Are Trees Really Green? A Detection Approach of IoT Malware Attacks

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Sanna, Silvia Lucia, Soi, Diego, Maiorca, Davide, Giacinto, Giorgio
Format: Preprint
Published: 2025
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866915333796790272
author Sanna, Silvia Lucia
Soi, Diego
Maiorca, Davide
Giacinto, Giorgio
author_facet Sanna, Silvia Lucia
Soi, Diego
Maiorca, Davide
Giacinto, Giorgio
contents Nowadays, the Internet of Things (IoT) is widely employed, and its usage is growing exponentially because it facilitates remote monitoring, predictive maintenance, and data-driven decision making, especially in the healthcare and industrial sectors. However, IoT devices remain vulnerable due to their resource constraints and difficulty in applying security patches. Consequently, various cybersecurity attacks are reported daily, such as Denial of Service, particularly in IoT-driven solutions. Most attack detection methodologies are based on Machine Learning (ML) techniques, which can detect attack patterns. However, the focus is more on identification rather than considering the impact of ML algorithms on computational resources. This paper proposes a green methodology to identify IoT malware networking attacks based on flow privacy-preserving statistical features. In particular, the hyperparameters of three tree-based models -- Decision Trees, Random Forest and Extra-Trees -- are optimized based on energy consumption and test-time performance in terms of Matthew's Correlation Coefficient. Our results show that models maintain high performance and detection accuracy while consistently reducing power usage in terms of watt-hours (Wh). This suggests that on-premise ML-based Intrusion Detection Systems are suitable for IoT and other resource-constrained devices.
format Preprint
id arxiv_https___arxiv_org_abs_2506_07836
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Are Trees Really Green? A Detection Approach of IoT Malware Attacks
Sanna, Silvia Lucia
Soi, Diego
Maiorca, Davide
Giacinto, Giorgio
Cryptography and Security
Artificial Intelligence
Networking and Internet Architecture
Nowadays, the Internet of Things (IoT) is widely employed, and its usage is growing exponentially because it facilitates remote monitoring, predictive maintenance, and data-driven decision making, especially in the healthcare and industrial sectors. However, IoT devices remain vulnerable due to their resource constraints and difficulty in applying security patches. Consequently, various cybersecurity attacks are reported daily, such as Denial of Service, particularly in IoT-driven solutions. Most attack detection methodologies are based on Machine Learning (ML) techniques, which can detect attack patterns. However, the focus is more on identification rather than considering the impact of ML algorithms on computational resources. This paper proposes a green methodology to identify IoT malware networking attacks based on flow privacy-preserving statistical features. In particular, the hyperparameters of three tree-based models -- Decision Trees, Random Forest and Extra-Trees -- are optimized based on energy consumption and test-time performance in terms of Matthew's Correlation Coefficient. Our results show that models maintain high performance and detection accuracy while consistently reducing power usage in terms of watt-hours (Wh). This suggests that on-premise ML-based Intrusion Detection Systems are suitable for IoT and other resource-constrained devices.
title Are Trees Really Green? A Detection Approach of IoT Malware Attacks
topic Cryptography and Security
Artificial Intelligence
Networking and Internet Architecture
url https://arxiv.org/abs/2506.07836