<abstract xmlns="http://www.w3.org/1999/xhtml">

<p>The Internet of Things (IoT) is widespread in our lives these days (e.g., Smart homes, smart cities, etc.). Despite its significant role in providing automatic real-time services to users, these devices are highly vulnerable due to their design simplicity and limitations regarding power, CPU, and memory. Tracing network traffic and investigating its behavior helps in building a digital forensics framework to secure IoT networks. This paper proposes a new Network Digital Forensics approach called (NDF IoT). The proposed approach uses the Owl optimizer for selecting the best subset of features that help in identifying suspicious behavior in such environments. The NDF IoT approach is evaluated using the Bot IoT UNSW dataset in terms of detection rate, false alarms, accuracy, and f-score. The approach being proposed has achieved 100% detection rate and 99.3% f-score and outperforms related works that used the same dataset while reducing the number of features to three features only.</p>
</abstract>

The Internet of Things (IoT) is widespread in our lives these days (e.g., Smart homes, smart cities, etc.). Despite its significant role in providing automatic real-time services to users, these devices are highly vulnerable due to their design simplicity and limitations regarding power, CPU, and memory. Tracing network traffic and investigating its behavior helps in building a digital forensics framework to secure IoT networks. This paper proposes a new Network Digital Forensics approach called (NDF IoT). The proposed approach uses the Owl optimizer for selecting the best subset of features that help in identifying suspicious behavior in such environments. The NDF IoT approach is evaluated using the Bot IoT UNSW dataset in terms of detection rate, false alarms, accuracy, and f-score. The approach being proposed has achieved 100% detection rate and 99.3% f-score and outperforms related works that used the same dataset while reducing the number of features to three features only.

A New Network Digital Forensics Approach for Internet of Things Environment Based on Binary Owl Optimizer

Department of Networks and Information Security

Jordan University of Science and Technology

Cybernetics and Information Technologies

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

The Internet of Things (IoT) is widespread in our lives these days (e.g., Smart homes, smart cities, etc.). Despite its significant role in providing automatic...

A New Network Digital Forensics Approach for Internet of Things Environment Based on Binary Owl Optimizer

Published Online: Sep 22, 2022

Page range: 146 - 160

Received: Jul 01, 2022

Accepted: Aug 05, 2022

DOI: https://doi.org/10.2478/cait-2022-0033

Keywords
Cybersecurity, Internet of things, Intrusion detection, Feature selection, Network Digital Forensics

© 2022 Hadeel Alazzam et al., published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

A New Network Digital Forensics Approach for Internet of Things Environment Based on Binary Owl Optimizer

Published Online: Sep 22, 2022

Page range: 146 - 160

Received: Jul 01, 2022

Accepted: Aug 05, 2022

DOI: https://doi.org/10.2478/cait-2022-0033

KeywordsCybersecurity, Internet of things, Intrusion detection, Feature selection, Network Digital Forensics

© 2022 Hadeel Alazzam et al., published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

Keywords
Cybersecurity, Internet of things, Intrusion detection, Feature selection, Network Digital Forensics