What question did this study set out to answer?

The aim is to enhance IoT intrusion detection by using a lightweight system with boosting ensemble learning to identify malicious traffic.

April 28, 2026Open Access

Enhancing internet of things intrusion detection through high-performance boosting ensemble learning

VYVitaliy YakovynaUniversity of Warmia and Mazury in Olsztyn AFAnton FadieievLviv Polytechnic National University

Key Points

The aim is to enhance IoT intrusion detection by using a lightweight system with boosting ensemble learning to identify malicious traffic.
Used the Aposemat IoT-23 dataset with over 25 million records for training and evaluation.
Performed extensive data preprocessing and exploratory data analysis to ensure stability and address class imbalance.
Evaluated multiple machine learning models, including LightGBM, through five-fold cross-validation.
LightGBM achieved 99.9% accuracy, F1 Score, and ROC AUC with a training time of 612 s.
Confusion matrix analysis showed that ensemble methods effectively reduced false negatives and false positives.
Results indicate that boosting techniques can significantly improve detection performance in resource-constrained IoT settings.

Abstract

The rapid expansion of the internet of things (IoT) has introduced significant security vulnerabilities, as traditional signature-based detection methods struggle to keep pace with evolving cyber threats. This study proposes a lightweight intrusion detection system (IDS) that leverages boosting ensemble learning to identify malicious traffic at the network edge. Using the large-scale Aposemat IoT-23 dataset, comprising over 25 million records, we performed extensive data preprocessing and exploratory data analysis to ensure statistical stability and address class imbalance. We evaluated several machine learning architectures, including logistic regression, Naïve Bayes, Random Forest, AdaBoost, XGBoost, and LightGBM. Experimental results from five-fold cross-validation show that LightGBM outperforms other models, achieving 99.9% accuracy, F1 Score, and ROC AUC, with significantly lower training time of 612 s. Furthermore, confusion matrix analysis confirms that ensemble methods effectively minimize critical false negatives and false positives. These findings suggest that enhanced ensemble techniques provide a scalable, high-performance solution for real-time malware detection in resource-constrained IoT environments, bridging the gap between detection accuracy and computational efficiency.

KI fragen

Bookmark

View Full Paper