{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T21:57:28Z","timestamp":1780610248138,"version":"3.54.1"},"reference-count":108,"publisher":"MDPI AG","issue":"4","license":[{"start":{"date-parts":[[2025,4,9]],"date-time":"2025-04-09T00:00:00Z","timestamp":1744156800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Algorithms"],"abstract":"<jats:p>This paper presents a systematic literature review based on the PRISMA model on machine learning-based Distributed Denial of Service (DDoS) attacks in Internet of Things (IoT) networks. The primary objective of the review is to compare research trends on deployment options, datasets, and machine learning techniques used in the domain between 2019 and 2024. The results highlight the dominance of certain datasets (BoT-IoT and TON_IoT) in combination with Decision Tree (DT) and Random Forest (RF) models, achieving high median accuracy rates (&gt;99%). This paper discusses various datasets that are used to train and evaluate machine learning (ML) models for detecting Distributed Denial of Service (DDoS) attacks in Internet of Things (IoT) networks and how they impact model performance. Furthermore, the findings suggest that due to hardware limitations, there is a preference for lightweight ML solutions and preprocessed datasets. Current trends indicate that larger or industry-specific datasets will continue to gain popularity alongside more complex ML models, such as deep learning. This emphasizes the need for robust and scalable deployment options, with Software-Defined Networks (SDNs) offering flexibility, edge computing being extensively explored in cloud environments, and blockchain-integrated networks emerging as a promising approach for enhancing security.<\/jats:p>","DOI":"10.3390\/a18040209","type":"journal-article","created":{"date-parts":[[2025,4,9]],"date-time":"2025-04-09T03:32:53Z","timestamp":1744169573000},"page":"209","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":15,"title":["Advancements in Machine Learning-Based Intrusion Detection in IoT: Research Trends and Challenges"],"prefix":"10.3390","volume":"18","author":[{"given":"M\u00e1rton Bendeg\u00faz","family":"Bank\u00f3","sequence":"first","affiliation":[{"name":"DTU Compute, Technical University of Denmark, 2800 Kongens Lyngby, Denmark"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Szymon","family":"Dyszewski","sequence":"additional","affiliation":[{"name":"DTU Compute, Technical University of Denmark, 2800 Kongens Lyngby, Denmark"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Michaela","family":"Kr\u00e1lov\u00e1","sequence":"additional","affiliation":[{"name":"DTU Compute, Technical University of Denmark, 2800 Kongens Lyngby, Denmark"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"M\u00e1rton Bertalan","family":"Limpek","sequence":"additional","affiliation":[{"name":"DTU Compute, Technical University of Denmark, 2800 Kongens Lyngby, Denmark"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3830-7190","authenticated-orcid":false,"given":"Maria","family":"Papaioannou","sequence":"additional","affiliation":[{"name":"DTU Compute, Technical University of Denmark, 2800 Kongens Lyngby, Denmark"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3378-2945","authenticated-orcid":false,"given":"Gaurav","family":"Choudhary","sequence":"additional","affiliation":[{"name":"DTU Compute, Technical University of Denmark, 2800 Kongens Lyngby, Denmark"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9575-2990","authenticated-orcid":false,"given":"Nicola","family":"Dragoni","sequence":"additional","affiliation":[{"name":"DTU Compute, Technical University of Denmark, 2800 Kongens Lyngby, Denmark"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2025,4,9]]},"reference":[{"key":"ref_1","unstructured":"Sinha, S. (2024, November 30). State of IoT 2024: Number of Connected IoT Devices Growing 1318.8 Billion Globally. Available online: https:\/\/iot-analytics.com\/reports-databases\/."},{"key":"ref_2","unstructured":"Marr, B. (Forbes, 2023). 2024 IoT and Smart Device Trends: What You Need to Know for the Future, Forbes."},{"key":"ref_3","unstructured":"Executive, P. (2024, November 30). Preferred Reporting Items for Systematic Reviews and Meta-Analyses (PRISMA) Website. Available online: https:\/\/www.prisma-statement.org\/."},{"key":"ref_4","unstructured":"Executive, P. (2024, November 30). Preferred Reporting Items for Systematic Reviews and Meta-Analyses (PRISMA) Flow Diagram. Available online: https:\/\/www.prisma-statement.org\/prisma-2020-flow-diagram."},{"key":"ref_5","unstructured":"Executive, P. (2024, November 30). Preferred Reporting Items for Systematic Reviews and Meta-Analyses (PRISMA) Checklist. Available online: https:\/\/www.prisma-statement.org\/prisma-2020-checklist."},{"key":"ref_6","unstructured":"(2024, November 30). DTU FindIt Database. Available online: https:\/\/findit.dtu.dk\/."},{"key":"ref_7","unstructured":"(2024, November 30). DTU FindIt Data Providers. Available online: https:\/\/findit.dtu.dk\/en\/about\/providers\/."},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Desbiens, F. (2023). What Is IoT?. Building Enterprise IoT Solutions with Eclipse IoT Technologies, Apress.","DOI":"10.1007\/978-1-4842-8882-5"},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Tawalbeh, L., Muheidat, F., Tawalbeh, M., and Quwaider, M. (2020). IoT Privacy and Security: Challenges and Solutions. Appl. Sci., 10.","DOI":"10.3390\/app10124102"},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"28934","DOI":"10.1109\/ACCESS.2023.3260256","article-title":"FMDADM: A Multi-Layer DDoS Attack Detection and Mitigation Framework Using Machine Learning for Stateful SDN-Based IoT Networks","volume":"11","author":"Khedr","year":"2023","journal-title":"IEEE Access"},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"2545","DOI":"10.1109\/JIOT.2021.3077803","article-title":"Federated-Learning-Based Anomaly Detection for IoT Security Attacks","volume":"9","author":"Mothukuri","year":"2022","journal-title":"IEEE Internet Things J."},{"key":"ref_12","unstructured":"IEEE Xplore (2024, November 30). IEEE Xplore Digital Library. Available online: https:\/\/ieeexplore.ieee.org\/Xplore\/home.jsp."},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Dulhare, U.N., Ahmad, K., and Ahmad, K.A.B. (2020). What is Machine Learning?. Machine Learning and Big Data: Concepts, Algorithms, Tools, and Applications, John Wiley & Sons.","DOI":"10.1002\/9781119654834"},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Zhang, J., Li, F., and Ye, F. (2020, January 7\u201311). An ensemble-based network intrusion detection scheme with bayesian deep learning. Proceedings of the ICC 2020\u20142020 IEEE International Conference on Communications (ICC), Dublin, Ireland.","DOI":"10.1109\/ICC40277.2020.9149402"},{"key":"ref_15","first-page":"4","article-title":"What is the difference between Denial-of-Service (DoS) and Distributed-Denial-of-Service (DDoS)?","volume":"2002","author":"Duke","year":"2002","journal-title":"Netw. Secur."},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"7","DOI":"10.1016\/S1353-4858(08)70086-2","article-title":"DDoS attack evolution","volume":"2008","author":"Nazario","year":"2008","journal-title":"Netw. Secur."},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Lee, N. (2024). Intrusion Detection System. Encyclopedia of Computer Graphics and Games, Springer International Publishing.","DOI":"10.1007\/978-3-031-23161-2_300686"},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Dutta, N., Jadav, N., Tanwar, S., Sarma, H.K.D., and Pricop, E. (2022). Intrusion Detection Systems Fundamentals. Cyber Security: Issues and Current Trends, Springer.","DOI":"10.1007\/978-981-16-6597-4"},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Rafique, S.H., Abdallah, A., Musa, N.S., and Murugan, T. (2024). Machine Learning and Deep Learning Techniques for Internet of Things Network Anomaly Detection\u2014Current Research Trends. Sensors, 24.","DOI":"10.3390\/s24061968"},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"59353","DOI":"10.1109\/ACCESS.2021.3073408","article-title":"Internet of Things Applications, Security Challenges, Attacks, Intrusion Detection, and Future Visions: A Systematic Review","volume":"9","author":"Mishra","year":"2021","journal-title":"IEEE Access"},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Zaman, S., Tauqeer, H., Ahmad, W., Shah, S.M.A., and Ilyas, M. (2020, January 5\u20137). Implementation of Intrusion Detection System in the Internet of Things: A Survey. Proceedings of the 2020 IEEE 23rd International Multitopic Conference (INMIC), Bahawalpur, Pakistan.","DOI":"10.1109\/INMIC50486.2020.9318047"},{"key":"ref_22","unstructured":"Abinaya, M., Prabakeran, S., and Kalpana, M. (2023, January 17\u201318). Comparative Evaluation on Various Machine Learning Strategies Based on Identification of DDoS Attacks in IoT Environment. Proceedings of the 2023 9th International Conference on Advanced Computing and Communication Systems (ICACCS), Coimbatore, India."},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Vivek, V., and Veeravalli, B. (2024, January 4\u20136). A Survey on Machine Learning Approaches for Intrusion Detection in Cloud Computing Environments for Improving Routing Payload Security and Network Privacy. Proceedings of the 2024 IEEE International Conference on Industry 4.0, Artificial Intelligence, and Communications Technology (IAICT), Bali, Indonesia.","DOI":"10.1109\/IAICT62357.2024.10617793"},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Walling, S., and Lodh, S. (2022, January 3\u20135). A Survey on Intrusion Detection Systems: Types, Datasets, Machine Learning methods for NIDS and Challenges. Proceedings of the 2022 13th International Conference on Computing Communication and Networking Technologies (ICCCNT), Kharagpur, India.","DOI":"10.1109\/ICCCNT54827.2022.9984320"},{"key":"ref_25","unstructured":"Moustafa, N. (2024, November 30). The TON_IoT Datasets. Available online: https:\/\/research.unsw.edu.au\/projects\/toniot-datasets."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"779","DOI":"10.1016\/j.future.2019.05.041","article-title":"Towards the development of realistic botnet dataset in the Internet of Things for network forensic analytics: Bot-IoT dataset","volume":"100","author":"Koroniotis","year":"2019","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Sharafaldin, I., Lashkari, A.H., and Ghorbani, A.A. (2024, November 30). CICIDS2017 Dataset. Available online: https:\/\/www.unb.ca\/cic\/datasets\/ids-2017.html.","DOI":"10.13052\/jsn2445-9739.2017.009"},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Alzahrani, R., and Alzahrani, A. (2023). A Novel Multi Algorithm Approach to Identify Network Anomalies in the IoT Using Fog Computing and a Model to Distinguish between IoT and Non-IoT Devices. J. Sens. Actuator Netw., 12.","DOI":"10.3390\/jsan12020019"},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Roopak, M., Yun Tian, G., and Chambers, J. (2019, January 7\u20139). Deep Learning Models for Cyber Security in IoT Networks. Proceedings of the 2019 IEEE 9th Annual Computing and Communication Workshop and Conference (CCWC), Las Vegas, NV, USA.","DOI":"10.1109\/CCWC.2019.8666588"},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Katsura, Y., Endo, A., Kakiuchi, M., Arai, I., and Fujikawa, K. (2022, January 18\u201321). Lightweight Intrusion Detection Using Multiple Entropies of Traffic Behavior in IoT Networks. Proceedings of the 2022 IEEE Global Conference on Artificial Intelligence and Internet of Things (GCAIoT), Alamein New City, Egypt.","DOI":"10.1109\/GCAIoT57150.2022.10019223"},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Kumar, J., and Arul Leena Rose, P.J. (2023). Mitigate Volumetric DDoS Attack using Machine Learning Algorithm in SDN based IoT Network Environment. Int. J. Adv. Comput. Sci. Appl., 14.","DOI":"10.14569\/IJACSA.2023.0140161"},{"key":"ref_32","unstructured":"Jyothsna, V. (2024, January 2\u20134). Defending Against IoT Threats: A Comprehensive Framework with Advanced Models and Real-Time Threat Intelligence for DDoS Detection. Proceedings of the 2024 2nd International Conference on Networking and Communications (ICNWC), Chennai, India."},{"key":"ref_33","first-page":"4985","article-title":"Multi-Attack Intrusion Detection System for Software-Defined Internet of Things Network","volume":"75","author":"Manene","year":"2023","journal-title":"Comput. Mater. Contin."},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"106432","DOI":"10.1016\/j.engappai.2023.106432","article-title":"Towards a machine learning-based framework for DDOS attack detection in software-defined IoT (SD-IoT) networks","volume":"123","author":"Bhayo","year":"2023","journal-title":"Eng. Appl. Artif. Intell."},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"101231","DOI":"10.1016\/j.iot.2024.101231","article-title":"MULTI-BLOCK: A novel ML-based intrusion detection framework for SDN-enabled IoT networks using new pyramidal structure","volume":"26","author":"Toony","year":"2024","journal-title":"Internet Things"},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Tawfik, M., Al-Zidi, N.M., Alsellami, B., Al-Hejri, A.M., and Nimbhore, S. (2021, January 17\u201318). Internet of Things-Based Middleware Against Cyber-Attacks on Smart Homes using Software-Defined Networking and Deep Learning. Proceedings of the 2021 2nd International Conference on Computational Methods in Science & Technology (ICCMST), Mohali, India.","DOI":"10.1109\/ICCMST54943.2021.00014"},{"key":"ref_37","first-page":"3099","article-title":"R-IDPS: Real Time SDN-Based IDPS System for IoT Security","volume":"73","author":"Mazhar","year":"2022","journal-title":"Comput. Mater. Contin."},{"key":"ref_38","doi-asserted-by":"crossref","first-page":"25623","DOI":"10.1109\/ACCESS.2024.3367357","article-title":"A Genetic Algorithm- and t-Test-based system for DDoS Attack Detection in IoT Networks","volume":"12","author":"Saiyed","year":"2024","journal-title":"IEEE Access"},{"key":"ref_39","doi-asserted-by":"crossref","first-page":"9552","DOI":"10.1109\/JIOT.2020.2993782","article-title":"FlowGuard: An Intelligent Edge Defense Mechanism Against IoT DDoS Attacks","volume":"7","author":"Jia","year":"2020","journal-title":"IEEE Internet Things J."},{"key":"ref_40","unstructured":"Ghalwash, A.Z., El Khameesy, N., Magdi, D.A., and Joshi, A. (2020, January 3\u20134). Enhancing IoT Botnets Attack Detection Using Machine Learning-IDS and Ensemble Data Preprocessing Technique. Proceedings of the Internet of Things\u2014Applications and Future, Agartala, Tripura, India."},{"key":"ref_41","doi-asserted-by":"crossref","unstructured":"Haque, S., El-Moussa, F., Komninos, N., and Muttukrishnan, R. (2023, January 6\u20138). Identification of Important Features at Different IoT layers for Dynamic Attack Detection. Proceedings of the 2023 IEEE 9th Intl Conference on Big Data Security on Cloud (BigDataSecurity), IEEE Intl Conference on High Performance and Smart Computing, (HPSC) and IEEE Intl Conference on Intelligent Data and Security (IDS), New York, NY, USA.","DOI":"10.1109\/BigDataSecurity-HPSC-IDS58521.2023.00025"},{"key":"ref_42","doi-asserted-by":"crossref","first-page":"2309","DOI":"10.1007\/s11277-021-08994-z","article-title":"Anomaly Detection in IoT Networks: Machine Learning Approaches for Intrusion Detection","volume":"122","author":"Alghanmi","year":"2022","journal-title":"Wirel. Pers. Commun."},{"key":"ref_43","doi-asserted-by":"crossref","unstructured":"Fikriansyah, M.I., Amatullah Karimah, S., and Setiadi, F. (2024, January 10\u201311). Detection of DDOS Attacks in IIoT Case Using Machine Learning Algorithms. Proceedings of the 2024 International Conference on Data Science and Its Applications (ICoDSA), Kuta, Bali, Indonesia.","DOI":"10.1109\/ICoDSA62899.2024.10652225"},{"key":"ref_44","doi-asserted-by":"crossref","unstructured":"Mishra, S., Albarakati, A., and Sharma, S.K. (2022). Cyber Threat Intelligence for IoT Using Machine Learning. Processes, 10.","DOI":"10.3390\/pr10122673"},{"key":"ref_45","doi-asserted-by":"crossref","first-page":"55","DOI":"10.1016\/j.jpdc.2022.01.030","article-title":"A distributed intrusion detection system to detect DDoS attacks in blockchain-enabled IoT network","volume":"164","author":"Kumar","year":"2022","journal-title":"J. Parallel Distrib. Comput."},{"key":"ref_46","doi-asserted-by":"crossref","first-page":"101307","DOI":"10.1016\/j.iot.2024.101307","article-title":"Blockchain-based IoT security solutions for IDS research centers","volume":"27","author":"Akhter","year":"2024","journal-title":"Internet Things"},{"key":"ref_47","doi-asserted-by":"crossref","first-page":"152","DOI":"10.1109\/LNET.2024.3377355","article-title":"DDoS Mitigation in IoT Using Machine Learning and Blockchain Integration","volume":"6","author":"Abdelaziz","year":"2024","journal-title":"IEEE Netw. Lett."},{"key":"ref_48","doi-asserted-by":"crossref","first-page":"09n10","DOI":"10.1142\/S0218348X25400444","article-title":"Harnessing blockchain with ensemble deep learning-based distributed dos attack detection in iot-assisted secure consumer electronics systems","volume":"32","author":"Alrayes","year":"2024","journal-title":"Fractals"},{"key":"ref_49","doi-asserted-by":"crossref","first-page":"108287","DOI":"10.1016\/j.compeleceng.2022.108287","article-title":"Blockchain-based Intrusion Detection System of IoT urban data with device authentication against DDoS attacks","volume":"103","author":"Babu","year":"2022","journal-title":"Comput. Electr. Eng."},{"key":"ref_50","unstructured":"Furnell, S., Mori, P., Weippl, E., and Camp, O. (2022, January 9\u201311). Using MedBIoT Dataset to Build Effective Machine Learning-Based IoT Botnet Detection Systems. Proceedings of the Information Systems Security and Privacy, Online."},{"key":"ref_51","doi-asserted-by":"crossref","unstructured":"Guerra-Manzanares, A., Medina-Galindo, J., Bahsi, H., and N\u00f5mm, S. (2020, January 25\u201327). MedBIoT: Generation of an IoT Botnet Dataset in a Medium-sized IoT Network. Proceedings of the 6th International Conference on Information Systems Security and Privacy\u2014ICISSP, INSTICC, Valletta, Malta.","DOI":"10.5220\/0009187802070218"},{"key":"ref_52","doi-asserted-by":"crossref","unstructured":"Ullah, S., Khan, M.A., Ahmad, J., Jamal, S.S., e Huma, Z., Hassan, M.T., Pitropakis, N., and Buchanan, W.J. (2022). HDL-IDS: A Hybrid Deep Learning Architecture for Intrusion Detection in the Internet of Vehicles. Sensors, 22.","DOI":"10.3390\/s22041340"},{"key":"ref_53","doi-asserted-by":"crossref","first-page":"142206","DOI":"10.1109\/ACCESS.2021.3120626","article-title":"Intrusion Detection System Using Machine Learning for Vehicular Ad Hoc Networks Based on ToN-IoT Dataset","volume":"9","author":"Gad","year":"2021","journal-title":"IEEE Access"},{"key":"ref_54","first-page":"2021","article-title":"A model for intrusion detection system using hidden Markov and variational Bayesian model for IoT based wireless sensor network","volume":"14","author":"Kalnoor","year":"2022","journal-title":"Int. J. Inf. Technol."},{"key":"ref_55","doi-asserted-by":"crossref","unstructured":"Sadhwani, S., Manibalan, B., Muthalagu, R., and Pawar, P. (2023). A Lightweight Model for DDoS Attack Detection Using Machine Learning Techniques. Appl. Sci., 13.","DOI":"10.3390\/app13179937"},{"key":"ref_56","doi-asserted-by":"crossref","first-page":"101130","DOI":"10.1016\/j.measen.2024.101130","article-title":"Ensemble classification to predict botnet and its impact on IoT networks","volume":"33","year":"2024","journal-title":"Meas. Sens."},{"key":"ref_57","doi-asserted-by":"crossref","first-page":"285","DOI":"10.3390\/iot3020017","article-title":"Evaluation and Selection Models for Ensemble Intrusion Detection Systems in IoT","volume":"3","author":"Alghamdi","year":"2022","journal-title":"IoT"},{"key":"ref_58","doi-asserted-by":"crossref","first-page":"119330","DOI":"10.1016\/j.eswa.2022.119330","article-title":"Implementation of intrusion detection model for DDoS attacks in Lightweight IoT Networks","volume":"215","author":"Khanday","year":"2023","journal-title":"Expert Syst. Appl."},{"key":"ref_59","doi-asserted-by":"crossref","unstructured":"Thereza, N., and Ramli, K. (2023, January 6\u20138). Development of Intrusion Detection Models for IoT Networks Utilizing CICIoT2023 Dataset. Proceedings of the 2023 3rd International Conference on Smart Cities, Automation & Intelligent Computing Systems (ICON-SONICS), Bali, Indonesia.","DOI":"10.1109\/ICON-SONICS59898.2023.10435006"},{"key":"ref_60","doi-asserted-by":"crossref","unstructured":"Khan, A., and Sharma, I. (2023, January 12\u201313). Guardians of the IoT: A Symphony of Ensemble Learning for DDoS Attack Resilience. Proceedings of the 2023 4th International Conference on Computation, Automation and Knowledge Management (ICCAKM), Dubai, United Arab Emirates.","DOI":"10.1109\/ICCAKM58659.2023.10449551"},{"key":"ref_61","doi-asserted-by":"crossref","first-page":"26942","DOI":"10.1007\/s11227-024-06409-x","article-title":"A hybrid approach for efficient feature selection in anomaly intrusion detection for IoT networks","volume":"80","author":"Ayad","year":"2024","journal-title":"J. Supercomput."},{"key":"ref_62","doi-asserted-by":"crossref","first-page":"030012","DOI":"10.1063\/5.0149102","article-title":"A machine learning based intrusions detection for IoT botnet attacks","volume":"2814","author":"Rbah","year":"2023","journal-title":"AIP Conf. Proc."},{"key":"ref_63","doi-asserted-by":"crossref","unstructured":"Churcher, A., Ullah, R., Ahmad, J., ur Rehman, S., Masood, F., Gogate, M., Alqahtani, F., Nour, B., and Buchanan, W.J. (2021). An Experimental Analysis of Attack Classification Using Machine Learning in IoT Networks. Sensors, 21.","DOI":"10.3390\/s21020446"},{"key":"ref_64","doi-asserted-by":"crossref","unstructured":"Roopak, M., Tian, G.Y., and Chambers, J. (2020, January 6\u20138). An Intrusion Detection System Against DDoS Attacks in IoT Networks. Proceedings of the 2020 10th Annual Computing and Communication Workshop and Conference (CCWC), Las Vegas, NV, USA.","DOI":"10.1109\/CCWC47524.2020.9031206"},{"key":"ref_65","doi-asserted-by":"crossref","first-page":"513","DOI":"10.1049\/ntw2.12134","article-title":"An unsupervised approach for the detection of zero-day distributed denial of service attacks in Internet of Things networks","volume":"13","author":"Roopak","year":"2024","journal-title":"IET Netw."},{"key":"ref_66","first-page":"567","article-title":"APSO-CNN-SE: An Adaptive Convolutional Neural Network Approach for IoT Intrusion Detection","volume":"81","author":"Ban","year":"2024","journal-title":"Comput. Mater. Contin."},{"key":"ref_67","first-page":"11","article-title":"Attack and anomaly detection in IoT networks using supervised machine learning approaches","volume":"35","author":"Tyagi","year":"2021","journal-title":"Rev. D\u2019Intelligence Artif."},{"key":"ref_68","doi-asserted-by":"crossref","unstructured":"Zegarra Rodr\u00edguez, D., Daniel Okey, O., Maidin, S.S., Umoren Udo, E., and Kleinschmidt, J.H. (2023). Attentive transformer deep learning algorithm for intrusion detection on IoT systems using automatic Xplainable feature selection. PLoS ONE, 18.","DOI":"10.1371\/journal.pone.0286652"},{"key":"ref_69","doi-asserted-by":"crossref","unstructured":"Okey, O.D., Maidin, S.S., Adasme, P., Lopes Rosa, R., Saadi, M., Carrillo Melgarejo, D., and Zegarra Rodr\u00edguez, D. (2022). BoostedEnML: Efficient Technique for Detecting Cyberattacks in IoT Systems Using Boosted Ensemble Machine Learning. Sensors, 22.","DOI":"10.3390\/s22197409"},{"key":"ref_70","doi-asserted-by":"crossref","unstructured":"Vijayalakshmi, M., Susmanth Srinivas, A., and Ramanathan, S. (2024, January 24\u201328). Building a Smarter Shield: Using Ensemble Learning for Multi-Class DDoS Attacks. Proceedings of the 2024 15th International Conference on Computing Communication and Networking Technologies (ICCCNT), Kamand, India.","DOI":"10.1109\/ICCCNT61001.2024.10725935"},{"key":"ref_71","doi-asserted-by":"crossref","unstructured":"Chukwukelu, G., Essien, A., Salami, A., and Utuk, E. (2024, January 9\u201311). Comparative Analysis of Machine Learning Techniques for DDoS Intrusion Detection in IoT Environments. Proceedings of the 21st International Conference on Smart Business Technologies\u2014ICSBT, INSTICC, Dijon, France.","DOI":"10.5220\/0012765200003764"},{"key":"ref_72","doi-asserted-by":"crossref","first-page":"109716","DOI":"10.1016\/j.compeleceng.2024.109716","article-title":"Computer vision based distributed denial of service attack detection for resource-limited devices","volume":"120","author":"Gebrye","year":"2024","journal-title":"Comput. Electr. Eng."},{"key":"ref_73","doi-asserted-by":"crossref","unstructured":"Alabsi, B.A., Anbar, M., and Rihan, S.D.A. (2023). Conditional Tabular Generative Adversarial Based Intrusion Detection System for Detecting Ddos and Dos Attacks on the Internet of Things Networks. Sensors, 23.","DOI":"10.3390\/s23125644"},{"key":"ref_74","doi-asserted-by":"crossref","unstructured":"Berqia, A., Bouijij, H., Merimi, A., and Ouaggane, A. (2024, January 8\u201310). Detecting DDoS Attacks using Machine Learning in IoT Environment. Proceedings of the 2024 International Conference on Intelligent Systems and Computer Vision (ISCV), Fez, Morocco.","DOI":"10.1109\/ISCV60512.2024.10620122"},{"key":"ref_75","first-page":"2010","article-title":"Enhancing IoT network defense: Advanced intrusion detection via ensemble learning techniques","volume":"35","author":"Hajla","year":"2024","journal-title":"Indones. J. Electr. Eng. Comput. Sci."},{"key":"ref_76","doi-asserted-by":"crossref","first-page":"2355","DOI":"10.18280\/mmep.110909","article-title":"Ensemble of tree classifiers for improved DDoS attack detection in the Internet of Things","volume":"11","author":"Mante","year":"2024","journal-title":"Math. Model. Eng. Probl."},{"key":"ref_77","doi-asserted-by":"crossref","first-page":"8658","DOI":"10.1109\/JIOT.2023.3245153","article-title":"Feature Engineering and Machine Learning Framework for DDoS Attack Detection in the Standardized Internet of Things","volume":"10","author":"Kamaldeep","year":"2023","journal-title":"IEEE Internet Things J."},{"key":"ref_78","doi-asserted-by":"crossref","first-page":"177","DOI":"10.1016\/j.icte.2021.04.012","article-title":"Feature selection for intrusion detection system in Internet-of-Things (IoT)","volume":"7","author":"Nimbalkar","year":"2021","journal-title":"ICT Express"},{"key":"ref_79","first-page":"37","article-title":"Intrusion Detection for IoT Network Security with Deep learning","volume":"12","author":"Morshedi","year":"2024","journal-title":"J. AI Data Min."},{"key":"ref_80","doi-asserted-by":"crossref","unstructured":"Ullah, S., Mahmood, Z., Ali, N., Ahmad, T., and Buriro, A. (2023). Machine Learning-Based Dynamic Attribute Selection Technique for DDoS Attack Classification in IoT Networks. Computers, 12.","DOI":"10.3390\/computers12060115"},{"key":"ref_81","doi-asserted-by":"crossref","unstructured":"Pham, V.T., Nguyen, H.L., Le, H.C., and Nguyen, M.T. (2023, January 27\u201328). Machine Learning-based Intrusion Detection System for DDoS Attack in the Internet of Things. Proceedings of the 2023 International Conference on System Science and Engineering (ICSSE), Ho Chi Minh, Vietnam.","DOI":"10.1109\/ICSSE58758.2023.10227227"},{"key":"ref_82","doi-asserted-by":"crossref","unstructured":"Almaraz-Rivera, J.G., Perez-Diaz, J.A., and Cantoral-Ceballos, J.A. (2022). Transport and Application Layer DDoS Attacks Detection to IoT Devices by Using Machine Learning and Deep Learning Models. Sensors, 22.","DOI":"10.3390\/s22093367"},{"key":"ref_83","doi-asserted-by":"crossref","first-page":"40277","DOI":"10.1109\/ACCESS.2022.3165809","article-title":"Edge-IIoTset: A New Comprehensive Realistic Cyber Security Dataset of IoT and IIoT Applications for Centralized and Federated Learning","volume":"10","author":"Ferrag","year":"2022","journal-title":"IEEE Access"},{"key":"ref_84","doi-asserted-by":"crossref","unstructured":"Poisson, M., Carnier, R., and Fukuda, K. (2024, January 13). GothX: A generator of customizable, legitimate and malicious IoT network traffic. Proceedings of the 17th Cyber Security Experimentation and Test Workshop, CSET \u201924, Philadelphia, PA, USA.","DOI":"10.1145\/3675741.3675753"},{"key":"ref_85","doi-asserted-by":"crossref","first-page":"165130","DOI":"10.1109\/ACCESS.2020.3022862","article-title":"TON_IoT Telemetry Dataset: A New Generation Dataset of IoT and IIoT for Data-Driven Intrusion Detection Systems","volume":"8","author":"Alsaedi","year":"2020","journal-title":"IEEE Access"},{"key":"ref_86","doi-asserted-by":"crossref","unstructured":"Binu, P.K., and Kiran, M. (2021, January 15\u201317). Attack and Anomaly Prediction in IoT Networks using Machine Learning Approaches. Proceedings of the 2021 Fourth International Conference on Electrical, Computer and Communication Technologies (ICECCT), Erode, India.","DOI":"10.1109\/ICECCT52121.2021.9616794"},{"key":"ref_87","doi-asserted-by":"crossref","first-page":"3962","DOI":"10.1109\/JIOT.2021.3102056","article-title":"X-IIoTID: A Connectivity-Agnostic and Device-Agnostic Intrusion Data Set for Industrial Internet of Things","volume":"9","author":"Sitnikova","year":"2022","journal-title":"IEEE Internet Things J."},{"key":"ref_88","unstructured":"(2024, December 12). KDD Cup 1999 Data. Available online: https:\/\/kdd.ics.uci.edu\/databases\/kddcup99\/kddcup99.html."},{"key":"ref_89","doi-asserted-by":"crossref","unstructured":"Sharafaldin, I., Lashkari, A.H., and Ghorbani, A.A. (2018, January 22\u201324). Toward Generating a New Intrusion Detection Dataset and Intrusion Traffic Characterization. Proceedings of the 4th International Conference on Information Systems Security and Privacy (ICISSP). SCITEPRESS, Madeira, Portugal.","DOI":"10.5220\/0006639801080116"},{"key":"ref_90","doi-asserted-by":"crossref","unstructured":"Peterson, J.M., Leevy, J.L., and Khoshgoftaar, T.M. (2021, January 23\u201326). A Review and Analysis of the Bot-IoT Dataset. Proceedings of the 2021 IEEE International Conference on Service-Oriented System Engineering SOSE, Oxford, UK.","DOI":"10.1109\/SOSE52839.2021.00007"},{"key":"ref_91","unstructured":"Atuhurra, J., Hara, T., Zhang, Y., Sasabe, M., and Kasahara, S. (2024). Dealing with Imbalanced Classes in Bot-IoT Dataset. arXiv."},{"key":"ref_92","unstructured":"Laboratory, M.L. (2024, December 12). 2000 DARPA Intrusion Detection Scenario Specific Datasets. Available online: https:\/\/archive.ll.mit.edu\/ideval\/data\/2000data.html."},{"key":"ref_93","doi-asserted-by":"crossref","unstructured":"Tavallaee, M., Bagheri, E., Lu, W., and Ghorbani, A.A. (2009, January 8\u201310). A detailed analysis of the KDD CUP 99 data set. Proceedings of the 2009 IEEE Symposium on Computational Intelligence for Security and Defense Applications, Ottawa, ON, Canada.","DOI":"10.1109\/CISDA.2009.5356528"},{"key":"ref_94","doi-asserted-by":"crossref","first-page":"357","DOI":"10.1016\/j.cose.2011.12.012","article-title":"Toward developing a systematic approach to generate benchmark datasets for intrusion detection","volume":"31","author":"Shiravi","year":"2012","journal-title":"Comput. Secur."},{"key":"ref_95","doi-asserted-by":"crossref","first-page":"100","DOI":"10.1016\/j.cose.2014.05.011","article-title":"An empirical comparison of botnet detection methods","volume":"45","author":"Grill","year":"2014","journal-title":"Comput. Secur."},{"key":"ref_96","doi-asserted-by":"crossref","first-page":"18","DOI":"10.1080\/19393555.2015.1125974","article-title":"The evaluation of network anomaly detection systems: Statistical analysis of the UNSW-NB15 data set and the comparison with the KDD99 data set","volume":"25","author":"Moustafa","year":"2016","journal-title":"Inf. Secur. J. Glob. Perspect."},{"key":"ref_97","first-page":"1162","article-title":"Towards Generating Realistic SNMP-MIB Dataset for Network Anomaly Detection","volume":"14","author":"Alkasassbeh","year":"2016","journal-title":"Int. J. Comput. Sci. Inf. Secur."},{"key":"ref_98","unstructured":"Meidan, Y., Bohadana, M., Mathov, Y., Mirsky, Y., Breitenbacher, D., Shabtai, A., and Elovici, Y. (2024, December 20). N-BaIoT: Network-Based Detection of IoT Botnet Attacks Using Deep Autoencoders. Available online: https:\/\/archive.ics.uci.edu\/dataset\/442\/detection+of+iot+botnet+attacks+n+baiot."},{"key":"ref_99","doi-asserted-by":"crossref","unstructured":"Mirsky, Y., Doitshman, T., Elovici, Y., and Shabtai, A. (2018). Kitsune: An Ensemble of Autoencoders for Online Network Intrusion Detection. arXiv.","DOI":"10.14722\/ndss.2018.23204"},{"key":"ref_100","unstructured":"AWS (2024, December 12). Canadian Institute for Cybersecurity CSE-CIC-IDS2018 Dataset. Available online: https:\/\/registry.opendata.aws\/cse-cic-ids2018\/."},{"key":"ref_101","unstructured":"Aubet, F., and Pahl, M. (2024, December 12). DS2OS Traffic Traces. Available online: https:\/\/www.kaggle.com\/datasets\/francoisxa\/ds2ostraffictraces."},{"key":"ref_102","unstructured":"Sharafaldin, I., Lashkari, A.H., and Ghorbani, A.A. (2024, December 12). CIC-DDoS2019 Dataset. Available online: https:\/\/www.unb.ca\/cic\/datasets\/ddos-2019.html."},{"key":"ref_103","unstructured":"Garcia, S., Parmisano, A., and Erquiaga, M.J. (2020). IoT-23: A labeled dataset with malicious and benign IoT network traffic. Zenodo."},{"key":"ref_104","unstructured":"Goutte, C., and Zhu, X. (2020, January 29\u201330). A Scheme for Generating a Dataset for Anomalous Activity Detection in IoT Networks. Proceedings of the Advances in Artificial Intelligence, Canberra, ACT, Australia."},{"key":"ref_105","unstructured":"Ward, A., and Cordero, S. (2024, December 12). Application Layer DDoS Dataset. Available online: https:\/\/www.kaggle.com\/datasets\/wardac\/applicationlayer-ddos-dataset."},{"key":"ref_106","unstructured":"Jovanovi\u0107, D., and Vuleti\u0107, P. (2021). ETF IoT Botnet Dataset. Mendeley Data."},{"key":"ref_107","doi-asserted-by":"crossref","unstructured":"Neto, E., Dadkhah, S., Ferreira, R., Zohourian, A., Lu, R., and Ghorbani, A. (2023). CICIoT2023: A real-time dataset and benchmark for large-scale attacks in IoT environment. Sensors, 23.","DOI":"10.20944\/preprints202305.0443.v1"},{"key":"ref_108","first-page":"132","article-title":"Toward Constructing a Balanced Intrusion Detection Dataset Based on CICIDS2017","volume":"2","author":"Abdulrahman","year":"2020","journal-title":"Samarra J. Pure Appl. Sci."}],"container-title":["Algorithms"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1999-4893\/18\/4\/209\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,9]],"date-time":"2025-10-09T17:12:58Z","timestamp":1760029978000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1999-4893\/18\/4\/209"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,4,9]]},"references-count":108,"journal-issue":{"issue":"4","published-online":{"date-parts":[[2025,4]]}},"alternative-id":["a18040209"],"URL":"https:\/\/doi.org\/10.3390\/a18040209","relation":{},"ISSN":["1999-4893"],"issn-type":[{"value":"1999-4893","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,4,9]]}}}