{"id":"https://openalex.org/W4416696329","doi":"https://doi.org/10.1186/s13677-025-00785-2","title":"A novel IoT threat detection using GWO feature selection and CNN-enhanced LightGBM","display_name":"A novel IoT threat detection using GWO feature selection and CNN-enhanced LightGBM","publication_year":2025,"publication_date":"2025-11-26","ids":{"openalex":"https://openalex.org/W4416696329","doi":"https://doi.org/10.1186/s13677-025-00785-2"},"language":"en","primary_location":{"id":"doi:10.1186/s13677-025-00785-2","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s13677-025-00785-2","pdf_url":"https://link.springer.com/content/pdf/10.1186/s13677-025-00785-2.pdf","source":{"id":"https://openalex.org/S2486819371","display_name":"Journal of Cloud Computing Advances Systems and Applications","issn_l":"2192-113X","issn":["2192-113X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cloud Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://link.springer.com/content/pdf/10.1186/s13677-025-00785-2.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5028082668","display_name":"Tarek Abid","orcid":"https://orcid.org/0000-0002-4952-4249"},"institutions":[{"id":"https://openalex.org/I1288970718","display_name":"Mohamed-Cherif Messaadia University","ror":"https://ror.org/04pn9tn44","country_code":"DZ","type":"education","lineage":["https://openalex.org/I1288970718"]}],"countries":["DZ"],"is_corresponding":false,"raw_author_name":"Tarek Abid","raw_affiliation_strings":["Department of Computer Science, Mohamed-Cherif Messaadia University, Street, Souk-Ahras, 41000, Algeria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Mohamed-Cherif Messaadia University, Street, Souk-Ahras, 41000, Algeria","institution_ids":["https://openalex.org/I1288970718"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067011495","display_name":"Ahmed Ahmim","orcid":"https://orcid.org/0000-0001-5519-8868"},"institutions":[{"id":"https://openalex.org/I1288970718","display_name":"Mohamed-Cherif Messaadia University","ror":"https://ror.org/04pn9tn44","country_code":"DZ","type":"education","lineage":["https://openalex.org/I1288970718"]}],"countries":["DZ"],"is_corresponding":false,"raw_author_name":"Ahmed Ahmim","raw_affiliation_strings":["Department of Computer Science, Mohamed-Cherif Messaadia University, Street, Souk-Ahras, 41000, Algeria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Mohamed-Cherif Messaadia University, Street, Souk-Ahras, 41000, Algeria","institution_ids":["https://openalex.org/I1288970718"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012987955","display_name":"Faiz Maazouzi","orcid":"https://orcid.org/0000-0003-4652-9121"},"institutions":[{"id":"https://openalex.org/I1288970718","display_name":"Mohamed-Cherif Messaadia University","ror":"https://ror.org/04pn9tn44","country_code":"DZ","type":"education","lineage":["https://openalex.org/I1288970718"]}],"countries":["DZ"],"is_corresponding":false,"raw_author_name":"Faiz Maazouzi","raw_affiliation_strings":["Department of Computer Science, Mohamed-Cherif Messaadia University, Street, Souk-Ahras, 41000, Algeria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Mohamed-Cherif Messaadia University, Street, Souk-Ahras, 41000, Algeria","institution_ids":["https://openalex.org/I1288970718"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084433229","display_name":"Djalel Chefrour","orcid":"https://orcid.org/0000-0001-7931-2354"},"institutions":[{"id":"https://openalex.org/I1288970718","display_name":"Mohamed-Cherif Messaadia University","ror":"https://ror.org/04pn9tn44","country_code":"DZ","type":"education","lineage":["https://openalex.org/I1288970718"]}],"countries":["DZ"],"is_corresponding":false,"raw_author_name":"Djalel Chefrour","raw_affiliation_strings":["Department of Computer Science, Mohamed-Cherif Messaadia University, Street, Souk-Ahras, 41000, Algeria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Mohamed-Cherif Messaadia University, Street, Souk-Ahras, 41000, Algeria","institution_ids":["https://openalex.org/I1288970718"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018198828","display_name":"Insaf Ullah","orcid":"https://orcid.org/0000-0002-0380-283X"},"institutions":[{"id":"https://openalex.org/I110002522","display_name":"University of Essex","ror":"https://ror.org/02nkf1q06","country_code":"GB","type":"education","lineage":["https://openalex.org/I110002522"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Insaf Ullah","raw_affiliation_strings":["Institute for Analytics and Data Science, University of Essex, Wivenhoe Park, Colchester, CO4 3SQ, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute for Analytics and Data Science, University of Essex, Wivenhoe Park, Colchester, CO4 3SQ, UK","institution_ids":["https://openalex.org/I110002522"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079215353","display_name":"Marwa Ahmim","orcid":"https://orcid.org/0000-0003-3983-9711"},"institutions":[{"id":"https://openalex.org/I108754898","display_name":"Badji Mokhtar-Annaba University","ror":"https://ror.org/03sf55932","country_code":"DZ","type":"education","lineage":["https://openalex.org/I108754898"]}],"countries":["DZ"],"is_corresponding":false,"raw_author_name":"Marwa Ahmim","raw_affiliation_strings":["Networks and Systems Laboratory, Department of Computer Science, Badji Mokhtar University, Annaba, 23000, Algeria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Networks and Systems Laboratory, Department of Computer Science, Badji Mokhtar University, Annaba, 23000, Algeria","institution_ids":["https://openalex.org/I108754898"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5115430206","display_name":"Reham Almukhlifi","orcid":null},"institutions":[{"id":"https://openalex.org/I23075662","display_name":"Taibah University","ror":"https://ror.org/01xv1nn60","country_code":"SA","type":"education","lineage":["https://openalex.org/I23075662"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Reham Almukhlifi","raw_affiliation_strings":["Cybersecurity Department, College of Computer Science and Engineering, Taibah University, Medina, 42353, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cybersecurity Department, College of Computer Science and Engineering, Taibah University, Medina, 42353, Saudi Arabia","institution_ids":["https://openalex.org/I23075662"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5018198828"],"corresponding_institution_ids":["https://openalex.org/I110002522"],"apc_list":{"value":1490,"currency":"USD","value_usd":1490},"apc_paid":{"value":1490,"currency":"USD","value_usd":1490},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.32644474,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"14","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.5961999893188477,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.5961999893188477,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.03460000082850456,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.0284000001847744,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.667900025844574},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5956000089645386},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.5841000080108643},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.5475000143051147},{"id":"https://openalex.org/keywords/constant-false-alarm-rate","display_name":"Constant false alarm rate","score":0.5418000221252441},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.4641000032424927},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.45500001311302185},{"id":"https://openalex.org/keywords/boosting","display_name":"Boosting (machine learning)","score":0.45260000228881836},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.43149998784065247}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7714999914169312},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6930999755859375},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.667900025844574},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5956000089645386},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.5841000080108643},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5771999955177307},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.5475000143051147},{"id":"https://openalex.org/C77052588","wikidata":"https://www.wikidata.org/wiki/Q644307","display_name":"Constant false alarm rate","level":2,"score":0.5418000221252441},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4641000032424927},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.45500001311302185},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.45260000228881836},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4327999949455261},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.43149998784065247},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.428600013256073},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.4002000093460083},{"id":"https://openalex.org/C70153297","wikidata":"https://www.wikidata.org/wiki/Q5591907","display_name":"Gradient boosting","level":3,"score":0.39480000734329224},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.3824000060558319},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.37959998846054077},{"id":"https://openalex.org/C40969351","wikidata":"https://www.wikidata.org/wiki/Q3516228","display_name":"Word error rate","level":2,"score":0.37040001153945923},{"id":"https://openalex.org/C117978034","wikidata":"https://www.wikidata.org/wiki/Q5422192","display_name":"Extractor","level":2,"score":0.3626999855041504},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.34209999442100525},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.33889999985694885},{"id":"https://openalex.org/C52001869","wikidata":"https://www.wikidata.org/wiki/Q812530","display_name":"Naive Bayes classifier","level":3,"score":0.2718000113964081},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.2709999978542328},{"id":"https://openalex.org/C2776836416","wikidata":"https://www.wikidata.org/wiki/Q1364844","display_name":"False alarm","level":2,"score":0.25929999351501465},{"id":"https://openalex.org/C2776303644","wikidata":"https://www.wikidata.org/wiki/Q1020499","display_name":"Interfacing","level":2,"score":0.25130000710487366}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1186/s13677-025-00785-2","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s13677-025-00785-2","pdf_url":"https://link.springer.com/content/pdf/10.1186/s13677-025-00785-2.pdf","source":{"id":"https://openalex.org/S2486819371","display_name":"Journal of Cloud Computing Advances Systems and Applications","issn_l":"2192-113X","issn":["2192-113X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cloud Computing","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:d4fb12fab94245c4bdfd43a9ff163d2c","is_oa":true,"landing_page_url":"https://doaj.org/article/d4fb12fab94245c4bdfd43a9ff163d2c","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal of Cloud Computing: Advances, Systems and Applications, Vol 14, Iss 1, Pp 1-27 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s13677-025-00785-2","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s13677-025-00785-2","pdf_url":"https://link.springer.com/content/pdf/10.1186/s13677-025-00785-2.pdf","source":{"id":"https://openalex.org/S2486819371","display_name":"Journal of Cloud Computing Advances Systems and Applications","issn_l":"2192-113X","issn":["2192-113X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cloud Computing","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4416696329.pdf","grobid_xml":"https://content.openalex.org/works/W4416696329.grobid-xml"},"referenced_works_count":42,"referenced_works":["https://openalex.org/W433644524","https://openalex.org/W2050044094","https://openalex.org/W2061438946","https://openalex.org/W2064675550","https://openalex.org/W2105779206","https://openalex.org/W2112796928","https://openalex.org/W2136922672","https://openalex.org/W2296719434","https://openalex.org/W2342992012","https://openalex.org/W2618530766","https://openalex.org/W2789654058","https://openalex.org/W2911964244","https://openalex.org/W3014732532","https://openalex.org/W3015269186","https://openalex.org/W3033675321","https://openalex.org/W3117829857","https://openalex.org/W3125345207","https://openalex.org/W3135011374","https://openalex.org/W3197983285","https://openalex.org/W4200572601","https://openalex.org/W4205744751","https://openalex.org/W4214744595","https://openalex.org/W4239510810","https://openalex.org/W4297895296","https://openalex.org/W4320016096","https://openalex.org/W4320487429","https://openalex.org/W4360602045","https://openalex.org/W4365816927","https://openalex.org/W4375852471","https://openalex.org/W4381249713","https://openalex.org/W4385236602","https://openalex.org/W4385245566","https://openalex.org/W4387697589","https://openalex.org/W4388274259","https://openalex.org/W4388573952","https://openalex.org/W4391547892","https://openalex.org/W4392246839","https://openalex.org/W4399896686","https://openalex.org/W4401109663","https://openalex.org/W4402035331","https://openalex.org/W4405865604","https://openalex.org/W4410086503"],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"The":[1,131],"rush":[2],"to":[3,81],"deploy":[4],"IoT":[5,34],"devices":[6],"has":[7],"greatly":[8],"increased":[9],"the":[10,45,52,58,71,76,82,89,95,100,128,140,150,189],"threat":[11],"of":[12,31,47,78,102,122,134,162,166,183,201,205,209,214,222],"cyberattacks.":[13],"Although":[14],"prevention":[15],"methods":[16],"enhance":[17],"security,":[18],"they":[19],"remain":[20],"insufficient.":[21],"Intrusion":[22],"Detection":[23,219],"Systems":[24],"(IDS)":[25],"represent":[26],"a":[27,41,117,164,169,203,228],"crucial":[28],"complementary":[29],"line":[30],"defense":[32],"for":[33,44,175,188,238],"networks.":[35],"In":[36],"this":[37],"paper,":[38],"we":[39],"propose":[40],"novel":[42],"IDS":[43],"Internet":[46],"Things":[48],"(IoT)":[49],"that":[50],"combines":[51],"Grey":[53],"Wolf":[54],"Optimization":[55],"(GWO)":[56],"meta-heuristic,":[57],"Light":[59],"Gradient":[60],"Boosting":[61],"Machine":[62],"(LightGBM)":[63],"model,":[64,137],"and":[65,109,125,142,168,216,236,240,252,260],"Convolutional":[66],"Neural":[67],"Networks":[68],"(CNN).":[69],"On":[70,94],"one":[72],"hand,":[73,97],"GWO":[74],"reduces":[75],"number":[77],"selected":[79],"features":[80],"most":[83],"relevant":[84],"ones,":[85],"which":[86],"positively":[87],"impacts":[88],"computation":[90],"time":[91],"in":[92],"IoT.":[93],"other":[96],"LightGBM":[98,123],"presents":[99],"advantage":[101],"fast":[103],"training":[104],"with":[105,159,198,234],"low":[106,111,230],"memory":[107],"usage":[108],"performs":[110,115],"latency,":[112],"whereas":[113],"CNN":[114],"as":[116,127,180],"second":[118],"deep":[119,253],"feature":[120],"extractor":[121],"outputs":[124],"acts":[126],"final":[129],"classifier.":[130],"experimental":[132],"evaluation":[133],"our":[135,153,192,225],"new":[136],"conducted":[138],"on":[139],"CICIoT2023":[141,151,239],"CICIoMT2024":[143,190],"datasets,":[144],"demonstrated":[145],"its":[146],"high":[147,171],"performance.":[148],"For":[149],"dataset,":[152,191],"model":[154,193,226],"achieved":[155,194],"notable":[156],"performance":[157],"improvements,":[158],"an":[160,199,207,211,217],"accuracy":[161],"95.24%,":[163],"precision":[165],"95.22%,":[167],"very":[170,229],"true":[172],"positive":[173],"rate":[174,233],"several":[176],"attack":[177],"classes,":[178],"such":[179],"Distributed":[181],"Denial":[182],"Service,":[184],"reaching":[185],"99.85%.":[186],"Similarly,":[187],"even":[195],"higher":[196],"results,":[197],"Accuracy":[200,213],"99.50%,":[202],"Precision":[204],"99.52%,":[206],"F1-Score":[208],"99.51%,":[210],"Average":[212,218],"93.22%,":[215],"Rate":[220],"(DR)":[221],"92.36%.":[223],"Moreover,":[224],"provides":[227],"false":[231],"alarm":[232],"1.30%":[235],"2.45%":[237],"CICIoMT2024,":[241],"respectively.":[242],"Therefore,":[243],"it":[244],"outperforms":[245],"well-known":[246],"machine":[247],"learning":[248,254],"techniques":[249],"(RF,":[250],"SVM)":[251],"models,":[255],"namely":[256],"DNN,":[257],"CNN,":[258],"LSTM,":[259],"Multi-head":[261],"Attention.":[262]},"counts_by_year":[],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-11-27T00:00:00"}