{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,19]],"date-time":"2026-05-19T06:27:49Z","timestamp":1779172069246,"version":"3.51.4"},"reference-count":58,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2024,2,24]],"date-time":"2024-02-24T00:00:00Z","timestamp":1708732800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2024,2,24]],"date-time":"2024-02-24T00:00:00Z","timestamp":1708732800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Big Data"],"abstract":"<jats:title>Abstract<\/jats:title><jats:p>Internet of Things (IoT) devices are widely used but also vulnerable to cyberattacks that can cause security issues. To protect against this, machine learning approaches have been developed for network intrusion detection in IoT. These often use feature reduction techniques like feature selection or extraction before feeding data to models. This helps make detection efficient for real-time needs. This paper thoroughly compares feature extraction and selection for IoT network intrusion detection in machine learning-based attack classification framework. It looks at performance metrics like accuracy, f1-score, and runtime, etc. on the heterogenous IoT dataset named Network TON-IoT using binary and multiclass classification. Overall, feature extraction gives better detection performance than feature selection as the number of features is small. Moreover, extraction shows less feature reduction compared with that of selection, and is less sensitive to changes in the number of features. However, feature selection achieves less model training and inference time compared with its counterpart. Also, more space to improve the accuracy for selection than extraction when the number of features changes. This holds for both binary and multiclass classification. The study provides guidelines for selecting appropriate intrusion detection methods for particular scenarios. Before, the TON-IoT heterogeneous IoT dataset comparison and recommendations were overlooked. Overall, the research presents a thorough comparison of feature reduction techniques for machine learning-driven intrusion detection in IoT networks.<\/jats:p>","DOI":"10.1186\/s40537-024-00892-y","type":"journal-article","created":{"date-parts":[[2024,2,24]],"date-time":"2024-02-24T12:02:09Z","timestamp":1708776129000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":147,"title":["Optimizing IoT intrusion detection system: feature selection versus feature extraction in machine learning"],"prefix":"10.1186","volume":"11","author":[{"given":"Jing","family":"Li","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mohd Shahizan","family":"Othman","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hewan","family":"Chen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lizawati Mi","family":"Yusuf","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,2,24]]},"reference":[{"issue":"4","key":"892_CR1","doi-asserted-by":"publisher","first-page":"2347","DOI":"10.1109\/COMST.2015.2444095","volume":"17","author":"A Al-Fuqaha","year":"2015","unstructured":"Al-Fuqaha A, Guizani M, Mohammadi M, Aledhari M, Ayyash M. Internet of things: a survey on enabling technologies, protocols, and applications. IEEE Commun Surv Tutor. 2015;17(4):2347\u201376. https:\/\/doi.org\/10.1109\/COMST.2015.2444095.","journal-title":"IEEE Commun Surv Tutor"},{"issue":"2","key":"892_CR2","doi-asserted-by":"publisher","first-page":"1606","DOI":"10.1109\/JIOT.2018.2847733","volume":"6","author":"W Zhou","year":"2019","unstructured":"Zhou W, Jia Y, Peng A, Zhang Y, Liu P. The effect of IoT new features on security and privacy: new threats, existing solutions, and challenges yet to be solved. IEEE Internet Things J. 2019;6(2):1606\u201316. https:\/\/doi.org\/10.1109\/JIOT.2018.2847733.","journal-title":"IEEE Internet Things J"},{"issue":"3","key":"892_CR3","doi-asserted-by":"publisher","first-page":"2671","DOI":"10.1109\/COMST.2019.2896380","volume":"21","author":"N Chaabouni","year":"2019","unstructured":"Chaabouni N, Mosbah M, Zemmari A, Sauvignac C, Faruki P. Network intrusion detection for IoT security based on learning techniques. IEEE Commun Surv Tutor. 2019;21(3):2671\u2013701. https:\/\/doi.org\/10.1109\/COMST.2019.2896380.","journal-title":"IEEE Commun Surv Tutor"},{"issue":"1","key":"892_CR4","doi-asserted-by":"publisher","first-page":"686","DOI":"10.1109\/COMST.2018.2847722","volume":"21","author":"P Mishra","year":"2019","unstructured":"Mishra P, Varadharajan V, Tupakula U, Pilli ES. A detailed investigation and analysis of using machine learning techniques for intrusion detection. IEEE Commun Surv Tutor. 2019;21(1):686\u2013728. https:\/\/doi.org\/10.1109\/COMST.2018.2847722.","journal-title":"IEEE Commun Surv Tutor"},{"key":"892_CR5","doi-asserted-by":"publisher","first-page":"94497","DOI":"10.1109\/ACCESS.2019.2928048","volume":"7","author":"BA Tama","year":"2019","unstructured":"Tama BA, Comuzzi M, Rhee K-H. TSE-IDS: a two-stage classifier ensemble for intelligent anomaly-based intrusion detection system. IEEE Access. 2019;7:94497\u2013507. https:\/\/doi.org\/10.1109\/ACCESS.2019.2928048.","journal-title":"IEEE Access"},{"key":"892_CR6","unstructured":"Hall MA. Correlation-based feature selection for machine learning. Doctoral dissertation, The University of Waikato; 1999. p. 198."},{"key":"892_CR7","doi-asserted-by":"publisher","first-page":"41238","DOI":"10.1109\/ACCESS.2018.2858277","volume":"6","author":"B Yan","year":"2018","unstructured":"Yan B, Han G. Effective feature extraction via stacked sparse autoencoder to improve intrusion detection system. IEEE Access. 2018;6:41238\u201348. https:\/\/doi.org\/10.1109\/ACCESS.2018.2858277.","journal-title":"IEEE Access"},{"issue":"4","key":"892_CR8","doi-asserted-by":"publisher","first-page":"1184","DOI":"10.1016\/j.jnca.2011.01.002","volume":"34","author":"F Amiri","year":"2011","unstructured":"Amiri F, Rezaei Yousefi M, Lucas C, Shakery A, Yazdani N. Mutual information-based feature selection for intrusion detection systems. J Netw Comput Appl. 2011;34(4):1184\u201399. https:\/\/doi.org\/10.1016\/j.jnca.2011.01.002.","journal-title":"J Netw Comput Appl"},{"issue":"3","key":"892_CR9","doi-asserted-by":"publisher","first-page":"621","DOI":"10.1109\/TIFS.2017.2762828","volume":"13","author":"ME Aminanto","year":"2018","unstructured":"Aminanto ME, Choi R, Tanuwidjaja HC, Yoo PD, Kim K. Deep abstraction and weighted feature selection for Wi-Fi impersonation detection. IEEE Trans Inform Forensic Secur. 2018;13(3):621\u201336. https:\/\/doi.org\/10.1109\/TIFS.2017.2762828.","journal-title":"IEEE Trans Inform Forensic Secur"},{"key":"892_CR10","doi-asserted-by":"publisher","unstructured":"Zachos G, Essop I, Mantas G, Porfyrakis K, Ribeiro JC, Rodriguez J. Generating IoT edge network datasets based on the TON_IoT telemetry dataset. In: 2021 IEEE 26th international workshop on computer aided modeling and design of communication links and networks (CAMAD), Porto, Portugal. IEEE; 2021. p. 1\u20136. https:\/\/doi.org\/10.1109\/CAMAD52502.2021.9617799.","DOI":"10.1109\/CAMAD52502.2021.9617799"},{"key":"892_CR11","doi-asserted-by":"publisher","DOI":"10.1016\/j.engappai.2023.107231","volume":"127","author":"M Saied","year":"2024","unstructured":"Saied M, Guirguis S, Madbouly M. Review of artificial intelligence for enhancing intrusion detection in the internet of things. Eng Appl Artif Intell. 2024;127: 107231. https:\/\/doi.org\/10.1016\/j.engappai.2023.107231.","journal-title":"Eng Appl Artif Intell"},{"issue":"10","key":"892_CR12","doi-asserted-by":"publisher","first-page":"2986","DOI":"10.1109\/TC.2016.2519914","volume":"65","author":"MA Ambusaidi","year":"2016","unstructured":"Ambusaidi MA, He X, Nanda P, Tan Z. Building an intrusion detection system using a filter-based feature selection algorithm. IEEE Trans Comput. 2016;65(10):2986\u201398. https:\/\/doi.org\/10.1109\/TC.2016.2519914.","journal-title":"IEEE Trans Comput"},{"key":"892_CR13","doi-asserted-by":"publisher","unstructured":"Song J, Takakura H, Okabe Y, Eto M, Inoue D, Nakao K. Statistical analysis of honeypot data and building of Kyoto 2006+ dataset for NIDS evaluation. In: Proceedings of the first workshop on building analysis datasets and gathering experience returns for security, Salzburg Austria. ACM; 2011. p. 29\u201336. https:\/\/doi.org\/10.1145\/1978672.1978676.","DOI":"10.1145\/1978672.1978676"},{"issue":"1","key":"892_CR14","doi-asserted-by":"publisher","first-page":"105","DOI":"10.1186\/s40537-020-00379-6","volume":"7","author":"SM Kasongo","year":"2020","unstructured":"Kasongo SM, Sun Y. Performance analysis of intrusion detection systems using a feature selection method on the UNSW-NB15 dataset. J Big Data. 2020;7(1):105. https:\/\/doi.org\/10.1186\/s40537-020-00379-6.","journal-title":"J Big Data"},{"key":"892_CR15","doi-asserted-by":"publisher","unstructured":"Moustafa N, Slay J. UNSW-NB15: a comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set). In: 2015 military communications and information systems conference (MilCIS), Canberra, Australia. IEEE; 2015. p. 1\u20136. https:\/\/doi.org\/10.1109\/MilCIS.2015.7348942.","DOI":"10.1109\/MilCIS.2015.7348942"},{"issue":"1","key":"892_CR16","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1186\/s42400-021-00103-8","volume":"5","author":"RA Disha","year":"2022","unstructured":"Disha RA, Waheed S. Performance analysis of machine learning models for intrusion detection system using Gini impurity-based weighted random forest (GIWRF) feature selection technique. Cybersecurity. 2022;5(1):1. https:\/\/doi.org\/10.1186\/s42400-021-00103-8.","journal-title":"Cybersecurity"},{"issue":"5","key":"892_CR17","doi-asserted-by":"publisher","first-page":"3242","DOI":"10.1109\/JIOT.2020.3002255","volume":"8","author":"M Shafiq","year":"2021","unstructured":"Shafiq M, Tian Z, Bashir AK, Du X, Guizani M. CorrAUC: a malicious Bot-IoT traffic detection method in iot network using machine-learning techniques. IEEE Internet Things J. 2021;8(5):3242\u201354. https:\/\/doi.org\/10.1109\/JIOT.2020.3002255.","journal-title":"IEEE Internet Things J"},{"key":"892_CR18","doi-asserted-by":"publisher","first-page":"779","DOI":"10.1016\/j.future.2019.05.041","volume":"100","author":"N Koroniotis","year":"2019","unstructured":"Koroniotis N, Moustafa N, Sitnikova E, Turnbull B. Towards the development of realistic botnet dataset in the Internet of Things for network forensic analytics: Bot-IoT dataset. Futur Gener Comput Syst. 2019;100:779\u201396. https:\/\/doi.org\/10.1016\/j.future.2019.05.041.","journal-title":"Futur Gener Comput Syst"},{"key":"892_CR19","doi-asserted-by":"publisher","first-page":"255","DOI":"10.1016\/j.cose.2017.06.005","volume":"70","author":"C Khammassi","year":"2017","unstructured":"Khammassi C, Krichen S. A GA-LR wrapper approach for feature selection in network intrusion detection. Comput Secur. 2017;70:255\u201377. https:\/\/doi.org\/10.1016\/j.cose.2017.06.005.","journal-title":"Comput Secur"},{"issue":"6","key":"892_CR20","doi-asserted-by":"publisher","first-page":"1669","DOI":"10.1007\/s00521-015-1964-2","volume":"27","author":"BM Aslahi-Shahri","year":"2016","unstructured":"Aslahi-Shahri BM, et al. A hybrid method consisting of GA and SVM for intrusion detection system. Neural Comput Appl. 2016;27(6):1669\u201376. https:\/\/doi.org\/10.1007\/s00521-015-1964-2.","journal-title":"Neural Comput Appl"},{"key":"892_CR21","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102448","volume":"110","author":"Z Halim","year":"2021","unstructured":"Halim Z, et al. An effective genetic algorithm-based feature selection method for intrusion detection systems. Comput Secur. 2021;110: 102448. https:\/\/doi.org\/10.1016\/j.cose.2021.102448.","journal-title":"Comput Secur"},{"key":"892_CR22","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2020.113249","volume":"148","author":"H Alazzam","year":"2020","unstructured":"Alazzam H, Sharieh A, Sabri KE. A feature selection algorithm for intrusion detection system based on Pigeon inspired optimizer. Expert Syst Appl. 2020;148: 113249. https:\/\/doi.org\/10.1016\/j.eswa.2020.113249.","journal-title":"Expert Syst Appl"},{"key":"892_CR23","doi-asserted-by":"publisher","first-page":"38254","DOI":"10.1109\/ACCESS.2021.3063671","volume":"9","author":"J Liu","year":"2021","unstructured":"Liu J, Yang D, Lian M, Li M. Research on intrusion detection based on particle swarm optimization in IoT. IEEE Access. 2021;9:38254\u201368. https:\/\/doi.org\/10.1109\/ACCESS.2021.3063671.","journal-title":"IEEE Access"},{"key":"892_CR24","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102684","volume":"117","author":"A Chohra","year":"2022","unstructured":"Chohra A, Shirani P, Karbab EB, Debbabi M. Chameleon: optimized feature selection using particle swarm optimization and ensemble methods for network anomaly detection. Comput Secur. 2022;117: 102684. https:\/\/doi.org\/10.1016\/j.cose.2022.102684.","journal-title":"Comput Secur"},{"key":"892_CR25","doi-asserted-by":"publisher","unstructured":"Moustafa N, Slay J. A hybrid feature selection for network intrusion detection systems: central points. In: Proceedings of the 16th Australian information warfare conference, held on the 30 November\u20132 December, 2015. p. 5\u201313. https:\/\/doi.org\/10.4225\/75\/57A84D4FBEFBB.","DOI":"10.4225\/75\/57A84D4FBEFBB"},{"issue":"3","key":"892_CR26","doi-asserted-by":"publisher","first-page":"4815","DOI":"10.1109\/JIOT.2018.2871719","volume":"6","author":"N Moustafa","year":"2019","unstructured":"Moustafa N, Turnbull B, Choo K-KR. An ensemble intrusion detection technique based on proposed statistical flow features for protecting network traffic of internet of things. IEEE Internet Things J. 2019;6(3):4815\u201330. https:\/\/doi.org\/10.1109\/JIOT.2018.2871719.","journal-title":"IEEE Internet Things J"},{"issue":"1","key":"892_CR27","doi-asserted-by":"publisher","first-page":"6","DOI":"10.1186\/s40537-021-00558-z","volume":"9","author":"JL Leevy","year":"2022","unstructured":"Leevy JL, Hancock J, Khoshgoftaar TM, Peterson JM. IoT information theft prediction using ensemble feature selection. J Big Data. 2022;9(1):6. https:\/\/doi.org\/10.1186\/s40537-021-00558-z.","journal-title":"J Big Data"},{"issue":"1\u20133","key":"892_CR28","doi-asserted-by":"publisher","first-page":"18","DOI":"10.1080\/19393555.2015.1125974","volume":"25","author":"N Moustafa","year":"2016","unstructured":"Moustafa N, Slay J. The evaluation of network anomaly detection systems: statistical analysis of the UNSW-NB15 data set and the comparison with the KDD99 data set. Inf Secur J Glob Perspect. 2016;25(1\u20133):18\u201331. https:\/\/doi.org\/10.1080\/19393555.2015.1125974.","journal-title":"Inf Secur J Glob Perspect"},{"issue":"6","key":"892_CR29","doi-asserted-by":"publisher","first-page":"2609","DOI":"10.1007\/s11276-022-02988-w","volume":"28","author":"S Gavel","year":"2022","unstructured":"Gavel S, Raghuvanshi AS, Tiwari S. An optimized maximum correlation based feature reduction scheme for intrusion detection in data networks. Wirel Netw. 2022;28(6):2609\u201324. https:\/\/doi.org\/10.1007\/s11276-022-02988-w.","journal-title":"Wirel Netw"},{"key":"892_CR30","doi-asserted-by":"publisher","first-page":"67","DOI":"10.1016\/j.future.2022.02.006","volume":"132","author":"L Zhou","year":"2022","unstructured":"Zhou L, Zhu Y, Zong T, Xiang Y. A feature selection-based method for DDoS attack flow classification. Futur Gener Comput Syst. 2022;132:67\u201379. https:\/\/doi.org\/10.1016\/j.future.2022.02.006.","journal-title":"Futur Gener Comput Syst"},{"key":"892_CR31","doi-asserted-by":"publisher","first-page":"28","DOI":"10.4018\/978-1-5225-2848-7.ch002","volume-title":"Handbook of research on advanced concepts in real-time image and video processing","author":"K Arora","year":"2018","unstructured":"Arora K, Aggarwal AK. Approaches for image database retrieval based on color, texture, and shape features. In: Handbook of research on advanced concepts in real-time image and video processing. Hershey: IGI Global; 2018. p. 28\u201350."},{"key":"892_CR32","doi-asserted-by":"crossref","unstructured":"Miseikis J, Brijacak I, Yahyanejad S, Glette K, Elle OJ, Torresen J. Multi-objective convolutional neural networks for robot localisation and 3D position estimation in 2D camera images. In: 2018 15th international conference on ubiquitous robots (UR). IEEE; 2018. p. 597\u2013603.","DOI":"10.1109\/URAI.2018.8441813"},{"key":"892_CR33","doi-asserted-by":"publisher","first-page":"60","DOI":"10.37394\/232014.2022.18.8","volume":"18","author":"AK Aggarwal","year":"2022","unstructured":"Aggarwal AK. Learning texture features from glcm for classification of brain tumor MRI images using random forest classifier. Trans Signal Process. 2022;18:60\u20133.","journal-title":"Trans Signal Process"},{"key":"892_CR34","doi-asserted-by":"publisher","first-page":"696","DOI":"10.1007\/11527503_82","volume-title":"Advanced data mining and applications","author":"X Xu","year":"2005","unstructured":"Xu X, Wang X. An adaptive network intrusion detection method based on PCA and support vector machines. In: Li X, Wang S, Dong ZY, editors. Advanced data mining and applications. Berlin: Springer; 2005. p. 696\u2013703."},{"issue":"7\u20139","key":"892_CR35","doi-asserted-by":"publisher","first-page":"1561","DOI":"10.1016\/j.neucom.2006.10.146","volume":"70","author":"G Liu","year":"2007","unstructured":"Liu G, Yi Z, Yang S. A hierarchical intrusion detection model based on the PCA neural networks. Neurocomputing. 2007;70(7\u20139):1561\u20138. https:\/\/doi.org\/10.1016\/j.neucom.2006.10.146.","journal-title":"Neurocomputing"},{"key":"892_CR36","doi-asserted-by":"publisher","first-page":"178","DOI":"10.1016\/j.asoc.2014.01.028","volume":"18","author":"F Kuang","year":"2014","unstructured":"Kuang F, Xu W, Zhang S. A novel hybrid KPCA and SVM with GA model for intrusion detection. Appl Soft Comput. 2014;18:178\u201384. https:\/\/doi.org\/10.1016\/j.asoc.2014.01.028.","journal-title":"Appl Soft Comput"},{"key":"892_CR37","doi-asserted-by":"publisher","unstructured":"Abdulhammed R, Faezipour M, Musafer H, Abuzneid A. Efficient network intrusion detection using PCA-based dimensionality reduction of features. In: 2019 international symposium on networks, computers and communications (ISNCC), Istanbul, Turkey. IEEE; 2019. p. 1\u20136. https:\/\/doi.org\/10.1109\/ISNCC.2019.8909140.","DOI":"10.1109\/ISNCC.2019.8909140"},{"issue":"9","key":"892_CR38","doi-asserted-by":"publisher","first-page":"6503","DOI":"10.1109\/TII.2021.3139363","volume":"18","author":"L Qi","year":"2022","unstructured":"Qi L, Yang Y, Zhou X, Rafique W, Ma J. Fast anomaly identification based on multiaspect data streams for intelligent intrusion detection toward secure industry 4.0. IEEE Trans Ind Inf. 2022;18(9):6503\u201311. https:\/\/doi.org\/10.1109\/TII.2021.3139363.","journal-title":"IEEE Trans Ind Inf"},{"key":"892_CR39","doi-asserted-by":"publisher","first-page":"1545","DOI":"10.1109\/GLOCOMW.2010.5700198","volume":"2010","author":"Z Tan","year":"2010","unstructured":"Tan Z, Jamdagni A, He X, Nanda P. Network intrusion detection based on LDA for payload feature selection. IEEE Globecom Workshops. 2010;2010:1545\u20139. https:\/\/doi.org\/10.1109\/GLOCOMW.2010.5700198.","journal-title":"IEEE Globecom Workshops"},{"issue":"1","key":"892_CR40","doi-asserted-by":"publisher","first-page":"61","DOI":"10.1007\/s10844-015-0388-x","volume":"48","author":"HH Pajouh","year":"2017","unstructured":"Pajouh HH, Dastghaibyfard G, Hashemi S. Two-tier network anomaly detection model: a machine learning approach. J Intell Inf Syst. 2017;48(1):61\u201374. https:\/\/doi.org\/10.1007\/s10844-015-0388-x.","journal-title":"J Intell Inf Syst"},{"issue":"2","key":"892_CR41","doi-asserted-by":"publisher","first-page":"314","DOI":"10.1109\/TETC.2016.2633228","volume":"7","author":"HH Pajouh","year":"2019","unstructured":"Pajouh HH, Javidan R, Khayami R, Dehghantanha A, Choo K-KR. A two-layer dimension reduction and two-tier classification model for anomaly-based intrusion detection in IoT backbone networks. IEEE Trans Emerg Topics Comput. 2019;7(2):314\u201323. https:\/\/doi.org\/10.1109\/TETC.2016.2633228.","journal-title":"IEEE Trans Emerg Topics Comput"},{"key":"892_CR42","doi-asserted-by":"publisher","first-page":"30373","DOI":"10.1109\/ACCESS.2019.2899721","volume":"7","author":"FA Khan","year":"2019","unstructured":"Khan FA, Gumaei A, Derhab A, Hussain A. A novel two-stage deep learning model for efficient network intrusion detection. IEEE Access. 2019;7:30373\u201385. https:\/\/doi.org\/10.1109\/ACCESS.2019.2899721.","journal-title":"IEEE Access"},{"issue":"5","key":"892_CR43","doi-asserted-by":"publisher","first-page":"3469","DOI":"10.1109\/TII.2020.3022432","volume":"17","author":"X Zhou","year":"2021","unstructured":"Zhou X, Hu Y, Liang W, Ma J, Jin Q. Variational LSTM enhanced anomaly detection for industrial big data. IEEE Trans Ind Inf. 2021;17(5):3469\u201377. https:\/\/doi.org\/10.1109\/TII.2020.3022432.","journal-title":"IEEE Trans Ind Inf"},{"issue":"6","key":"892_CR44","doi-asserted-by":"publisher","first-page":"4944","DOI":"10.1109\/JIOT.2020.3034156","volume":"8","author":"SI Popoola","year":"2021","unstructured":"Popoola SI, Adebisi B, Hammoudeh M, Gui G, Gacanin H. Hybrid deep learning for botnet attack detection in the internet-of-things networks. IEEE Internet Things J. 2021;8(6):4944\u201356. https:\/\/doi.org\/10.1109\/JIOT.2020.3034156.","journal-title":"IEEE Internet Things J"},{"issue":"16","key":"892_CR45","doi-asserted-by":"publisher","first-page":"14438","DOI":"10.1109\/JIOT.2021.3078292","volume":"9","author":"T-N Dao","year":"2022","unstructured":"Dao T-N, Lee H. Stacked autoencoder-based probabilistic feature extraction for on-device network intrusion detection. IEEE Internet Things J. 2022;9(16):14438\u201351. https:\/\/doi.org\/10.1109\/JIOT.2021.3078292.","journal-title":"IEEE Internet Things J"},{"key":"892_CR46","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2020.102890","volume":"173","author":"G D\u2019Angelo","year":"2021","unstructured":"D\u2019Angelo G, Palmieri F. Network traffic classification using deep convolutional recurrent autoencoder neural networks for spatial\u2013temporal features extraction. J Netw Comput Appl. 2021;173: 102890. https:\/\/doi.org\/10.1016\/j.jnca.2020.102890.","journal-title":"J Netw Comput Appl"},{"key":"892_CR47","doi-asserted-by":"crossref","unstructured":"Ngo V-D, Vuong T-C, Van Luong T, Tran H. Machine learning-based intrusion detection: feature selection versus feature extraction. arXiv; 2023. http:\/\/arxiv.org\/abs\/2307.01570. Accessed 10 July 2023.","DOI":"10.1007\/s10586-023-04089-5"},{"key":"892_CR48","doi-asserted-by":"publisher","DOI":"10.1016\/j.scs.2021.102994","volume":"72","author":"N Moustafa","year":"2021","unstructured":"Moustafa N. A new distributed architecture for evaluating AI-based security systems at the edge: network TON_IoT datasets. Sustain Cities Soc. 2021;72: 102994. https:\/\/doi.org\/10.1016\/j.scs.2021.102994.","journal-title":"Sustain Cities Soc"},{"issue":"12","key":"892_CR49","first-page":"6","volume":"1","author":"SB Kotsiantis","year":"2007","unstructured":"Kotsiantis SB, Kanellopoulos D, Pintelas PE. Data preprocessing for supervised leaning. Int J Comput Sci. 2007;1(12):6.","journal-title":"Int J Comput Sci"},{"key":"892_CR50","doi-asserted-by":"publisher","unstructured":"Guo G. An intrusion detection system for the internet of things using machine learning models. In: 2022 3rd international conference on big data, artificial intelligence and internet of things engineering (ICBAIE), Xi\u2019an, China. IEEE; 2022. p. 332\u20135. https:\/\/doi.org\/10.1109\/ICBAIE56435.2022.9985800.","DOI":"10.1109\/ICBAIE56435.2022.9985800"},{"key":"892_CR51","doi-asserted-by":"publisher","first-page":"142206","DOI":"10.1109\/ACCESS.2021.3120626","volume":"9","author":"AR Gad","year":"2021","unstructured":"Gad AR, Nashat AA, Barkat TM. Intrusion detection system using machine learning for vehicular ad hoc networks based on ToN-IoT dataset. IEEE Access. 2021;9:142206\u201317. https:\/\/doi.org\/10.1109\/ACCESS.2021.3120626.","journal-title":"IEEE Access"},{"key":"892_CR52","doi-asserted-by":"publisher","unstructured":"Tan Z, Jamdagni A, He X, Nanda P. Network intrusion detection based on LDA for payload feature selection. In: 2010 IEEE Globecom workshops, Miami, FL, USA. IEEE; 2010. p. 1545\u20139. https:\/\/doi.org\/10.1109\/GLOCOMW.2010.5700198.","DOI":"10.1109\/GLOCOMW.2010.5700198"},{"issue":"1","key":"892_CR53","doi-asserted-by":"publisher","first-page":"140","DOI":"10.3390\/s22010140","volume":"22","author":"A Fatani","year":"2021","unstructured":"Fatani A, Dahou A, Al-Qaness MAA, Lu S, Abd Elaziz MA. Advanced feature extraction and selection approach using deep learning and Aquila optimizer for IoT intrusion detection system. Sensors. 2021;22(1):140. https:\/\/doi.org\/10.3390\/s22010140.","journal-title":"Sensors"},{"key":"892_CR54","first-page":"207","volume-title":"Information and communication technology for intelligent systems (ICTIS 2017)","author":"B Ingre","year":"2018","unstructured":"Ingre B, Yadav A, Soni AK. Decision tree based intrusion detection system for NSL-KDD Dataset. In: Satapathy SC, Joshi A, editors. Information and communication technology for intelligent systems (ICTIS 2017), vol. 2. Cham: Springer International Publishing; 2018. p. 207\u201318."},{"key":"892_CR55","doi-asserted-by":"publisher","first-page":"519","DOI":"10.1007\/978-981-13-6001-5_43","volume-title":"Emerging research in computing, information, communication and applications","author":"P Negandhi","year":"2019","unstructured":"Negandhi P, Trivedi Y, Mangrulkar R. Intrusion detection system using random forest on the NSL-KDD dataset. In: Shetty NR, Patnaik LM, Nagaraj HC, Hamsavath PN, Nalini N, editors. Emerging research in computing, information, communication and applications. Singapore: Springer Singapore; 2019. p. 519\u201331."},{"key":"892_CR56","doi-asserted-by":"publisher","unstructured":"Almseidin M, Alzubi M, Kovacs S, Alkasassbeh M. Evaluation of machine learning algorithms for intrusion detection system. In: 2017 IEEE 15th international symposium on intelligent systems and informatics (SISY); 2017. p. 000277\u201382. https:\/\/doi.org\/10.1109\/SISY.2017.8080566.","DOI":"10.1109\/SISY.2017.8080566"},{"key":"892_CR57","doi-asserted-by":"publisher","first-page":"119","DOI":"10.1016\/j.protcy.2012.05.017","volume":"4","author":"S Mukherjee","year":"2012","unstructured":"Mukherjee S, Sharma N. Intrusion detection using Naive Bayes classifier with feature reduction. Procedia Technol. 2012;4:119\u201328. https:\/\/doi.org\/10.1016\/j.protcy.2012.05.017.","journal-title":"Procedia Technol"},{"key":"892_CR58","doi-asserted-by":"publisher","unstructured":"Amato F, Mazzocca N, Moscato F, Vivenzio E. Multilayer perceptron: an intelligent model for classification and intrusion detection. In: 2017 31st international conference on advanced information networking and applications workshops (WAINA); 2017. p. 686\u201391. https:\/\/doi.org\/10.1109\/WAINA.2017.134.","DOI":"10.1109\/WAINA.2017.134"}],"container-title":["Journal of Big Data"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s40537-024-00892-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1186\/s40537-024-00892-y\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s40537-024-00892-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,2,24]],"date-time":"2024-02-24T12:04:44Z","timestamp":1708776284000},"score":1,"resource":{"primary":{"URL":"https:\/\/journalofbigdata.springeropen.com\/articles\/10.1186\/s40537-024-00892-y"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,2,24]]},"references-count":58,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2024,12]]}},"alternative-id":["892"],"URL":"https:\/\/doi.org\/10.1186\/s40537-024-00892-y","relation":{},"ISSN":["2196-1115"],"issn-type":[{"value":"2196-1115","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,2,24]]},"assertion":[{"value":"14 November 2023","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"11 February 2024","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"24 February 2024","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"This research project does not involve the use of human or animal subjects. As such, formal ethical approval was not required for the completion of this study. Informed consent was obtained from all individual participants included in the study.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethics approval and consent to participate"}},{"value":"All authors have consented to the submission and publication of this manuscript. Informed consent for the use of any images, patient details, or other potentially identifiable information has been obtained.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Consent for publication"}},{"value":"The authors declare that they have no competing interests relevant to the publication of this manuscript.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"36"}}