{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,1]],"date-time":"2026-03-01T05:48:53Z","timestamp":1772344133398,"version":"3.50.1"},"reference-count":23,"publisher":"MDPI AG","issue":"17","license":[{"start":{"date-parts":[[2023,8,29]],"date-time":"2023-08-29T00:00:00Z","timestamp":1693267200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Double First-Class Innovation Research Project for People\u2019s Public Security University of China","award":["2023SYL***"],"award-info":[{"award-number":["2023SYL***"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>With the rapid development of the Internet of Things (IoT), the frequency of attackers using botnets to control IoT devices in order to perform distributed denial-of-service attacks (DDoS) and other cyber attacks on the internet has significantly increased. In the actual attack process, the small percentage of attack packets in IoT leads to low accuracy of intrusion detection. Based on this problem, the paper proposes an oversampling algorithm, KG-SMOTE, based on Gaussian distribution and K-means clustering, which inserts synthetic samples through Gaussian probability distribution, extends the clustering nodes in minority class samples in the same proportion, increases the density of minority class samples, and improves the amount of minority class sample data in order to provide data support for IoT-based DDoS attack detection. Experiments show that the balanced dataset generated by this method effectively improves the intrusion detection accuracy in each category and effectively solves the data imbalance problem.<\/jats:p>","DOI":"10.3390\/s23177496","type":"journal-article","created":{"date-parts":[[2023,8,29]],"date-time":"2023-08-29T08:59:05Z","timestamp":1693299545000},"page":"7496","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":6,"title":["A Data Enhancement Algorithm for DDoS Attacks Using IoT"],"prefix":"10.3390","volume":"23","author":[{"given":"Haibin","family":"Lv","sequence":"first","affiliation":[{"name":"College of Information and Cyber Security, People\u2019s Public Security University of China, Beijing 100038, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yanhui","family":"Du","sequence":"additional","affiliation":[{"name":"College of Information and Cyber Security, People\u2019s Public Security University of China, Beijing 100038, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xing","family":"Zhou","sequence":"additional","affiliation":[{"name":"College of Information and Cyber Security, People\u2019s Public Security University of China, Beijing 100038, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wenkai","family":"Ni","sequence":"additional","affiliation":[{"name":"College of Information and Cyber Security, People\u2019s Public Security University of China, Beijing 100038, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xingbang","family":"Ma","sequence":"additional","affiliation":[{"name":"College of Information and Cyber Security, People\u2019s Public Security University of China, Beijing 100038, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2023,8,29]]},"reference":[{"key":"ref_1","unstructured":"(2022). White Paper on IoT Operating System Security, China Communications Standards Association."},{"key":"ref_2","unstructured":"(2022). CNCERT Internet Security Threat Report, National Internet Emergency Response Center."},{"key":"ref_3","first-page":"1258","article-title":"Network Intrusion Detection Based on SMOTE and Machine Learning","volume":"39","author":"Zhang","year":"2019","journal-title":"J. Beijing Inst. Technol."},{"key":"ref_4","first-page":"1246","article-title":"Research on Intrusion Detection Method Based on Second Training Techniques","volume":"37","author":"Li","year":"2017","journal-title":"J. Beijing Inst. Technol."},{"key":"ref_5","first-page":"673","article-title":"A Review of Unbalanced Data Classification Methods","volume":"34","author":"Li","year":"2019","journal-title":"Control. Decis. Mak."},{"key":"ref_6","first-page":"205","article-title":"An Improved Undersampling Algorithm for Unbalanced Data in K-means Clustering","volume":"19","author":"Yu","year":"2020","journal-title":"Softw. Guide"},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"1160","DOI":"10.1080\/03610918.2012.728274","article-title":"Dealing with Imbalanced Dataset: A Resampling Method Based on the Improved SMOTE Algorithm","volume":"45","author":"Xue","year":"2016","journal-title":"Commun. Stat.-Simul. Comput."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"1263","DOI":"10.1109\/TKDE.2008.239","article-title":"Learning from Imbalanced Data","volume":"21","author":"He","year":"2009","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"321","DOI":"10.1613\/jair.953","article-title":"SMOTE: Synthetic Minority Over-Sampling Technique","volume":"16","author":"Chawla","year":"2002","journal-title":"J. Artif. Intell. Res."},{"key":"ref_10","first-page":"110","article-title":"An Improved SMOTE Algorithm Based on Gaussian Hybrid Clustering for Unbalanced Data","volume":"21","author":"Yehui","year":"2022","journal-title":"Softw. Guide"},{"key":"ref_11","unstructured":"Last, F., Douzas, G., and Bacao, F. (2017). Oversampling for Imbalanced Learning Based on K-Means and SMOTE. arXiv."},{"key":"ref_12","unstructured":"Shen, Z., Hua, X., and Jinhai, C. (Small Microcomput. Syst., 2023). Resampling Algorithm for Unbalanced Data, Small Microcomput. Syst., online ahead of print."},{"key":"ref_13","first-page":"513","article-title":"A Gaussian Oversampling-based Ensemble Learning Algorithm","volume":"41","author":"Zhang","year":"2021","journal-title":"Syst. Eng. Theory Pract."},{"key":"ref_14","first-page":"391","article-title":"An Oversampling Method for Intrusion Detection Data Based on Highest Density Points","volume":"39","author":"Jiang","year":"2022","journal-title":"Comput. Simul."},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"1192","DOI":"10.1016\/j.ins.2019.10.017","article-title":"Kernel Density Estimation Based Sampling for Imbalanced Class Distribution","volume":"512","author":"Kamalov","year":"2020","journal-title":"Inf. Sci."},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Zhang, H., and Wang, Z. (2011). Advanced Data Mining and Applications, Proceedings of the 7th International Conference, ADMA 2011, Beijing, China, 17\u201319 December 2011, Springer Berlin Heidelberg. Part I.","DOI":"10.1007\/978-3-642-25853-4"},{"key":"ref_17","first-page":"451","article-title":"Oversampling method based on Gaussian distribution and K-Means clustering","volume":"69","author":"Hassan","year":"2021","journal-title":"Comput. Mater. Contin."},{"key":"ref_18","first-page":"65","article-title":"Research on Improved SMOTE Algorithm Based on Probability Density Estimation","volume":"42","author":"Li","year":"2019","journal-title":"J. Nanjing Normal Univ. (Nat. Sci. Ed.)"},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"107315","DOI":"10.1016\/j.comnet.2020.107315","article-title":"An Effective Convolutional Neural Network Based on SMOTE and Gaussian Mixture Model for Intrusion Detection in Imbalanced Dataset","volume":"177","author":"Zhang","year":"2020","journal-title":"Comput. Netw."},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Hassan, M.M. (2018, January 9\u201311). Bayesian Sensitivity Analysis to Quantifying Uncertainty in a Dendroclimatology Model. Proceedings of the 2018 International Conference on Advanced Science and Engineering (ICOASE), Duhok, Iraq.","DOI":"10.1109\/ICOASE.2018.8548877"},{"key":"ref_21","first-page":"136","article-title":"Improvement of K-Means Algorithm for Adaptive K Value in Machine Learning","volume":"42","author":"Zhong","year":"2021","journal-title":"Comput. Eng. Des."},{"key":"ref_22","unstructured":"Yi, Q., Xiangyu, L., and Yanhui, D. (Comput. Mater. Continua., 2023). MBB-IoT: Construction and Evaluation of IoT DDoS Traffic Dataset from a New Perspective, Comput. Mater. Continua., in press."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"2","DOI":"10.1016\/j.bdr.2015.12.001","article-title":"Finding the Best Classification Threshold in Imbalanced Classification","volume":"5","author":"Zou","year":"2016","journal-title":"Big Data Res."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/23\/17\/7496\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T20:41:40Z","timestamp":1760128900000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/23\/17\/7496"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,8,29]]},"references-count":23,"journal-issue":{"issue":"17","published-online":{"date-parts":[[2023,9]]}},"alternative-id":["s23177496"],"URL":"https:\/\/doi.org\/10.3390\/s23177496","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,8,29]]}}}