Explainable Intrusion and Anomaly Detection for IoT Sensor Networks Using Hybrid Feature Selection and Deep Autoencoder Learning

초록

Internet of Things (IoT) environments, which are distributed and resource-constrained, present unique security challenges, making it essential to develop robust and transparent intrusion detection system (IDS) solutions. This study presents a specialized system for IoT environments that combines hybrid feature selection methods with anomaly detection algorithms and classification strategies, alongside explainability techniques, to enhance security measures and event transparency. The novelty of this work lies in combining several modern approaches: hybrid feature selection by combining Random Forest (RF) and SelectKBest to reduce computational overhead while preserving high accuracy of detection; the application of Deep Autoencoders (DAEs) for detecting anomalous traffic deviating from learned normal behavior, enabling detection of previously unseen attack patterns under controlled experimental conditions; feedforward neural networks (FNNs) are applied to classify anomalous data with high accuracy and reduced training time, and explainability tools such as Shapley Additive Explanations (SHAP) and Local Interpretable Model-Agnostic Explanations (LIME) are incorporated to provide insights into model decisions and improve trust. We utilize the CIC-IDS2017 and EIIoT datasets to evaluate their effectiveness in identifying critical cyber threats and subsequently classifying them. This proposed framework, HDATL-XAI (Hybrid Dimension-reduction Autoencoder and Traditional Learning with Explainable Artificial Intelligence), integrates advanced techniques to offer comprehensive protection while ensuring transparency, enhancing security and trustworthiness, and serving as an essential tool for protecting IoT networks.

키워드