Work

A Sample-Based, Multistage Machine Learning Pipeline for Scalable IoT Threat Detection

Year: 2025

Type: article

Abstract: The rapid growth of IoT devices demands scalable and efficient threat detection solutions. This paper introduces a sample-based, multi-stage machine learning (ML) pipeline for IoT threat detection using the CICIoT2023 dataset, integrating feature selection, data balancing, and hyperparameter optimization to improve detection accuracy while reducing the computational overhead associated with training. We evaluate, and across binary, multiclass, and fine-grained tasks, showing that with 10% sampling achieves the best trade-off between accuracy and efficiency. Compared to prior methods, our approach eliminates GPU dependence, maintains low latency, and preserves state-of-the-art performance while enabling scalable training for high generalization capacity. Additionally, we provide model selection guidelines based on dataset complexity and computational constraints. The results show that training with a sample-based approach enables effective threat detection on large datasets, producing models that generalize well to diverse IoT attack scenarios, thus ensuring practical applicability in real-world deployments.

Source: IEEE Embedded Systems Letters

DOI: 10.1109/les.2025.3567025

Authors: Marcelo V. C. Aragão, Tiago de M. Pereira, Felipe A. P. de Figueiredo, Samuel B. Mafra

Institution: National Institute of Telecommunications

Language: English

Topic: Network Security and Intrusion Detection

Subfield: Computer Networks and Communications

Field: Computer Science

Domain: Physical Sciences

Open Access status: hybrid

Estimated APC paid: $2,645

Funders: Fundação de Amparo à Pesquisa do Estado de São Paulo, Ministério da Ciência, Tecnologia e Inovação, Conselho Nacional de Desenvolvimento Científico e Tecnológico, Fundação de Amparo à Pesquisa do Estado de Minas Gerais