Cui","year":"2020","unstructured":"Cui X, Li Y, Fan J, Wang T, Zheng Y. A hybrid improved dragonfly algorithm for feature selection. IEEE Access. 2020;8:155619\u201329. https:\/\/doi.org\/10.1109\/ACCESS.2020.3012838.","journal-title":"IEEE Access"},{"issue":"3","key":"887_CR16","doi-asserted-by":"publisher","first-page":"1105","DOI":"10.1007\/s12652-019-01364-5","volume":"11","author":"F Moslehi","year":"2020","unstructured":"Moslehi F, Haeri A. A novel hybrid wrapper\u2013filter approach based on genetic algorithm, particle swarm optimization for feature subset selection. J Ambient Intell Humaniz Comput. 2020;11(3):1105\u201327. https:\/\/doi.org\/10.1007\/s12652-019-01364-5.","journal-title":"J Ambient Intell Humaniz Comput"},{"key":"887_CR17","doi-asserted-by":"publisher","first-page":"39496","DOI":"10.1109\/ACCESS.2019.2906757","volume":"7","author":"Q Al-Tashi","year":"2019","unstructured":"Al-Tashi Q, Abdul Kadir SJ, Rais HM, Mirjalili S, Alhussian H. Binary optimization using hybrid grey wolf optimization for feature selection. IEEE Access. 2019;7:39496\u2013508. https:\/\/doi.org\/10.1109\/ACCESS.2019.2906757.","journal-title":"IEEE Access"},{"key":"887_CR18","doi-asserted-by":"publisher","first-page":"191850","DOI":"10.1109\/ACCESS.2020.3030642","volume":"8","author":"A Rasool","year":"2020","unstructured":"Rasool A, Tao R, Kamyab M, Hayat S. GAWA-A feature selection method for hybrid sentiment classification. IEEE Access. 2020;8:191850\u201361. https:\/\/doi.org\/10.1109\/ACCESS.2020.3030642.","journal-title":"IEEE Access"},{"key":"887_CR19","unstructured":"Sowmya, Anita TM. An intelligent hybrid GA-PI feature selection technique for network intrusion detection systems.\u00a0Int J Intell Syst Appl Eng. 2023: 11(7s); 718\u2013731. https:\/\/www.ijisae.org\/index.php\/IJISAE\/article\/view\/3010."},{"key":"887_CR20","doi-asserted-by":"publisher","unstructured":"Santhi V, Priyadharshini J, Swetha M, Dhanavandhana K. A Hybrid feature extraction method with machine learning for detecting the presence of network attacks. 2023 International conference on intelligent systems for communication, IoT and security (ICISCoIS), coimbatore, India. 2023. https:\/\/doi.org\/10.1109\/ICISCoIS56541.2023.10100339.","DOI":"10.1109\/ICISCoIS56541.2023.10100339"},{"issue":"22","key":"887_CR21","doi-asserted-by":"publisher","first-page":"15119","DOI":"10.1007\/s00521-021-06561-y","volume":"33","author":"EO Abiodun","year":"2021","unstructured":"Abiodun EO, Alabdulatif A, Abiodun OI, Alawida M, Alabdulatif A, Alkhawaldeh RS. A systematic review of emerging feature selection optimization methods for optimal text classification: the present state and prospective opportunities. Neural Comput Appl. 2021;33(22):15119. https:\/\/doi.org\/10.1007\/s00521-021-06561-y.","journal-title":"Neural Comput Appl"},{"key":"887_CR22","doi-asserted-by":"publisher","first-page":"28","DOI":"10.1016\/J.PATREC.2015.10.005","volume":"69","author":"A Ben Brahim","year":"2016","unstructured":"Ben Brahim A, Limam M. A hybrid feature selection method based on instance learning and cooperative subset search. Pattern Recogn Lett. 2016;69:28\u201334. https:\/\/doi.org\/10.1016\/J.PATREC.2015.10.005.","journal-title":"Pattern Recogn Lett"},{"key":"887_CR23","unstructured":"Raschka S. Sequential Feature Selector: The popular forward and backward feature selection approaches (including floating variants)\u2013mlxtend. 2022. http:\/\/rasbt.github.io\/mlxtend\/user_guide\/feature_selection\/SequentialFeatureSelector\/#:~:text=RFE%20is%20computationally%20less%20complex,defined%20classifier%2Fregression%20performance%20metric."},{"key":"887_CR24","doi-asserted-by":"publisher","unstructured":"Fahmiin MA, Lim TH. Evaluating the effectiveness of wrapper feature selection methods with Arti fi cial neural network Classi fi er for diabetes prediction. 2020. https:\/\/doi.org\/10.1007\/978-3-030-43215-7.","DOI":"10.1007\/978-3-030-43215-7"},{"key":"887_CR25","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2021.107132","volume":"226","author":"PR Kanna","year":"2021","unstructured":"Kanna PR, Santhi P. Unified deep learning approach for efficient intrusion detection system using integrated spatial-temporal features. Knowl-Based Syst. 2021;226: 107132. https:\/\/doi.org\/10.1016\/j.knosys.2021.107132.","journal-title":"Knowl-Based Syst"},{"key":"887_CR26","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2022.116545","volume":"194","author":"PR Kanna","year":"2022","unstructured":"Kanna PR, Santhi P. Hybrid intrusion detection using mapreduce based black widow optimized convolutional long short-term memory neural networks. Expert Syst Appl. 2022;194: 116545. https:\/\/doi.org\/10.1016\/j.eswa.2022.116545.","journal-title":"Expert Syst Appl"},{"key":"887_CR27","doi-asserted-by":"publisher","unstructured":"Moustafa N, Slay J. UNSW-NB15: a comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set, 2015 Military Communications and Information Systems Conference (MilCIS), Canberra, ACT, Australia. 2015. https:\/\/doi.org\/10.1109\/MilCIS.2015.7348942.","DOI":"10.1109\/MilCIS.2015.7348942"},{"issue":"1\u20133","key":"887_CR28","doi-asserted-by":"publisher","first-page":"489","DOI":"10.1016\/j.neucom.2005.12.126","volume":"70","author":"GB Huang","year":"2006","unstructured":"Huang GB, Zhu QY, Siew CK. Extreme learning machine: theory and applications. Neurocomputing. 2006;70(1\u20133):489\u2013501. https:\/\/doi.org\/10.1016\/j.neucom.2005.12.126.","journal-title":"Neurocomputing"},{"issue":"6","key":"887_CR29","doi-asserted-by":"publisher","first-page":"1543","DOI":"10.1007\/s13042-018-0833-6","volume":"10","author":"M Eshtay","year":"2019","unstructured":"Eshtay M, Faris H, Obeid N. Metaheuristic-based extreme learning machines: a review of design formulations and applications. Int J Mach Learn Cybern. 2019;10(6):1543\u201361. https:\/\/doi.org\/10.1007\/s13042-018-0833-6.","journal-title":"Int J Mach Learn Cybern"},{"issue":"3","key":"887_CR30","doi-asserted-by":"publisher","first-page":"711","DOI":"10.1007\/s10772-019-09621-w","volume":"22","author":"MAA Albadr","year":"2019","unstructured":"Albadr MAA, Tiun S, Ayob M, AL-Dhief FT. Spoken language identification based on optimised genetic algorithm\u2013extreme learning machine approach. Int J Speech Technol. 2019;22(3):711\u201327. https:\/\/doi.org\/10.1007\/s10772-019-09621-w.","journal-title":"Int J Speech Technol"},{"key":"887_CR31","doi-asserted-by":"publisher","unstructured":"Kumari A, Mehta AK. A hybrid intrusion detection system based on decision tree and support vector machine. 2020 IEEE 5th International Conference on Computing Communication and Automation, ICCCA 2020. https:\/\/doi.org\/10.1109\/ICCCA49541.2020.9250753","DOI":"10.1109\/ICCCA49541.2020.9250753"},{"key":"887_CR32","doi-asserted-by":"publisher","unstructured":"Chen C, Song L, Bo C, Shuo W. A support vector machine with particle swarm optimization grey wolf optimizer for network intrusion detection. proceedings-2021 International Conference on Big Data Analysis and Computer Science, BDACS. 2021. https:\/\/doi.org\/10.1109\/BDACS53596.2021.00051","DOI":"10.1109\/BDACS53596.2021.00051"},{"key":"887_CR33","doi-asserted-by":"publisher","DOI":"10.1007\/BF00994018","author":"C Cortes","year":"1995","unstructured":"Cortes C, Vapnik V. Support-vector networks. Mach Learn. 1995. https:\/\/doi.org\/10.1007\/BF00994018.","journal-title":"Mach Learn"},{"key":"887_CR34","unstructured":"Moustafa N. The TON_IoT Datasets. 2020. https:\/\/www.unsw.adfa.edu.au\/unsw-canberra-cyber\/cyberse%0Acurity\/ADFA-ton-iot-Datasets\/"},{"issue":"April","key":"887_CR35","doi-asserted-by":"publisher","DOI":"10.1016\/j.scs.2021.102994","volume":"72","author":"N Moustafa","year":"2021","unstructured":"Moustafa N. A new distributed architecture for evaluating AI-based security systems at the edge: network TON_IoT datasets. Sustain Cities Soc. 2021;72(April): 102994. https:\/\/doi.org\/10.1016\/j.scs.2021.102994.","journal-title":"Sustain Cities Soc"},{"key":"887_CR36","doi-asserted-by":"publisher","first-page":"33789","DOI":"10.1109\/ACCESS.2018.2841987","volume":"6","author":"I Ahmad","year":"2018","unstructured":"Ahmad I, Basheri M, Iqbal MJ, Rahim A. Performance comparison of support vector machine, random forest, and extreme learning machine for intrusion detection. IEEE Access. 2018;6:33789\u201395. https:\/\/doi.org\/10.1109\/ACCESS.2018.2841987.","journal-title":"IEEE Access"}],"container-title":["Journal of Big Data"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s40537-024-00887-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1186\/s40537-024-00887-9\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s40537-024-00887-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,2,1]],"date-time":"2024-02-01T11:16:08Z","timestamp":1706786168000},"score":1,"resource":{"primary":{"URL":"https:\/\/journalofbigdata.springeropen.com\/articles\/10.1186\/s40537-024-00887-9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,2,1]]},"references-count":36,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2024,12]]}},"alternative-id":["887"],"URL":"https:\/\/doi.org\/10.1186\/s40537-024-00887-9","relation":{},"ISSN":["2196-1115"],"issn-type":[{"value":"2196-1115","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,2,1]]},"assertion":[{"value":"27 April 2023","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"19 January 2024","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"1 February 2024","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"Not applicable.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethics approval and consent to participate"}},{"value":"The authors give their consent for publication.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Consent for publication"}},{"value":"The author declares no competing interests.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"24"}}