A Novel Hybrid Method Using Grey Wolf Algorithm and Genetic Algorithm for IoT Botnet DDoS Attacks Detection

Abstract The Internet of Things (IoT) is a vast network of interconnected physical objects that has improved the conditions for a computer-based physical world and improved efficiency. With the increase in communication in an IoT system, Internet security has decreased, and the most dangerous and so...

Full description

Saved in:
Bibliographic Details
Main Authors: Mahdieh Maazalahi, Soodeh Hosseini
Format: Article
Language:English
Published: Springer 2025-03-01
Series:International Journal of Computational Intelligence Systems
Subjects:
Online Access:https://doi.org/10.1007/s44196-025-00774-y
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1850094785517322240
author Mahdieh Maazalahi
Soodeh Hosseini
author_facet Mahdieh Maazalahi
Soodeh Hosseini
author_sort Mahdieh Maazalahi
collection DOAJ
description Abstract The Internet of Things (IoT) is a vast network of interconnected physical objects that has improved the conditions for a computer-based physical world and improved efficiency. With the increase in communication in an IoT system, Internet security has decreased, and the most dangerous and sophisticated attacks in the IoT have emerged, i.e., DDoS and Botnet attacks. DDoS attacks are a serious threat to the availability of Internet services, especially since botnets can now be launched by almost anyone. In this situation, the use of an intrusion detection system (IDS) is essential to detect intruders and maintain the security of IoT networks. In this paper, a new IDS is proposed to detect IoT-Botnet DDoS attacks. This IDS is a new three-phase system, the first phase is related to preprocessing on the dataset and the second phase includes a new hybrid method for feature selection using filter and wrapper methods based on the Grey Wolf (GW) algorithm and genetics called GW-GA. In this method, the initial population is randomly selected and then at each stage, feature selection is done by both algorithms simultaneously and the final answer is compared and the best solutions are given as a new population to both algorithms and the third phase includes the use of machine learning and metaheuristic algorithms as classifiers. In the proposed method and to verify the performance, it is evaluated using the large BOT-IoT dataset. The results show that the proposed method significantly reduces the feature and also increases the classification accuracy compared to other methods, and the RF and Bagging algorithms have achieved a maximum recognition accuracy of 0.999. The dimensions of BOT-IoT have been reduced from 46 features to 12.
format Article
id doaj-art-c1b5644541dd447e8c102c68efbc778e
institution DOAJ
issn 1875-6883
language English
publishDate 2025-03-01
publisher Springer
record_format Article
series International Journal of Computational Intelligence Systems
spelling doaj-art-c1b5644541dd447e8c102c68efbc778e2025-08-20T02:41:35ZengSpringerInternational Journal of Computational Intelligence Systems1875-68832025-03-0118116110.1007/s44196-025-00774-yA Novel Hybrid Method Using Grey Wolf Algorithm and Genetic Algorithm for IoT Botnet DDoS Attacks DetectionMahdieh Maazalahi0Soodeh Hosseini1Department of Computer Science, Faculty of Mathematics and Computer, Shahid Bahonar University of KermanDepartment of Computer Science, Faculty of Mathematics and Computer, Shahid Bahonar University of KermanAbstract The Internet of Things (IoT) is a vast network of interconnected physical objects that has improved the conditions for a computer-based physical world and improved efficiency. With the increase in communication in an IoT system, Internet security has decreased, and the most dangerous and sophisticated attacks in the IoT have emerged, i.e., DDoS and Botnet attacks. DDoS attacks are a serious threat to the availability of Internet services, especially since botnets can now be launched by almost anyone. In this situation, the use of an intrusion detection system (IDS) is essential to detect intruders and maintain the security of IoT networks. In this paper, a new IDS is proposed to detect IoT-Botnet DDoS attacks. This IDS is a new three-phase system, the first phase is related to preprocessing on the dataset and the second phase includes a new hybrid method for feature selection using filter and wrapper methods based on the Grey Wolf (GW) algorithm and genetics called GW-GA. In this method, the initial population is randomly selected and then at each stage, feature selection is done by both algorithms simultaneously and the final answer is compared and the best solutions are given as a new population to both algorithms and the third phase includes the use of machine learning and metaheuristic algorithms as classifiers. In the proposed method and to verify the performance, it is evaluated using the large BOT-IoT dataset. The results show that the proposed method significantly reduces the feature and also increases the classification accuracy compared to other methods, and the RF and Bagging algorithms have achieved a maximum recognition accuracy of 0.999. The dimensions of BOT-IoT have been reduced from 46 features to 12.https://doi.org/10.1007/s44196-025-00774-yEvolutionary algorithmsGenetics algorithmGrey Wolf algorithmBotnet attackDDOSMeta-heuristic algorithm
spellingShingle Mahdieh Maazalahi
Soodeh Hosseini
A Novel Hybrid Method Using Grey Wolf Algorithm and Genetic Algorithm for IoT Botnet DDoS Attacks Detection
International Journal of Computational Intelligence Systems
Evolutionary algorithms
Genetics algorithm
Grey Wolf algorithm
Botnet attack
DDOS
Meta-heuristic algorithm
title A Novel Hybrid Method Using Grey Wolf Algorithm and Genetic Algorithm for IoT Botnet DDoS Attacks Detection
title_full A Novel Hybrid Method Using Grey Wolf Algorithm and Genetic Algorithm for IoT Botnet DDoS Attacks Detection
title_fullStr A Novel Hybrid Method Using Grey Wolf Algorithm and Genetic Algorithm for IoT Botnet DDoS Attacks Detection
title_full_unstemmed A Novel Hybrid Method Using Grey Wolf Algorithm and Genetic Algorithm for IoT Botnet DDoS Attacks Detection
title_short A Novel Hybrid Method Using Grey Wolf Algorithm and Genetic Algorithm for IoT Botnet DDoS Attacks Detection
title_sort novel hybrid method using grey wolf algorithm and genetic algorithm for iot botnet ddos attacks detection
topic Evolutionary algorithms
Genetics algorithm
Grey Wolf algorithm
Botnet attack
DDOS
Meta-heuristic algorithm
url https://doi.org/10.1007/s44196-025-00774-y
work_keys_str_mv AT mahdiehmaazalahi anovelhybridmethodusinggreywolfalgorithmandgeneticalgorithmforiotbotnetddosattacksdetection
AT soodehhosseini anovelhybridmethodusinggreywolfalgorithmandgeneticalgorithmforiotbotnetddosattacksdetection
AT mahdiehmaazalahi novelhybridmethodusinggreywolfalgorithmandgeneticalgorithmforiotbotnetddosattacksdetection
AT soodehhosseini novelhybridmethodusinggreywolfalgorithmandgeneticalgorithmforiotbotnetddosattacksdetection