A Temporal Deep Learning Framework for Multi-Class Intrusion Detection in Industrial IoT Networks

Hala Hayajneh; Qasem Abu Al-Haija

doi:10.65890/race.v2i3.206

Authors

Hala Hayajneh Faculty of Computer and Information Technology, Jordan University of Science and Technology, Irbid, Jordan
Qasem Abu Al-Haija Faculty of Computer and Information Technology, Jordan University of Science and Technology, Irbid, Jordan

DOI:

https://doi.org/10.65890/race.v2i3.206

Keywords:

Industrial Internet of Things (IIoT), Intrusion Detection System (IDS), Long Short-Term Memory (LSTM), SMOTE, Deep Learning, Cybersecurity.

Abstract

The rapid proliferation of the Industrial Internet of Things (IIoT) has significantly expanded the cyberattack surface of connected industrial systems, creating an urgent need for intelligent, reliable intrusion detection mechanisms to safeguard edge computing environments. This paper proposes a deep learning-based Intrusion Detection System (IDS) that integrates Long Short-Term Memory (LSTM) networks with the Synthetic Minority Over-sampling Technique (SMOTE) to address the challenges of temporal traffic modelling and severe class imbalance in multi-class intrusion detection. The proposed framework employs sequential feature learning to capture temporal dependencies in IIoT network traffic while applying SMOTE exclusively to the training data to improve the representation of minority attack classes and prevent data leakage. Experimental evaluation on the Edge-IIoTset dataset, comprising more than 15 traffic classes, demonstrates that the proposed model achieves training accuracy of 86.24% and validation accuracy of 74.60%, with balanced precision, recall, and F1-score of 0.76, 0.74, and 0.75, respectively. These findings demonstrate that combining temporal feature learning with effective data balancing provides a practical and scalable approach for enhancing multi-class intrusion detection and supporting real-time cybersecurity monitoring in Industrial IoT environments.

References

[1] D.Hanes, G.Salgueiro, P.Grossetete, R. Barton, and J.Henry, IoT Fundamentals: Networking Technologies, Protocols, and Use Cases for the Internet of Things.IN: Cisco Press,2017, Indianapolis.

[2] Z.Abbas and W.Yoon, "A Survey on Energy Conserving Mechanisms for the Internet of Things: Wireless Networking Aspects, “Sensors, vol.15, no.10, pp. 24818-24847, 2015. DOI: https://doi.org/10.3390/s151024818

[3] I. Al-Barazanchi, Z. A. Jaaz, H. R. Abdulshaheed, and H. H. Abbas, "Practical Application of IoT and its Implications on Existing Software," Journal of Advanced Research in Dynamical and Control Systems, vol. 10, no. 10, pp. 1546-1552, 2018.

[4] T. Sasi, A. H. Lashkari, R. Lu, P. Xiong, and S. Iqbal, "A comprehensive survey on IoT attacks: Taxonomy, detection mechanisms and challenges," Journal of Information Security and Applications, vol. 78, p. 103598, Nov. 2023, doi: 10.1016/j.jisa.2023.103598.

[5] W. Chen, F. Wang and M. Edwards, "Active Countermeasures for Email Fraud," 2023 IEEE 8th European Symposium on Security and Privacy (EuroS&P), Delft, Netherlands, 2023, pp. 39-55, doi: 10.1109/EuroSP57164.2023.00012. DOI: https://doi.org/10.1109/EuroSP57164.2023.00012

[6] A. K. B. Arnob, M. F. Mridha, M. Safran, M. Amiruzzaman, and M. R. Islam, "An Enhanced LSTM Approach for Detecting IoT-Based DDoS Attacks Using Honeypot Data," Jan. 2025. DOI: https://doi.org/10.1007/s44196-025-00741-7

[7] U. Islam et al., "Detection of Distributed Denial of Service (DDoS) Attacks in IoT-Based Monitoring System of Banking Sector Using Machine Learning Models," Sustainability, vol. 14, no. 14, p. 8374, Jul. 2022, doi: 10.3390/su14148374. DOI: https://doi.org/10.3390/su14148374

[8] M. Abubakar, A. Sattar, H. Manzoor, K. Farooq, and M. Yousif, "IIOT: An Infusion of Embedded Systems, TinyML, and Federated Learning in Industrial IoT," Journal of Computing & Biomedical Informatics, vol. 8, no. 2, pp. 1-14, Mar. 2025, doi: 10.56979/802/20245.

[9] O. F. Awad, L. R. Hazim, A. A. Jasim, and O. Ata, "Enhancing IIoT Security with Machine Learning and Deep Learning for Intrusion Detection," Malaysian Journal of Computer Science, vol. 37, no. 2, pp. 139–153, Apr. 2024, doi: 10.22452/mjcs.vol37no2.3. DOI: https://doi.org/10.22452/mjcs.vol37no2.3

[10] J. Ji, B. Zhong, and K. -K. Ma, "Single Image Super-Resolution Using Asynchronous Multi-Scale Network," IEEE Transactions on Circuits and Systems for Video Technology, vol. 31, no. 11, pp. 4231-4244, Nov. 2021, doi: 10.1109/TCSVT.2021.3050186.

[11] M. A. Ferrag, L. Maglaras, S. T. Moschoyiannis, and H. Janicke, "Deep Learning for Cyber Security in Industrial IoT: A Survey," IEEE Access, vol. 8, pp. 104939-104966, 2020, doi: 10.1109/ACCESS.2020.2999659. DOI: https://doi.org/10.1109/ACCESS.2020.2999659

[12] Cao L. Data science: a comprehensive overview. ACM Computing Surveys (CSUR). 2017 Jun 29;50(3):1-42. DOI: https://doi.org/10.1145/3076253

[13] C.-W. Tsai, C.-F. Lai, M.-C. Chiang, and L. T. Yang, “Data mining for Internet of Things: A survey,” IEEE Communications Surveys & Tutorials, vol. 16, no. 1, pp. 77–97, 2014. DOI: https://doi.org/10.1109/SURV.2013.103013.00206

[14] A. Gubbi, R. Buyya, S. Marusic, and M. Palaniswami, “Internet of Things (IoT): A vision, architectural elements, and future directions,” Future Generation Computer Systems, vol. 29, no. 7, pp. 1645–1660, 2013. DOI: https://doi.org/10.1016/j.future.2013.01.010

[15] L. Da Xu, W. He, and S. Li, “Internet of Things in industries: A survey,” IEEE Transactions on Industrial Informatics, vol. 10, no. 4, pp. 2233–2243, 2014. DOI: https://doi.org/10.1109/TII.2014.2300753

[16] L. Atzori, A. Iera, and G. Morabito, “The Internet of Things: A survey,” Computer Networks, vol. 54, no. 15, pp. 2787–2805, 2010. DOI: https://doi.org/10.1016/j.comnet.2010.05.010

[17] M. Chen, S. Mao, and Y. Liu, “Big data: A survey,” Mobile Networks and Applications, vol. 19, no. 2, pp. 171–209, 2014. DOI: https://doi.org/10.1007/s11036-013-0489-0

[18] S. Li, L. Da Xu, and S. Zhao, “The Internet of Things: A survey,” Information Systems Frontiers, vol. 17, no. 2, pp. 243–259, 2015. DOI: https://doi.org/10.1007/s10796-014-9492-7

[19] Q. A. Al-Haija and S. A. Tamimi, “A State-of-the-Art Survey of Adversarial Reinforcement Learning for IoT Intrusion Detection,” Computers, Materials & Continua, vol. 87, no. 1, p. 2, 2026, doi: 10.32604/cmc.2025.073540. DOI: https://doi.org/10.32604/cmc.2025.073540

[20] I. M. Aljundi, Q. Abu Al-Haija, and M. Al-Dala’ien, “AI-Driven PUF-Based Authentication for Secure MQTT-IoT Systems,” in Proc. 7th International Conference on Intelligent Autonomous Systems (ICoIAS), 2025, pp. 169–174, doi: 10.1109/ICoIAS69065.2025.00032. DOI: https://doi.org/10.1109/ICoIAS69065.2025.00032

[21] S. Al Tamimi, Q. A. Al-Haija, and A. AlShuaibi, “Securing Distributed IoT Systems: Blockchain-Based Protocol with Integrated Intrusion Response,” in Proc. 2025 IEEE 22nd International Conference on Mobile Ad-Hoc and Smart Systems (MASS), 2025, pp. 700–704, doi: 10.1109/MASS66014.2025.00114. DOI: https://doi.org/10.1109/MASS66014.2025.00114