Journal of Artificial Intelligence and Metaheuristics

Journal DOI

https://doi.org/10.54216/JAIM

Submit Your Paper

2833-5597ISSN (Online)

Volume 9 , Issue 2 , PP: 01-18, 2025 | Cite this article as | XML | Html | PDF | Full Length Article

Hybrid Ensemble Learning for Flow-Level IoT Traffic Classification Using ACI Dataset: Towards Scalable and Real-Time Threat Detection

El-Sayed M. El-Kenawy 1 * , Sini Raj Pulari 2 , Shriram K Vasudevan 3

  • 1 School of ICT, Faculty of Engineering, Design and Information and Communications Technology (EDICT), Bahrain Polytechnic, PO Box 33349, Isa Town, Bahrain; Applied Science Research Center. Applied Science Private University, Amman, Jordan - (skenawy@ieee.org)
  • 2 Dept. of CSE, Vignan’s Foundation for Science, Technology and Research, Guntur, Andhra Pradesh, India - (sinikishan@gmail.com)
  • 3 Intel India Pvt. Ltd., Bengaluru, India - (shriram.kris.vasudevan@intel.com)
  • Doi: https://doi.org/10.54216/JAIM.090201

    Received: December 18, 2024 Revised: February 10, 2025 Accepted: May 02, 2025
    Abstract

    Internet of Things devices, which spread across consumer industrial and critical infrastructure domains, have boosted the quantity of diverse network traffic and its high frequency. The increasing scale of IoT networks causes problems securing the diverse data flow within these networks, threatening system performance and management capabilities. Analyzing network traffic with traditional methods based on signature identification and rule detection becomes ineffective for new traffic activity patterns and system behavior. Due to extensive growth in IoT networks, developing intelligent data-based classification systems that can process IoT traffic quickly and at large operational scales becomes essential. A detailed model of flow-level data-based machine learning operations for IoT traffic classification utilizes features extracted from the Army Cyber Institute (ACI) IoT dataset. The dataset encompasses statistical, temporal, and protocol-specific attributes for benign and malicious network flows. Our methodology first conducts a strict data preprocessing stage, which involves numerous operations such as cleaning the data, normalizing it and encoding the labels, and performing a feature correlation analysis before preparing the learning algorithms with a suitable quality and balanced dataset. Various classification models underwent training, including Linear Discriminant Analysis (LDA), Quadratic  Discriminant Analysis (QDA), Naive Bayes and SGD Classifiers, and statistical learners. Our proposed hybrid ensemble method combines weighted voting between a deep learning neural network, a Random Forest model, and an XGBoost classifier to overcome the limitations of single classifiers. This ensemble model aimed to make the system more resilient while lowering bias and enhancing its ability to understand various IoT traffic patterns. A complete set of evaluation metrics assessed the models, using accuracy, precision, recall, F1-score, Hamming loss, Matthews correlation coefficient (MCC) and Cohen’s Kappa plus balanced accuracy and log loss for assessment. The chosen metrics allowed researchers to monitor model performance from global and detailed perspectives when dealing with imbalanced classes and similar patterns between legitimate and malicious network traffic. The ensemble methodology produces superior results than individual classifiers demonstrated through experimental results under all performance metrics evaluation. The complex nature of network environments demonstrates that model fusion achieves excellent results when tracking non-easy- to-classify traffic patterns. The ensemble approach proves excellent generalization properties and optimized performance for real-time IoT implementations because of its ability to adapt continuously while maintaining high accuracy levels. This proposed framework adds to intelligent IoT traffic analysis research while demonstrating how deep learning and traditional machine learning methods enhance ensemble systems. The system develops an expandable and clear quantitative solution that can be implemented for advanced network security systems and traffic monitoring applications across smart cities industrial settings, and critical infrastructure frameworks.

    Keywords :

    IoT Traffic Classification , Ensemble Learning , Deep Learning , Flow-Based Analysis

    References

    [1] Weiwei Jiang. Cellular traffic prediction with machine learning: A survey. Expert Systems with Applications, 201:117163, 2022.

    [2] G Sripriyanka and Anand Mahendran. Mirai botnet attacks on iot applications: Challenges and controls. In International Conference on Information Systems and Management Science, pages 49–67. Springer, 2021.

    [3] Sandeep Sah. Iot-based predictive analytics for efficient traffic management. Uncertainty Discourse and Applications, 1(2):179–185, 2024.

    [4] NGUYEN AN HUNG. Traffic Modeling and Anomaly Detection for Internet of Things. PhD thesis, SHIBAURA INSTITUTE OF TECHNOLOGY, 2021.

    [5] Manish Snehi and Abhinav Bhandari. Introspecting diverse iot-traffic analysis methods in smart environ- ments and prospects. In 2022 IEEE International Conference on Data Science and Information System (ICDSIS), pages 1–5. IEEE, 2022.

    [6] Ziadoon K Maseer, Robiah Yusof, Salama A Mostafa, Nazrulazhar Bahaman, Omar Musa, and Bander Ali Saleh Al-Rimy. Deepiot. ids: hybrid deep learning for enhancing iot network intrusion detection. Computers, Materials and Continua, 69(3):3946–3967, 2021.

    [7] Mario Pons, Estuardo Valenzuela, Brandon Rodr´ıguez, Juan Arturo Nolazco-Flores, and Carolina Del- Valle-Soto. Utilization of 5g technologies in iot applications: Current limitations by interference and network optimization difficulties—a review. Sensors, 23(8):3876, 2023.

    [8] Vinay Dutt Jangampet, Srinivas Reddy Pulyala, and Avinash Gupta Desetty. Optimized alternating graph- regularized neural network for cyber security threats detection in internet of things. International Journal of Information Security (IJIS), 2(1), 2023.

    [9] Matthew Nicholson, Rahul Agrahari, Clare Conran, Haythem Assem, and John D Kelleher. The inter- action of normalisation and clustering in sub-domain definition for multi-source transfer learning based time series anomaly detection. Knowledge-Based Systems, 257:109894, 2022.

    [10] Mansura Habiba, Md Rafiqul Islam, SM Muyeen, and ABM Shawkat Ali. Edge intelligence for network

    intrusion prevention in iot ecosystem. Computers and Electrical Engineering, 108:108727, 2023.

    [11] Rajarshi Roy Chowdhury, Azam Che Idris, and Pg Emeroylariffion Abas. Identifying sh-iot devices from network traffic characteristics using random forest classifier. Wireless networks, 30(1):405–419, 2024.

    [12] Daria Alekseeva, Nikolai Stepanov, Albert Veprev, Alexandra Sharapova, Elena Simona Lohan, and Aleksandr Ometov. Comparison of machine learning techniques applied to traffic prediction of real wireless network. IEEE Access, 9:159495–159514, 2021.

    [13] Mohammad Hammoudeh, John Pimlott, Sana Belguith, Gregory Epiphaniou, Thar Baker, ASM Kayes, Bamidele Adebisi, and Ahc´ene Bounceur. Network traffic analysis for threat detection in the internet of things. IEEE Internet of Things Magazine, 3(4):40–45, 2021.

    [14] Mahshid Rezakhani, Tolunay Seyfi, and Fatemeh Afghah. A transfer learning framework for anomaly detection in multivariate iot traffic data. arXiv preprint arXiv:2501.15365, 2025.

    [15] Patrick J Davis, Sean Coffey, Lubjana Beshaj, and Nathaniel D Bastian. Quantum machine learning for feature selection in internet of things network intrusion detection. In Quantum Information Science, Sensing, and Computation XVI, volume 13028, pages 78–92. SPIE, 2024.

    [16] Yi-Min Yang, Ko-Chin Chang, and Jia-Ning Luo. Hybrid neural network-based intrusion detection system: Leveraging lightgbm and mobilenetv2 for iot security. Symmetry, 17(3):314, 2025.

    [17] Anshika Sharma and Himanshi Babbar. Analyzing anomalies in iot networks using machine learning solutions with aci-iot-2023 network traffic dataset. In 2024 Asian Conference on Intelligent Technologies (ACOIT), pages 1–5. IEEE, 2024.

    [18] Hung Nguyen-An, Thomas Silverston, Taku Yamazaki, and Takumi Miyoshi. Iot traffic: Modeling and measurement experiments. IoT, 2(1):140–162, 2021.

    [19] SBMATSDVBBI Neelakandan, MA Berlin, Sandesh Tripathi, V Brindha Devi, Indu Bhardwaj, and N Arulkumar. Iot-based traffic prediction and traffic signal control system for smart city. Soft Com- puting, 25(18):12241–12248, 2021.

    [20] Pratibha Khandait, Neminath Hubballi, and Bodhisatwa Mazumdar. Iothunter: Iot network traffic classi- fication using device specific keywords. IET Networks, 10(2):59–75, 2021.

    [21] Ola Salman, Imad H Elhajj, Ali Chehab, and Ayman Kayssi. A machine learning based framework for iot device identification and abnormal traffic detection. Transactions on Emerging Telecommunications Technologies, 33(3):e3743, 2022.

    [22] Ampratwum Isaac Owusu and Amiya Nayak. An intelligent traffic classification in sdn-iot: A machine learning approach. In 2020 IEEE International Black Sea Conference on Communications and Networking (BlackSeaCom), pages 1–6. IEEE, 2020.

    [23] Rakesh Kumar, Mayank Swarnkar, Gaurav Singal, and Neeraj Kumar. Iot network traffic classification using machine learning algorithms: An experimental analysis. IEEE Internet of Things Journal, 9(2): 989-1008, 2021.

     [24] Shilpa P Khedkar and R AroulCanessane. Machine learning model for classification of iot network traffic. In 2020 Fourth International Conference on I-SMAC (IoT in Social, Mobile, Analytics and Cloud)(I-SMAC), pages 166–170. IEEE, 2020.

    25] ] ASHISH P Joshi and BIRAJ V Patel. Data preprocessing: the techniques for preparing clean and quality data for data analytics process. Orient. J. Comput. Sci. Technol, 13(0203):78–81, 2021.

    Cite This Article As :
    M., El-Sayed. , Raj, Sini. , K, Shriram. Hybrid Ensemble Learning for Flow-Level IoT Traffic Classification Using ACI Dataset: Towards Scalable and Real-Time Threat Detection. Journal of Artificial Intelligence and Metaheuristics, vol. , no. , 2025, pp. 01-18. DOI: https://doi.org/10.54216/JAIM.090201
    M., E. Raj, S. K, S. (2025). Hybrid Ensemble Learning for Flow-Level IoT Traffic Classification Using ACI Dataset: Towards Scalable and Real-Time Threat Detection. Journal of Artificial Intelligence and Metaheuristics, (), 01-18. DOI: https://doi.org/10.54216/JAIM.090201
    M., El-Sayed. Raj, Sini. K, Shriram. Hybrid Ensemble Learning for Flow-Level IoT Traffic Classification Using ACI Dataset: Towards Scalable and Real-Time Threat Detection. Journal of Artificial Intelligence and Metaheuristics , no. (2025): 01-18. DOI: https://doi.org/10.54216/JAIM.090201
    M., E. , Raj, S. , K, S. (2025) . Hybrid Ensemble Learning for Flow-Level IoT Traffic Classification Using ACI Dataset: Towards Scalable and Real-Time Threat Detection. Journal of Artificial Intelligence and Metaheuristics , () , 01-18 . DOI: https://doi.org/10.54216/JAIM.090201
    M. E. , Raj S. , K S. [2025]. Hybrid Ensemble Learning for Flow-Level IoT Traffic Classification Using ACI Dataset: Towards Scalable and Real-Time Threat Detection. Journal of Artificial Intelligence and Metaheuristics. (): 01-18. DOI: https://doi.org/10.54216/JAIM.090201
    M., E. Raj, S. K, S. "Hybrid Ensemble Learning for Flow-Level IoT Traffic Classification Using ACI Dataset: Towards Scalable and Real-Time Threat Detection," Journal of Artificial Intelligence and Metaheuristics, vol. , no. , pp. 01-18, 2025. DOI: https://doi.org/10.54216/JAIM.090201