Powered by OpenAIRE graph
Found an issue? Give us feedback
image/svg+xml art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos Open Access logo, converted into svg, designed by PLoS. This version with transparent background. http://commons.wikimedia.org/wiki/File:Open_Access_logo_PLoS_white.svg art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos http://www.plos.org/ Alexandria Engineeri...arrow_drop_down
image/svg+xml art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos Open Access logo, converted into svg, designed by PLoS. This version with transparent background. http://commons.wikimedia.org/wiki/File:Open_Access_logo_PLoS_white.svg art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos http://www.plos.org/
Alexandria Engineering Journal
Article . 2025 . Peer-reviewed
License: CC BY NC ND
Data sources: Crossref
image/svg+xml art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos Open Access logo, converted into svg, designed by PLoS. This version with transparent background. http://commons.wikimedia.org/wiki/File:Open_Access_logo_PLoS_white.svg art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos http://www.plos.org/
Alexandria Engineering Journal
Article . 2025
Data sources: DOAJ
versions View all 2 versions
addClaim

This Research product is the result of merged Research products in OpenAIRE.

You have already added 0 works in your ORCID record related to the merged Research product.

BoT-EnsIDS: Approach for detecting IoT Botnet attacks leveraging bio-inspired based ensemble feature selection and hybrid deep learning model

Authors: Tamara Al-Shurbaji; Mohammed Anbar; Selvakumar Manickam; Taief Alaa Al-Amiedy; Ghada AL Mukhaini; Hasan Hashim; Mohammed Farsi; +1 Authors

BoT-EnsIDS: Approach for detecting IoT Botnet attacks leveraging bio-inspired based ensemble feature selection and hybrid deep learning model

Abstract

The rapid proliferation of the Internet of Things (IoT) has increased the risk of sophisticated cyber-attacks, particularly botnets, which can lead to privacy breaches, service disruptions, and infrastructure damage. Traditional security solutions, such as firewalls and signature-based (IDS), are often ineffective due to their static nature and inability to adapt to evolving threats. To address these limitations, this paper proposes Bot-EnsIDS, a dynamic and intelligent intrusion detection system that integrates ensemble bio-inspired optimizer algorithms with a hybrid deep learning classifier. The proposed approach addresses key challenges in existing IDS frameworks, including the inability to efficiently handle high-dimensional IoT traffic data and adapt to detecting newly emerging or obfuscated attacks. The Bot-EnsIDS framework comprises multiple stages, including data preprocessing, a novel multi-objective function for feature selection, and an ensemble-based optimization using Particle Swarm Optimization (PSO) and Gorilla Troops Optimizer (GTO) to extract mutual features. It also incorporates enhanced automatic data augmentation using a modified Generative Adversarial Network (GAN), followed by detection using a hybrid CNN-LSTM deep learning model capable of efficiently detecting botnet attacks by learning from spatial and temporal data features through integrating Convolutional Neural Networks (CNN) and Long Short-Term Memory (LSTM) algorithms. The empirical evaluation of the proposed approach is performed using the BoT-IoT benchmark dataset and demonstrates significant improvements in detection performance over 300 training epochs. The findings revealed that the proposed approach achieves an enhanced accuracy of 97%, recall of 97.5%, precision of 97.5%, and F-measure of 97.5%, indicating significant enhancements in correctly identifying normal and anomalous traffic. The false-positive rate dropped to 0.025, highlighting the system’s precision and reduced false alarms. Overall, this paper introduces a sophisticated IDS architecture that addresses existing gaps and sets a new standard in IoT security by integrating hybrid deep learning techniques and bio-inspired algorithms, promising a more secure IoT ecosystem.

Keywords

Bot-IoT, Internet of things, Botnet, Feature selection, Gorilla Troops Optimizer, Deep learning, TA1-2040, Engineering (General). Civil engineering (General)

  • BIP!
    Impact byBIP!
    selected citations
    These citations are derived from selected sources.
    This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
    1
    popularity
    This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network.
    Average
    influence
    This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
    Average
    impulse
    This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network.
    Average
Powered by OpenAIRE graph
Found an issue? Give us feedback
selected citations
These citations are derived from selected sources.
This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
BIP!Citations provided by BIP!
popularity
This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network.
BIP!Popularity provided by BIP!
influence
This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
BIP!Influence provided by BIP!
impulse
This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network.
BIP!Impulse provided by BIP!
1
Average
Average
Average
gold