A Hybrid Cuckoo Search-K-means Model for Enhanced Intrusion Detection in Internet of Things

A Hybrid Cuckoo Search-K-means Model for Enhanced Intrusion Detection in Internet of Things | Research Square window.SnipcartSettings = { analytics: { enabled: false } }; (function() { var accessVector = localStorage.getItem('access_vector') || ''; window.dataLayer = window.dataLayer || []; if (accessVector) { window.dataLayer.push({ user: { profile: { profileInfo: { snid: accessVector } } } }); } })(); (function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src='https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);})(window,document,'script','dataLayer','GTM-K279D39R'); Browse Preprints In Review Journals COVID-19 Preprints AJE Video Bytes Research Tools Research Promotion AJE Professional Editing AJE Rubriq About Preprint Platform In Review Editorial Policies Our Team Advisory Board Help Center Sign In Submit a Preprint Cite Share Download PDF Research Article A Hybrid Cuckoo Search-K-means Model for Enhanced Intrusion Detection in Internet of Things Mustafa Yahya Hassan, Ali Hamza Najim, Kareem Ali Al-Sharhanee, and 3 more This is a preprint; it has not been peer reviewed by a journal. https://doi.org/ 10.21203/rs.3.rs-4511132/v1 This work is licensed under a CC BY 4.0 License Status: Under Review Version 1 posted 13 You are reading this latest preprint version Abstract Integrating machine learning (ML) into intrusion detection systems (IDS) is considered an important topic for preventing the spread of cyber threats. However, when it comes to machine learning techniques, IDSs face challenges in accurately identifying various types of attacks within the complex structures of a network. This study addresses the lack of research on combining metaheuristic optimization techniques with unsupervised machine learning algorithms in IDS design. The proposed model uses the cuckoo search metaheuristic and the K-means method to improve IDS precision. Here, the cuckoo search algorithm is used to increase the efficiency of feature selection. Meanwhile, the k-means clustering methodology is used to discretize the data and reduce its dimensionality by using two clusters, C1 and C2. The proposed model, developed carefully, includes data preprocessing (handling missing values), data transformation (label encoding), and data normalization. A stochastic operator assesses the impact of the K-means operator. The model is evaluated using an accessible intrusion dataset and compared with other state-of-the-art models. From the research conclusions, the presented model also demonstrates better results compared to the rest, especially when it reaches accuracy (99. 79%), precision (99. 78%), recall (99. 51%), and the F1-score (99). Intrusion detection Wireless sensor network Internet of Things (IoT) Machine learning security cuckoo search Full Text Additional Declarations No competing interests reported. Cite Share Download PDF Status: Under Review Version 1 posted Editorial decision: Revision requested 09 Aug, 2024 Reviews received at journal 04 Aug, 2024 Reviews received at journal 03 Aug, 2024 Reviewers agreed at journal 03 Aug, 2024 Reviewers agreed at journal 31 Jul, 2024 Reviewers agreed at journal 31 Jul, 2024 Reviewers agreed at journal 31 Jul, 2024 Reviews received at journal 17 Jul, 2024 Reviewers agreed at journal 17 Jul, 2024 Reviewers invited by journal 17 Jul, 2024 Editor assigned by journal 12 Jun, 2024 Submission checks completed at journal 07 Jun, 2024 First submitted to journal 31 May, 2024 You are reading this latest preprint version Research Square lets you share your work early, gain feedback from the community, and start making changes to your manuscript prior to peer review in a journal. As a division of Research Square Company, we’re committed to making research communication faster, fairer, and more useful. We do this by developing innovative software and high quality services for the global research community. Our growing team is made up of researchers and industry professionals working together to solve the most critical problems facing scientific publishing. Also discoverable on Platform About Our Team In Review Editorial Policies Advisory Board Help Center Resources Author Services Accessibility API Access RSS feed Manage Cookie Preferences © Research Square 2026 | ISSN 2693-5015 (online) Privacy Policy Terms of Service Do Not Sell My Personal Information {"props":{"pageProps":{"initialData":{"identity":"rs-4511132","acceptedTermsAndConditions":true,"allowDirectSubmit":false,"archivedVersions":[],"articleType":"Research Article","associatedPublications":[],"authors":[{"id":315670416,"identity":"7d94e4a8-9b3a-457d-86cd-aba113c239b2","order_by":0,"name":"Mustafa Yahya Hassan","email":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAZAAAAAyAQMAAABI0h/eAAAABlBMVEX///8AAABVwtN+AAAACXBIWXMAAA7EAAAOxAGVKw4bAAABA0lEQVRIiWNgGAWjYNACGxDBA8QVYK4BGOEBjA0MaTAtZ0jWwtgG04IH6M5If/7gR4Idg8Hxs8ckfs6zTmxgb94mwVBgjVOL2Y0cw8aehGQGgzN5aZK929ITG3iOlUkwGKTj08LYwPuDmcHgQI6ZBO+2w4kNEkAGg8FhPFrSHzb+SahnMDj/xkzy7xygFvk3hLQkGDbzJBxmMLiRYybN2wCyhYeAljNvDGfLJBznkbzxxtha5li6cRtPWrFFAj6/HE9/8PFNQrUc3/kcw5tvaqxl+9kPb7zx4Q/uEIMBHoUDDCwSDAzMDGwgbgKQQRDINzAwf2BAqCRCyygYBaNgFIwUAADwHFRXAPdkUwAAAABJRU5ErkJggg==","orcid":"","institution":"University of Al-Qadisiya 54004","correspondingAuthor":true,"prefix":"","firstName":"Mustafa","middleName":"Yahya","lastName":"Hassan","suffix":""},{"id":315670417,"identity":"637c8ce5-b8a5-4c50-a864-b78c4570e9b6","order_by":1,"name":"Ali Hamza Najim","email":"","orcid":"","institution":"Imam Al-Kadhum College (IKC) Al-Diwaniyah 54004","correspondingAuthor":false,"prefix":"","firstName":"Ali","middleName":"Hamza","lastName":"Najim","suffix":""},{"id":315670418,"identity":"3652e116-7006-4d0a-bebd-6515774b4dea","order_by":2,"name":"Kareem Ali Al-Sharhanee","email":"","orcid":"","institution":"Al-Farahidi University","correspondingAuthor":false,"prefix":"","firstName":"Kareem","middleName":"Ali","lastName":"Al-Sharhanee","suffix":""},{"id":315670419,"identity":"cac5250b-2741-40c5-8f23-673128352d49","order_by":3,"name":"Mustafa Noaman Kadhim","email":"","orcid":"","institution":"University of Al-Qadisiya 54004","correspondingAuthor":false,"prefix":"","firstName":"Mustafa","middleName":"Noaman","lastName":"Kadhim","suffix":""},{"id":315670420,"identity":"72d5964d-ed52-4260-bdd5-236acfa98924","order_by":4,"name":"Naglaa F. Soliman","email":"","orcid":"","institution":"Princess Nourah bint Abdulrahman University","correspondingAuthor":false,"prefix":"","firstName":"Naglaa","middleName":"F.","lastName":"Soliman","suffix":""},{"id":315670421,"identity":"d5a6a04c-3d9d-4cc1-8a70-8fb4a8b11596","order_by":5,"name":"Abeer D. Algarni","email":"","orcid":"","institution":"Princess Nourah bint Abdulrahman University","correspondingAuthor":false,"prefix":"","firstName":"Abeer","middleName":"D.","lastName":"Algarni","suffix":""}],"badges":[],"createdAt":"2024-05-31 21:53:19","currentVersionCode":1,"declarations":"","doi":"10.21203/rs.3.rs-4511132/v1","doiUrl":"https://doi.org/10.21203/rs.3.rs-4511132/v1","draftVersion":[],"editorialEvents":[],"editorialNote":"","failedWorkflow":false,"files":[{"id":58778278,"identity":"53b929c9-2ff3-4ba0-8bcf-4e59544ff204","added_by":"auto","created_at":"2024-06-21 03:59:18","extension":"pdf","order_by":1,"title":"","display":"","copyAsset":false,"role":"manuscript-pdf","size":646196,"visible":true,"origin":"","legend":"","description":"","filename":"MainManuscript.pdf","url":"https://assets-eu.researchsquare.com/files/rs-4511132/v1_covered_0f15fd28-5e30-4461-992b-8e4f4bea4d6d.pdf"}],"financialInterests":"No competing interests reported.","formattedTitle":"A Hybrid Cuckoo Search-K-means Model for Enhanced Intrusion Detection in Internet of Things","fulltext":[],"fulltextSource":"","fullText":"","funders":[],"hasAdminPriorityOnWorkflow":false,"hasManuscriptDocX":false,"hasOptedInToPreprint":true,"hasPassedJournalQc":"","hasAnyPriority":false,"hideJournal":false,"highlight":"","institution":"","isAcceptedByJournal":true,"isAuthorSuppliedPdf":true,"isDeskRejected":"","isHiddenFromSearch":false,"isInQc":false,"isInWorkflow":false,"isPdf":true,"isPdfUpToDate":true,"isWithdrawnOrRetracted":false,"journal":{"display":true,"email":"[email protected]","identity":"discover-computing","isNatureJournal":false,"hasQc":true,"allowDirectSubmit":false,"externalIdentity":"","sideBox":"Learn more about [Discover Computing](https://link.springer.com/journal/10791)","snPcode":"10791","submissionUrl":"https://submission.springernature.com/new-submission/10791/3","title":"Discover Computing","twitterHandle":"","acdcEnabled":true,"dfaEnabled":true,"editorialSystem":"stoa","reportingPortfolio":"Discover Series","inReviewEnabled":true,"inReviewRevisionsEnabled":true},"keywords":"Intrusion detection, Wireless sensor network, Internet of Things (IoT), Machine learning, security, cuckoo search","lastPublishedDoi":"10.21203/rs.3.rs-4511132/v1","lastPublishedDoiUrl":"https://doi.org/10.21203/rs.3.rs-4511132/v1","license":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/"},"manuscriptAbstract":"\u003cp\u003eIntegrating machine learning (ML) into intrusion detection systems (IDS) is considered an important topic for preventing the spread of cyber threats. However, when it comes to machine learning techniques, IDSs face challenges in accurately identifying various types of attacks within the complex structures of a network. This study addresses the lack of research on combining metaheuristic optimization techniques with unsupervised machine learning algorithms in IDS design. The proposed model uses the cuckoo search metaheuristic and the K-means method to improve IDS precision. Here, the cuckoo search algorithm is used to increase the efficiency of feature selection. Meanwhile, the k-means clustering methodology is used to discretize the data and reduce its dimensionality by using two clusters, C1 and C2. The proposed model, developed carefully, includes data preprocessing (handling missing values), data transformation (label encoding), and data normalization. A stochastic operator assesses the impact of the K-means operator. The model is evaluated using an accessible intrusion dataset and compared with other state-of-the-art models. From the research conclusions, the presented model also demonstrates better results compared to the rest, especially when it reaches accuracy (99. 79%), precision (99. 78%), recall (99. 51%), and the F1-score (99).\u003c/p\u003e","manuscriptTitle":"A Hybrid Cuckoo Search-K-means Model for Enhanced Intrusion Detection in Internet of Things","msid":"","msnumber":"","nonDraftVersions":[{"code":1,"date":"2024-06-21 03:51:09","doi":"10.21203/rs.3.rs-4511132/v1","editorialEvents":[{"type":"communityComments","content":0},{"type":"decision","content":"Revision requested","date":"2024-08-09T07:51:45+00:00","index":"","fulltext":""},{"type":"editorInvitedReview","content":"","date":"2024-08-04T10:24:42+00:00","index":"hide","fulltext":""},{"type":"editorInvitedReview","content":"","date":"2024-08-03T07:23:31+00:00","index":"hide","fulltext":""},{"type":"reviewerAgreed","content":"116051223823808210288236981455154084687","date":"2024-08-03T07:22:11+00:00","index":"hide","fulltext":""},{"type":"reviewerAgreed","content":"2753484906738757743914095563928924206","date":"2024-08-01T03:59:08+00:00","index":"hide","fulltext":""},{"type":"reviewerAgreed","content":"298043167414827937968220807987630528651","date":"2024-07-31T12:13:09+00:00","index":"hide","fulltext":""},{"type":"reviewerAgreed","content":"88576857236967116787805718164735965062","date":"2024-07-31T11:55:39+00:00","index":"hide","fulltext":""},{"type":"editorInvitedReview","content":"","date":"2024-07-17T09:22:03+00:00","index":"hide","fulltext":""},{"type":"reviewerAgreed","content":"322393591261856225927825158568538724813","date":"2024-07-17T08:48:46+00:00","index":"hide","fulltext":""},{"type":"reviewersInvited","content":"","date":"2024-07-17T08:35:01+00:00","index":"","fulltext":""},{"type":"editorAssigned","content":"","date":"2024-06-13T03:18:28+00:00","index":"","fulltext":""},{"type":"checksComplete","content":"","date":"2024-06-07T09:57:09+00:00","index":"","fulltext":""},{"type":"submitted","content":"Discover Computing","date":"2024-05-31T21:45:52+00:00","index":"","fulltext":""}],"status":"published","journal":{"display":true,"email":"[email protected]","identity":"discover-computing","isNatureJournal":false,"hasQc":true,"allowDirectSubmit":false,"externalIdentity":"","sideBox":"Learn more about [Discover Computing](https://link.springer.com/journal/10791)","snPcode":"10791","submissionUrl":"https://submission.springernature.com/new-submission/10791/3","title":"Discover Computing","twitterHandle":"","acdcEnabled":true,"dfaEnabled":true,"editorialSystem":"stoa","reportingPortfolio":"Discover Series","inReviewEnabled":true,"inReviewRevisionsEnabled":true}}],"origin":"","ownerIdentity":"c452ce46-2182-4858-93c2-dfd91f6f9191","owner":[],"postedDate":"June 21st, 2024","published":true,"recentEditorialEvents":[],"rejectedJournal":[],"revision":"","amendment":"","status":"under-review","subjectAreas":[],"tags":[],"updatedAt":"2024-09-10T07:57:51+00:00","versionOfRecord":[],"versionCreatedAt":"2024-06-21 03:51:09","video":"","vorDoi":"","vorDoiUrl":"","workflowStages":[]},"version":"v1","identity":"rs-4511132","journalConfig":"researchsquare"},"__N_SSP":true},"page":"/article/[identity]/[[...version]]","query":{"redirect":"/article/rs-4511132","identity":"rs-4511132","version":["v1"]},"buildId":"qtupq5eGEP_6zYnWcrvyt","isFallback":false,"isExperimentalCompile":false,"dynamicIds":[84888],"gssp":true,"scriptLoader":[]}