LSTM-Based Model for Intrusion Detection in SDN-IoT Networks

Randa Srour Ali, Electronics and Communications Engineering Department, Faculty of Engineering, Mansoura University, Mansoura 35516, EgyptFollow
Eman AbdElhalim, Electronics and Communications Engineering Department, Faculty of Engineering, Mansoura University, Mansoura 35516, Egypt
Hala B. Nafea, Electronics and Communications Engineering Department, Faculty of Engineering, Mansoura University, Mansoura 35516, Egypt
Ahmad Hassan, Electronics and Communications Engineering Department, Faculty of Engineering, Mansoura University, Mansoura 35516, Egypt

Subject Area

Electronics and Communication Engineering

Article Type

Original Study

Abstract

Ensuring security in Software-Defined Networking (SDN)-enabled Internet of Things (IoT) environments is a critical challenge due to the increasing complexity of cyber threats. This study proposes an intrusion detection system based on Long Short-Term Memory (LSTM) networks to enhance security in SDN-IoT networks. The research methodology involves data preprocessing, feature selection, and model training using the SDN-IoT dataset. Data preprocessing includes handling missing values and applying various encoding (label, one-hot, frequency, binary) and normalization (minmax, log, robust, z-scaling) techniques to optimize feature representation. Feature selection, conducted using Random Forest and correlation matrix analysis, reduces the feature set from 33 to 20, improving computational efficiency while maintaining high accuracy. The proposed LSTM model consists of four layers with 64 units each and incorporates dropout for regularization. It is trained over 20 epochs using the Adam optimizer and categorical cross-entropy loss function. The model achieves a peak accuracy of 98.5% with z-scaling and the optimized feature set, outperforming other configurations. Performance evaluation using precision, recall, and F1-score (each at 0.98) confirms the model's effectiveness in accurately classifying network traffic. Further validation through the confusion matrix and Receiver Operating Characteristic (ROC) curves reinforces its reliability.

Keywords

Internet of things (IoT); Long short-term memory; Network Security; Software-defined networks; SDN-IoT dataset

Creative Commons License

This work is licensed under a Creative Commons Attribution 4.0 License.

Recommended Citation

Ali, Randa Srour; AbdElhalim, Eman; Nafea, Hala B.; and Hassan, Ahmad (2025) "LSTM-Based Model for Intrusion Detection in SDN-IoT Networks," Mansoura Engineering Journal: Vol. 50 : Iss. 4 , Article 8.
Available at: https://doi.org/10.58491/2735-4202.3287

Download