信息安全研究 ›› 2026, Vol. 12 ›› Issue (11): 1042-1051.DOI: 10.12379/j.issn.2096-1057.2026.11.08

• • 上一篇    

基于类别感知与加权集成的物联网入侵检测

陈良臣,傅德印,张朔,禾博姝,卢志刚,刘宝旭   

  • 发布日期:2026-11-11

IoT Intrusion Detection Based on Class-Aware and Weighted Ensemble

Chen Liangchen, Fu Deyin, Zhang Shuo, He Boshu, Lu Zhigang, Liu Baoxu   

  • Published:2026-11-11

摘要: 针对物联网(Internet of Things,IoT)网络流量数据中存在的高维特征冗余、类别分布不均衡以及复杂攻击场景下检测性能不足等问题,提出一种融合类别感知特征选择与加权集成学习的物联网入侵检测方法(IoT Intrusion Detection via integrating Class-aware Feature selection and Weighted Ensemble learning,IID-CFWE)。首先,融合全局特征、类别感知特征和边界样本重要性特征,构建类别感知自适应递归特征选择方法(LightGBM-based Class-Aware Adaptive recursive Feature Selection,CA-AFS),在递归消除冗余特征的同时增强对不同攻击类别,尤其是少数类别的特征判别能力,从而降低类别不平衡对特征选择结果的影响。其次,构建随机搜索优化与加权软投票结合的异构集成学习模型,通过随机搜索确定不同基分类器的超参数配置,充分利用异构分类器的互补判别能力,并结合各分类器的类别概率输出进行加权融合,从而提高模型对复杂攻击流量的检测性能与分类稳定性。在公开数据集N-BaIoT和CIC-IDS-2017上开展实验验证,并与多种主流机器学习方法进行对比分析。实验结果表明,所提方法能够在减少特征数量的同时保持较高的物联网入侵检测整体性能。该研究为构建高精度的物联网安全防护系统提供了一种有效方法。

关键词: 物联网;入侵检测;类别感知;特征选择;加权集成学习

Abstract: To address high-dimensional feature redundancy, class imbalance, and limited detection performance in complex attack IoT (Internet of Things)scenarios, this study proposes an IoT Intrusion Detection method integrating Class-aware Feature selection and Weighted Ensemble learning(IID-CFWE). First, a Class-aware Adaptive recursive Feature Selection(CA-AFS) mechanism is developed by jointly considering global, class-aware, and boundary-sample feature importance, thereby reducing redundant features and enhancing the discrimination of minority attack classes. Second, a heterogeneous ensemble learning model combining random-search optimization with weighted soft voting is constructed. Random search is employed to optimize the hyperparameters of base classifiers, while the class probability outputs of base classifiers are weighted according to their validation performance and fused by weighted soft voting, enabling the model to exploit their complementary discriminative capabilities. The class-probability outputs of the base classifiers are then aggregated through weighted soft voting to improve detection performance and classification stability. Extensive experiments are conducted on the public N-BaIoT and CIC-IDS-2017 datasets. The results indicate that the proposed method effectively improves intrusion detection performance while reducing feature redundancy, providing an efficient solution for IoT network security.

Key words: internet of things (IoT); intrusion detection; class-aware; feature selection; weighted ensemble learning

中图分类号: