An ensemble deep learning based IDS for IoT using Lambda architecture

Cybersecurity

Table 8 Results for multi-classification without using lambda architecture—5 traffic types: 1 for benign and 4 for attacks

Model	Type	Precision	Recall	F1-score	Accuracy	Processing time (ms)
ANN	Normal	77.6	98.1	86.6	92.8	0.43
	DDoS	94.0	76.2	84.2
	Okiru	98.8	90.4	94.4
	Port Scan	99.4	99.0	99.2
	C &C	99.6	1.0	99.8
CNN	Normal	78.0	97.7	86.7	93.2	0.65
	DDoS	95.9	76.3	85.0
	Okiru	98.6	91.9	95.1
	Port Scan	98.8	99.7	99.3
	C &C	99.9	1.0	1.0
LSTM	Normal	78.7	96.35	86.6	92.8	0.13
	DDoS	91.1	79.1	84.6
	Okiru	98.8	90.0	94.2
	Port Scan	99.8	98.5	99.2
	C &C	99.9	1.0	99.9